Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/XqBlLDTXF0fEZbJJUxvKzOhIzkE.roa
File: XqBlLDTXF0fEZbJJUxvKzOhIzkE.roa (raw, json)
Hash identifier: Ys2joeMfVYtURVZuCWJc5bJjAfr6w/Pag2AUn3ycuEo=
Subject key identifier: 5E:A0:65:2C:34:D7:17:47:C4:65:B2:49:53:1B:CA:CC:E8:48:CE:41
Certificate issuer: /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial: 0927F50C
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/XqBlLDTXF0fEZbJJUxvKzOhIzkE.roa
Signing time: Fri 27 May 2022 10:37:13 +0000
ROA not before: Fri 27 May 2022 10:37:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34984
IP address blocks: 45.12.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153613580 (0x927f50c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Validity
Not Before: May 27 10:37:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ea0652c34d71747c465b249531bcacce848ce41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b1:d6:2e:0e:56:b2:69:a2:d0:83:ae:94:2e:
86:11:39:26:39:64:f4:33:ba:a2:7e:d6:4a:ea:ea:
11:fd:60:5d:0e:e4:64:22:83:d8:65:8d:1c:0d:30:
46:98:3f:cb:34:bb:1c:88:1a:37:42:85:83:2a:1d:
11:2a:00:56:a6:60:30:6c:0c:c0:ac:79:07:7b:bf:
6c:23:a4:8d:14:3b:31:e9:9f:09:10:e1:f5:41:03:
0c:01:e7:f1:11:01:c1:c2:86:02:ff:32:76:fe:71:
e7:ef:ef:c2:60:4d:64:50:62:de:8c:f3:89:81:bd:
93:10:a0:68:02:7c:fd:42:cc:0a:c9:10:ac:c5:c2:
2a:28:f6:a8:c4:af:c0:42:ab:a3:60:c0:d2:73:05:
08:7d:86:0f:4c:74:07:bd:9d:11:e6:c2:5a:dc:3e:
9c:62:fb:27:a7:36:2c:ec:8e:82:4a:71:f6:0e:e6:
b0:36:b5:d5:d7:33:cc:8f:8c:7e:fb:c7:7f:91:cc:
46:27:44:b0:79:3c:be:90:4d:84:e8:4f:04:f5:03:
0f:98:26:e4:cb:06:ff:7d:b0:55:a5:e1:e0:cc:9c:
85:e9:e0:b7:47:ad:bf:ce:be:ef:82:c8:2f:95:cc:
9c:61:47:c3:1c:d1:7a:f3:07:84:3f:45:99:34:a7:
5a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A0:65:2C:34:D7:17:47:C4:65:B2:49:53:1B:CA:CC:E8:48:CE:41
X509v3 Authority Key Identifier:
keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/XqBlLDTXF0fEZbJJUxvKzOhIzkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.185.0/24
Signature Algorithm: sha256WithRSAEncryption
88:be:35:ed:ff:36:31:51:2a:55:db:bf:bb:ea:e3:db:16:b3:
3e:7c:62:db:15:47:7c:c7:67:27:8e:aa:5b:8e:13:c2:b7:3c:
d2:78:03:c5:4e:d4:e9:71:5b:35:3a:b4:c0:7a:76:3b:63:64:
07:83:f5:75:59:dc:b6:a2:ea:54:59:af:77:42:a9:0d:42:20:
20:5f:e6:01:fd:8f:56:1a:c2:cf:5b:22:4a:fc:ac:68:10:38:
4d:21:86:5f:45:6c:2c:d6:8c:72:3b:47:53:92:c6:e5:b8:f5:
a8:b8:f3:27:97:3c:da:51:17:b7:7a:85:40:39:39:73:a3:0b:
8f:28:51:8b:a9:a2:10:fc:c9:a6:ae:b2:f4:ae:40:fc:2a:6b:
32:5a:0b:b2:f1:41:50:24:2e:d1:10:06:a0:9e:84:d7:71:0a:
30:6e:56:81:22:f8:a0:db:2d:75:76:94:ed:7f:96:9f:80:d4:
70:e0:70:64:46:4c:61:5d:44:a2:ab:28:9e:16:90:2b:d6:7d:
df:7a:c3:bb:69:65:1f:f0:3a:a4:f9:8b:74:41:67:7e:72:03:
86:f0:b3:a4:a5:26:46:f6:4d:06:56:22:ce:d0:bb:c7:52:1d:
45:5a:97:93:94:4f:ef:2a:60:f4:e8:75:02:9d:33:ea:f1:df:
ed:9d:e6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:01 2023 by rpki-client on console-fra.rpki-client.org