Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/U6O5Iw8KXzgc9bsIfiPaPUglD3g.roa
File: U6O5Iw8KXzgc9bsIfiPaPUglD3g.roa (raw, json)
Hash identifier: PNw4xATDrgYhvXUcPumkZcS1LJ466QFM/EZKEvan04c=
Subject key identifier: 53:A3:B9:23:0F:0A:5F:38:1C:F5:BB:08:7E:23:DA:3D:48:25:0F:78
Certificate issuer: /CN=2c7c0a771b30d274285080ddc42e36798396f22c
Certificate serial: 03C88091
Authority key identifier: 2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/U6O5Iw8KXzgc9bsIfiPaPUglD3g.roa
Signing time: Sat 01 Jan 2022 06:01:07 +0000
ROA not before: Sat 01 Jan 2022 06:01:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62416
IP address blocks: 45.92.212.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63471761 (0x3c88091)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c7c0a771b30d274285080ddc42e36798396f22c
Validity
Not Before: Jan 1 06:01:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53a3b9230f0a5f381cf5bb087e23da3d48250f78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:59:4a:bb:bf:e4:f1:bd:af:e3:40:1c:aa:b0:
3b:4a:b7:d2:a8:a9:e6:7b:db:73:14:45:23:81:aa:
ef:ef:53:62:bb:0e:b5:c6:eb:56:a1:10:7a:c7:2a:
cb:67:1b:b5:8e:74:15:d6:f1:a7:92:e3:25:65:d6:
05:b9:36:9d:63:f6:0a:09:ae:13:bb:ec:2c:17:ac:
46:73:af:34:bc:6e:4b:23:4c:ec:31:6d:eb:5b:3f:
79:be:d8:3d:79:b1:95:04:b1:a3:f3:22:b9:af:bd:
bd:8c:3c:64:87:84:d5:b4:25:47:3f:39:27:9a:2a:
99:1d:96:ec:3f:62:21:b5:5d:7e:2c:20:a3:f2:c1:
06:1d:33:5d:74:c9:df:53:64:6f:ba:96:c7:d1:08:
74:0d:a0:c0:46:96:09:c9:b8:87:e3:85:93:5f:8c:
75:81:20:30:3d:94:49:c2:aa:f7:3f:5f:66:bc:67:
61:96:e7:e7:ce:ce:19:1f:81:68:fc:95:cb:4a:bc:
4e:0d:48:fa:5f:67:ba:d9:ff:a1:7a:85:52:1b:99:
9b:09:37:0b:77:1b:a5:12:e4:4c:5b:a9:eb:b5:b0:
7a:16:ad:9b:9f:3c:39:aa:ff:49:6e:f2:58:23:89:
83:d0:36:23:0e:77:e5:a3:fb:81:55:26:94:89:6c:
ce:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A3:B9:23:0F:0A:5F:38:1C:F5:BB:08:7E:23:DA:3D:48:25:0F:78
X509v3 Authority Key Identifier:
keyid:2C:7C:0A:77:1B:30:D2:74:28:50:80:DD:C4:2E:36:79:83:96:F2:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHwKdxsw0nQoUIDdxC42eYOW8iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/U6O5Iw8KXzgc9bsIfiPaPUglD3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d5f801-4426-4f45-8f26-9ccdd3c873a6/1/LHwKdxsw0nQoUIDdxC42eYOW8iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.212.0/22
Signature Algorithm: sha256WithRSAEncryption
83:e0:fd:3a:5b:58:9c:fa:12:70:56:90:70:a5:9c:16:95:01:
0d:da:54:d2:29:7e:f3:23:04:9d:e4:4d:b6:3e:90:32:8d:ab:
20:50:87:e6:75:f1:d1:80:4e:ce:46:e9:b4:d4:92:68:84:bd:
05:ab:d2:bf:c2:76:4c:ec:88:0d:d8:f7:e5:b5:83:64:aa:e3:
57:06:1c:58:c5:73:c5:8d:7e:77:c0:cb:5e:29:61:c9:45:60:
85:c3:c7:75:fe:9a:1f:eb:02:f4:0f:cb:01:60:f9:74:09:68:
69:fc:97:9a:be:ca:31:2e:76:b4:40:98:b6:75:3a:28:18:bb:
b7:9f:c7:0e:1a:33:ed:52:48:bb:7e:88:ef:2b:4b:9b:9b:9f:
ef:45:24:a6:5d:dc:86:54:9a:12:ee:7a:4d:60:70:5e:a3:e8:
3e:0d:56:62:51:2e:0e:b5:25:15:4d:1a:2d:54:d8:32:76:99:
43:2c:66:db:78:b8:70:67:3f:1f:14:cd:84:a0:38:f6:67:88:
4c:25:2c:77:df:6a:87:0b:d4:14:d0:5c:c2:39:39:0d:42:b1:
93:7e:e0:4f:3c:2e:9d:a1:79:d9:dd:3a:0f:57:75:6f:c7:9c:
fb:99:a7:c4:6a:b3:ff:cd:88:0e:9f:6d:d5:e4:a3:17:a7:b6:
3c:a9:99:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:38 2023 by rpki-client on console-ams.rpki-client.org