Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/R7NxMSciHYth8Of0m5GdLAeAukI.roa
File: R7NxMSciHYth8Of0m5GdLAeAukI.roa (raw, json)
Hash identifier: Odgvc1alBAlkuk8aOmMAnKWgBob6RW3b8qNjtigJA+o=
Subject key identifier: 47:B3:71:31:27:22:1D:8B:61:F0:E7:F4:9B:91:9D:2C:07:80:BA:42
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 018248EE755975DC79788B894B2371EF52CC
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/R7NxMSciHYth8Of0m5GdLAeAukI.roa
Signing time: Fri 29 Jul 2022 07:49:23 +0000
ROA not before: Fri 29 Jul 2022 07:49:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51765
IP address blocks: 45.83.238.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:48:ee:75:59:75:dc:79:78:8b:89:4b:23:71:ef:52:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jul 29 07:49:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=47b3713127221d8b61f0e7f49b919d2c0780ba42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9a:cc:07:e8:c9:cf:c7:09:fa:38:0d:7a:f3:
72:49:db:7c:7d:62:24:b2:1a:f5:8c:a2:5e:ce:3b:
55:aa:92:70:ec:6f:70:fc:24:e0:7c:65:35:ec:29:
e1:ab:78:95:9c:16:b3:81:be:7d:b3:35:16:4a:c5:
c0:1a:a2:bb:82:2c:c6:77:2e:0d:bb:b4:46:07:1f:
ad:04:83:70:a3:2f:df:13:e5:9c:89:a3:93:0c:8f:
1d:cd:15:30:b8:0b:0b:52:95:fc:19:ca:e9:fc:42:
0b:cf:02:d5:5e:e1:ff:b9:49:fc:7a:4e:24:6c:96:
51:be:0a:63:91:10:93:bc:85:2e:86:be:6b:34:f9:
59:ad:ca:50:bd:39:f7:17:f2:89:27:fa:0b:15:e9:
bc:d0:f0:a2:9c:53:03:8b:b2:12:d4:06:87:84:a0:
b2:c1:22:00:5b:12:48:19:0b:90:79:4e:0c:43:d0:
47:16:74:3f:74:8d:55:68:11:b8:c4:6a:33:31:54:
ac:4e:c5:47:8e:f5:b7:9e:7e:58:d5:ce:97:e1:40:
80:ff:ef:de:7e:0a:04:33:90:4c:28:2b:79:a6:ed:
81:2d:3c:b4:8b:9f:a1:09:d1:3b:78:1e:2f:dd:09:
fd:22:a0:86:b9:37:89:24:8e:0d:98:56:66:c9:e4:
c7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B3:71:31:27:22:1D:8B:61:F0:E7:F4:9B:91:9D:2C:07:80:BA:42
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/R7NxMSciHYth8Of0m5GdLAeAukI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.238.0/24
Signature Algorithm: sha256WithRSAEncryption
17:81:e8:46:55:d8:b5:08:e0:29:9a:94:b0:5e:8b:b5:cd:ff:
b1:4a:c2:97:a7:30:f2:94:1f:5f:f6:4e:16:d3:88:e1:86:e7:
74:8f:4e:e6:74:8d:cd:35:47:69:97:3a:8f:db:3d:ec:39:83:
91:66:2d:01:34:44:1a:4e:8e:92:69:56:62:5d:7c:24:d3:5a:
7c:26:27:75:9d:56:b4:49:3a:11:c7:c2:29:96:7c:e1:b6:06:
3d:ea:37:52:60:23:d8:34:c6:1f:12:4a:40:7b:7f:14:10:05:
e9:cb:16:37:b6:b1:b1:ec:1e:1b:94:54:58:f1:95:01:28:88:
98:dd:4b:17:8e:eb:e6:50:f8:f9:88:29:10:af:d5:aa:41:f8:
1e:3d:e8:ec:44:15:75:30:0c:fc:39:25:8f:be:a8:ac:ad:15:
b9:20:2f:49:f0:26:b9:a5:41:eb:8c:fb:69:a1:ae:25:0f:60:
42:58:ba:46:82:7b:0b:79:65:7b:76:fb:96:ab:84:ee:a5:18:
e0:9b:42:1c:db:c7:6c:ac:9a:e1:c8:f7:46:17:83:d9:da:f7:
23:6e:4a:b7:67:e1:dd:b5:31:2e:18:c8:75:55:ae:b8:c8:fe:
2f:da:52:be:38:eb:1b:fe:36:3a:3d:67:17:21:b7:e2:24:69:
16:0a:cd:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:39 2023 by rpki-client on console-ams.rpki-client.org