Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/pdVfCAFch_hLVZYu0WcgLMIFvOs.roa
File: pdVfCAFch_hLVZYu0WcgLMIFvOs.roa (raw, json)
Hash identifier: +uR1v9zJRz522idMG4AHnck674gBnRfoUItOMYVSXzQ=
Subject key identifier: A5:D5:5F:08:01:5C:87:F8:4B:55:96:2E:D1:67:20:2C:C2:05:BC:EB
Certificate issuer: /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial: 0904590B
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/pdVfCAFch_hLVZYu0WcgLMIFvOs.roa
Signing time: Tue 10 May 2022 03:11:59 +0000
ROA not before: Tue 10 May 2022 03:11:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209181
IP address blocks: 45.12.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151279883 (0x904590b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Validity
Not Before: May 10 03:11:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5d55f08015c87f84b55962ed167202cc205bceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:85:c3:af:9e:92:85:d7:48:7f:2a:eb:c6:3d:
24:1e:2e:3b:c0:f7:4c:e7:66:7c:4e:d0:26:d0:1a:
e1:77:fe:41:a3:3c:d4:d7:06:7d:5a:e2:a8:45:07:
ea:b6:6d:dc:ea:54:84:87:48:5a:1f:c5:62:07:eb:
c1:c3:77:8e:64:14:c8:d5:5c:a5:74:0e:6c:26:ce:
85:fc:92:05:e6:08:3c:ad:00:ab:cd:f6:98:e2:6e:
78:c8:31:d3:66:a3:cc:33:ba:87:17:e4:6c:f9:b7:
ce:30:9a:39:2d:25:16:d8:df:ee:ac:37:11:d2:9e:
d3:5a:bf:f0:1a:ab:03:23:da:d9:ad:7c:a2:8f:06:
e8:6a:c4:65:f8:1d:c1:3f:38:1f:a3:8c:ea:cb:31:
aa:a1:02:00:df:f1:a6:60:a3:63:ef:fc:0a:7f:0f:
c0:e2:f8:63:47:85:83:fe:63:e5:b5:93:d3:61:5e:
b0:83:b2:5d:ee:f0:dc:74:f4:ba:03:3e:06:b8:b8:
14:23:4b:b0:69:2a:10:a4:e8:3a:24:9a:ab:ac:0b:
cf:3f:4e:72:74:bc:e9:c7:59:d6:0d:5e:70:60:6b:
49:74:7e:2a:1e:6a:39:63:f0:e1:ec:7e:fb:73:9c:
d3:1f:66:1f:48:c4:f4:c3:5c:74:7e:13:b4:1d:06:
b2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:D5:5F:08:01:5C:87:F8:4B:55:96:2E:D1:67:20:2C:C2:05:BC:EB
X509v3 Authority Key Identifier:
keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/pdVfCAFch_hLVZYu0WcgLMIFvOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.186.0/24
Signature Algorithm: sha256WithRSAEncryption
25:8c:05:de:5e:fc:c4:fb:45:15:c7:5a:d7:8e:bc:30:59:f3:
65:38:4c:fb:6e:8e:81:49:20:a7:9b:19:5a:e4:28:c0:e2:b4:
1c:92:0f:05:a6:9a:51:b8:38:bb:36:2a:e4:55:02:bc:fb:cd:
75:4a:95:8f:aa:5f:55:dd:63:42:2b:02:53:13:6f:3c:af:8c:
ea:06:f7:e6:70:0b:2a:bf:37:85:98:c1:75:df:73:2d:f0:d5:
b2:30:f5:52:e7:77:df:2f:8e:29:25:c5:f4:c7:e6:f9:d1:69:
79:f0:16:c3:73:7c:1b:d7:41:18:70:f5:93:fc:f1:f5:5c:c2:
26:4f:44:76:81:33:5b:c2:27:a1:9e:c5:36:63:76:f8:fd:48:
83:8c:70:9f:58:a9:a0:9a:48:86:f5:3b:bf:0c:b5:bc:e3:88:
d1:75:01:f5:c5:f1:92:2d:38:97:b1:91:e6:87:22:b0:d6:84:
46:d1:8b:49:c9:d6:3f:c6:5b:58:80:b5:21:9c:15:bd:0a:9b:
ab:4a:b6:63:5b:3e:02:79:13:a5:25:34:ba:37:22:e7:90:53:
cd:77:bc:9a:df:37:c7:68:af:7e:94:7b:78:d2:68:54:05:74:
c1:91:7b:d2:ce:b2:a9:1a:a2:09:b2:2f:45:ba:de:51:ba:3f:
ec:0d:a1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:01 2023 by rpki-client on console-fra.rpki-client.org