Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/1-apJn-J7Dez8AresifgLNzhI52s.roa
File: 1-apJn-J7Dez8AresifgLNzhI52s.roa (raw, json)
Hash identifier: EFjs7pwZ0aSpKCUcr7A4Peu9njAgdZdaaHCMwQVVJks=
Subject key identifier: F9:AA:49:9F:E2:7B:0D:EC:FC:02:B7:AC:89:F8:0B:37:38:48:E7:6B
Certificate issuer: /CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Certificate serial: 01842390039987DD44B5C1B6DD052C44E177
Authority key identifier: 21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/1-apJn-J7Dez8AresifgLNzhI52s.roa
Signing time: Sat 29 Oct 2022 11:45:51 +0000
ROA not before: Sat 29 Oct 2022 11:45:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47330
IP address blocks: 45.90.75.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:23:90:03:99:87:dd:44:b5:c1:b6:dd:05:2c:44:e1:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=215266435617fa0f1fd2837ec80c6d83b0b9d608
Validity
Not Before: Oct 29 11:45:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9aa499fe27b0decfc02b7ac89f80b373848e76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:47:0a:04:c8:7e:7c:76:17:a6:db:4d:c0:69:
26:7b:fa:69:91:a6:57:b2:0f:2b:02:f0:bd:12:9d:
32:71:f7:d4:a3:79:52:ae:8b:d3:0a:f5:8a:05:53:
87:4c:93:a6:2f:03:de:90:c4:4e:df:55:8b:16:03:
d6:23:a7:4d:be:62:fb:c3:a6:ea:0f:ea:a3:a9:5f:
b2:e7:c8:06:0f:9d:10:6d:9f:f4:da:e7:73:28:91:
47:d1:7c:67:c1:79:48:5b:15:6a:93:7f:13:91:bd:
66:a2:a8:e6:1a:4f:f3:f5:bf:8c:c6:94:d5:7a:4e:
85:74:ad:65:43:97:29:d4:74:f6:9f:6c:05:16:70:
41:7f:ee:a3:42:24:8b:49:cd:63:39:9b:15:41:4f:
94:33:93:23:b7:f2:b2:c1:dc:59:86:a8:f8:ed:83:
04:fe:7a:0c:8c:a7:73:ec:c7:a5:a5:4c:84:f3:17:
b8:a5:56:43:85:66:b2:0c:c0:85:14:06:80:29:c4:
d9:42:8b:f9:ab:78:dc:e9:9c:67:e9:6f:6c:03:09:
c6:da:f4:04:94:82:50:40:c6:4e:ab:81:be:74:44:
1f:da:c5:a6:d4:96:1c:44:4e:48:b3:33:0f:7b:5d:
13:67:a8:e2:af:74:ed:34:0e:b6:95:69:e2:43:fe:
b0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AA:49:9F:E2:7B:0D:EC:FC:02:B7:AC:89:F8:0B:37:38:48:E7:6B
X509v3 Authority Key Identifier:
keyid:21:52:66:43:56:17:FA:0F:1F:D2:83:7E:C8:0C:6D:83:B0:B9:D6:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVJmQ1YX-g8f0oN-yAxtg7C51gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/1-apJn-J7Dez8AresifgLNzhI52s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/c072ae-15d7-42a8-bfc2-bc93ca679e1f/1/IVJmQ1YX-g8f0oN-yAxtg7C51gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.75.0/24
Signature Algorithm: sha256WithRSAEncryption
36:67:15:d4:7b:4f:b4:a9:34:01:3c:c7:09:a1:46:9d:d9:50:
8f:05:d1:61:c1:f2:f7:4c:c0:d6:e1:54:0f:24:5d:e9:00:2b:
dd:11:6e:38:71:6b:17:ab:09:85:b9:14:d0:95:16:35:1e:84:
a5:90:c7:5a:f9:67:51:e2:90:c0:64:ac:92:17:44:39:cc:c0:
a9:e2:b1:52:4e:e2:a9:33:f3:0a:bb:af:4d:8c:8a:75:5a:f5:
27:5e:9f:b0:60:ef:f1:37:c7:dc:de:4c:00:3a:1c:5a:70:f7:
05:a3:3a:0c:17:77:19:a6:df:5e:74:0f:73:92:69:c7:04:30:
a2:06:04:34:8e:6b:6c:be:87:40:d2:a3:b2:80:da:d4:28:7a:
be:db:ab:76:76:0f:22:c5:76:2c:7f:0c:98:91:08:be:45:a9:
90:99:f5:fb:01:48:19:52:7a:ab:cc:f6:aa:6d:46:0b:ab:95:
78:fd:b3:8d:80:66:fa:22:22:06:59:cb:72:ad:84:3b:79:ce:
5a:03:48:f0:da:25:c2:d1:59:d7:f2:54:7f:95:7c:05:7a:e2:
02:a3:37:00:d8:40:1c:7c:36:bd:01:b4:7f:11:b3:77:c6:d9:
dd:3f:f3:1c:8d:a8:77:13:43:4e:8f:2a:84:32:d9:1e:5e:ed:
ba:ff:03:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:03 2023 by rpki-client on console-fra.rpki-client.org