Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/fOEo0ZC5neUHeArURq3QPYP84hA.roa
File: fOEo0ZC5neUHeArURq3QPYP84hA.roa (raw, json)
Hash identifier: +/b3fkmJ01DNm2ZwzCtTrraSCDLyMsKHIxBBIDabnIw=
Subject key identifier: 7C:E1:28:D1:90:B9:9D:E5:07:78:0A:D4:46:AD:D0:3D:83:FC:E2:10
Certificate issuer: /CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Certificate serial: 083B0339
Authority key identifier: AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/fOEo0ZC5neUHeArURq3QPYP84hA.roa
Signing time: Sat 01 Jan 2022 15:58:41 +0000
ROA not before: Sat 01 Jan 2022 15:58:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59909
IP address blocks: 45.9.223.0/24 maxlen: 24
45.9.222.0/24 maxlen: 24
45.9.221.0/24 maxlen: 24
45.9.220.0/22 maxlen: 24
45.9.220.0/24 maxlen: 24
2a0e:1500::/29 maxlen: 38
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138085177 (0x83b0339)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Validity
Not Before: Jan 1 15:58:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ce128d190b99de507780ad446add03d83fce210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ba:d7:c0:f7:7c:64:f9:96:ab:4c:17:29:b3:
3b:9e:32:71:05:d2:f6:81:85:dc:5e:c0:9e:18:2b:
c8:bf:17:69:39:2a:4d:e0:fd:80:0a:84:47:ed:a5:
af:f6:30:8d:5a:78:3b:b8:00:52:86:9e:66:c3:d9:
c0:e1:c3:6c:dc:45:8f:7a:1d:67:09:96:46:ac:69:
87:61:ff:42:b3:40:77:67:70:25:d5:0d:0d:40:02:
4f:23:7e:3a:b3:cd:d3:8f:b4:cb:69:2b:18:28:e8:
81:e3:56:70:28:89:9e:c8:d2:19:81:0a:b5:42:d3:
2f:e7:8d:21:66:8f:de:9b:41:6c:f9:09:d1:73:a9:
ac:13:45:76:f1:70:fa:13:26:85:2d:30:4d:1b:a7:
6e:6f:ff:97:b4:09:79:ab:2c:c6:ce:c9:c3:54:5c:
55:8b:f0:f9:00:a2:48:fd:78:e8:01:eb:fb:9a:97:
62:cf:6f:54:78:f8:a1:82:68:ae:9f:7e:df:68:fb:
ee:42:40:01:78:60:6f:d6:12:1c:2a:5b:7f:23:32:
d1:c5:82:be:b0:bd:7c:ed:67:7e:6c:92:ae:39:cc:
19:59:a8:d1:d1:09:c2:8e:5c:61:6a:f5:63:6f:44:
31:2f:af:34:34:c9:ba:17:64:9e:f9:cf:55:61:98:
ac:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E1:28:D1:90:B9:9D:E5:07:78:0A:D4:46:AD:D0:3D:83:FC:E2:10
X509v3 Authority Key Identifier:
keyid:AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/fOEo0ZC5neUHeArURq3QPYP84hA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.220.0/22
IPv6:
2a0e:1500::/29
Signature Algorithm: sha256WithRSAEncryption
95:91:d3:00:04:57:6b:34:7c:7f:fd:e3:5a:20:1b:48:70:f3:
4e:29:66:e6:2d:67:98:a6:b5:29:37:a5:a6:9f:d3:67:76:c4:
c6:d4:0a:15:09:27:46:e2:7f:59:7e:96:15:4a:28:9e:ed:c3:
3c:cb:52:89:52:8e:4c:1a:59:e0:16:9e:ce:07:8c:28:ea:fe:
f5:8f:9c:59:33:94:bf:a6:8e:e9:e4:76:ba:53:88:8f:e3:d8:
32:f1:33:63:c5:3c:a3:2f:c6:e8:ca:c7:57:7d:e8:a6:62:a3:
ca:cd:96:c5:6d:de:ee:c1:2f:55:5f:93:c1:d9:b5:6d:35:74:
b4:9d:24:54:f4:e8:af:57:2f:11:65:4e:d4:52:50:8a:bd:65:
c7:a1:d4:c1:f4:4c:91:22:ea:b7:8f:fa:e3:a5:b4:9b:68:97:
41:03:0c:6f:e6:9f:a3:c6:51:64:32:57:9d:03:a2:8c:97:99:
8c:0d:59:17:86:e5:aa:e7:6c:2b:17:0d:ad:5f:2a:ad:2f:cc:
4d:c4:9a:4c:f4:d6:a6:49:7f:f1:9f:3b:18:f0:c6:56:8d:d2:
2f:26:41:57:f1:93:44:5f:a1:e9:4c:c6:3b:ed:e9:d6:7a:29:
eb:87:06:07:be:ad:d2:92:d0:0f:87:63:bd:25:c1:18:58:c4:
a3:ee:03:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:49 2023 by rpki-client on console-ams.rpki-client.org