Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/JbQMJQinM6EkoRWAfgVkLmsh3yM.roa
File: JbQMJQinM6EkoRWAfgVkLmsh3yM.roa (raw, json)
Hash identifier: 1mq7SGOsE/qDAg779R/ENbLzEokHMXUQ7ZWlm80dDes=
Subject key identifier: 25:B4:0C:25:08:A7:33:A1:24:A1:15:80:7E:05:64:2E:6B:21:DF:23
Certificate issuer: /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial: 07E17128
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/JbQMJQinM6EkoRWAfgVkLmsh3yM.roa
Signing time: Sat 01 Jan 2022 05:52:12 +0000
ROA not before: Sat 01 Jan 2022 05:52:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.95.116.0/22 maxlen: 24
45.12.186.0/23 maxlen: 24
45.12.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132215080 (0x7e17128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Validity
Not Before: Jan 1 05:52:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=25b40c2508a733a124a115807e05642e6b21df23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:94:c9:fb:46:63:c6:93:2c:32:bf:34:0b:3b:
61:0e:3a:b3:22:7d:af:47:98:c3:bb:55:31:30:57:
3f:8c:27:a8:ef:80:e1:e5:9c:66:9a:33:bf:0c:9a:
b5:36:aa:f5:f7:ce:4a:63:7d:97:fb:27:72:ea:04:
c2:69:65:be:17:2b:aa:1c:64:5e:5a:0f:c5:9d:26:
db:29:cf:74:34:9e:8d:92:12:06:c3:57:a1:bd:10:
a0:96:bb:0c:3a:f9:5b:66:49:96:b1:19:dc:90:56:
a5:1b:37:ec:83:f4:85:f2:38:69:23:19:63:25:11:
48:21:03:c0:1d:08:91:b6:a1:41:ec:46:77:4e:9f:
13:58:5f:9a:dc:52:f9:3a:27:cf:1c:01:21:83:38:
5c:c8:d7:b4:b0:91:b1:cb:b4:c4:d2:61:11:0c:88:
33:d8:93:72:c0:0c:13:a9:db:42:f1:39:ac:27:4f:
80:f7:b4:38:a4:e5:ef:f5:f3:b0:0e:ca:f6:e9:9f:
89:9d:74:88:e6:5b:30:f5:95:1f:78:02:53:f5:d1:
38:58:ce:69:2e:37:61:83:09:cd:62:ac:56:01:f9:
b3:56:6a:db:93:14:49:d2:1b:b8:d5:f4:da:84:85:
29:91:93:c1:a8:6e:c3:0e:d7:2b:42:14:65:e2:f4:
c6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:B4:0C:25:08:A7:33:A1:24:A1:15:80:7E:05:64:2E:6B:21:DF:23
X509v3 Authority Key Identifier:
keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/JbQMJQinM6EkoRWAfgVkLmsh3yM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.185.0-45.12.187.255
45.95.116.0/22
Signature Algorithm: sha256WithRSAEncryption
73:f3:0d:af:f3:ce:f1:f5:f5:76:93:05:0e:8b:e0:df:9d:1a:
39:c8:98:8c:f4:99:56:5a:a1:73:fb:8a:c2:45:b8:3c:d6:67:
ff:6c:12:ec:b6:ee:49:92:98:c5:19:dc:00:3a:82:b2:10:64:
56:fa:2b:0b:be:54:a4:7b:fb:1b:7c:91:cf:d4:ea:9f:fb:64:
85:fa:ba:89:bd:ad:46:99:66:da:04:e1:b0:13:b7:94:6d:3b:
58:55:df:93:dc:f3:64:b8:bf:9d:82:bf:6c:12:98:24:0b:d5:
cd:c8:0b:ec:ba:38:fb:3c:5f:84:12:a3:0c:6e:53:cf:8a:82:
84:b9:cf:cb:47:8c:14:ae:6e:96:81:50:dd:45:0b:0b:53:96:
75:5a:7a:ba:8e:b4:c5:84:37:b3:e4:03:c5:5a:b7:38:07:6d:
1d:63:55:a2:1e:da:c4:c4:6b:5c:99:67:e3:e2:36:f4:19:e5:
4b:ab:e7:df:5c:53:19:22:66:30:33:35:ec:37:56:10:de:aa:
a1:7a:56:7c:60:c2:b5:4e:2a:8b:e4:f6:c1:ff:8f:48:3e:e0:
ef:6d:65:76:32:c5:8f:80:14:13:5a:a3:49:ae:aa:9e:bc:bd:
a1:75:4a:da:ea:57:1a:23:3a:dc:3a:81:e0:fe:d4:7e:a4:a4:
39:51:13:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:38 2023 by rpki-client on console-ams.rpki-client.org