Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/1-b_5BofvvM6IjEhRkkhJz4Gw-qo.roa
File: 1-b_5BofvvM6IjEhRkkhJz4Gw-qo.roa (raw, json)
Hash identifier: HByXm4ZG0Vbj/Uyz1nZ32atyN5dtNTrmH8Mzaq1vprM=
Subject key identifier: F9:BF:F9:06:87:EF:BC:CE:88:8C:48:51:92:48:49:CF:81:B0:FA:AA
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 06F6C667
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/1-b_5BofvvM6IjEhRkkhJz4Gw-qo.roa
Signing time: Sat 01 Jan 2022 07:01:19 +0000
ROA not before: Sat 01 Jan 2022 07:01:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209916
IP address blocks: 45.157.116.0/22 maxlen: 24
194.147.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116835943 (0x6f6c667)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Jan 1 07:01:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9bff90687efbcce888c4851924849cf81b0faaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:86:8b:64:07:29:ef:48:14:87:b8:96:5b:95:
60:ee:70:36:6f:dd:54:4d:80:b1:8e:f0:fc:c3:0c:
4b:79:0c:62:b0:45:35:d6:a1:32:18:92:89:de:6b:
ec:fd:ba:d6:73:a8:7f:38:4b:65:5e:54:26:82:99:
da:d8:42:a3:15:1c:94:45:a0:d2:f2:e6:7d:c0:9b:
64:02:71:98:f0:0c:ad:3c:5f:24:67:b5:d3:97:24:
77:c3:2f:2b:81:9b:94:34:77:4d:76:ba:bd:b0:54:
b3:91:66:5a:fa:8d:d0:5c:1d:d3:62:53:07:53:2d:
75:92:d0:f5:eb:a8:b4:3b:3d:2b:b1:bb:9c:9e:a1:
90:45:9a:a9:b7:20:63:b1:26:75:02:d8:5b:c2:0b:
fb:da:1e:43:65:66:cf:8c:85:4e:24:fa:59:de:ff:
24:23:44:f3:38:6f:3c:e9:96:ff:c2:62:f4:5c:5e:
ce:c0:5a:8b:37:74:a3:7c:4b:bb:80:61:a7:0a:2b:
d7:4d:f4:79:a3:32:46:95:7d:c3:03:2d:cf:9e:16:
95:c7:8f:f8:7f:db:1f:9d:b7:90:0f:6a:ac:21:94:
36:7e:7a:65:73:a0:ac:81:ca:54:17:dd:a8:f3:8c:
d0:95:3a:78:bf:44:0e:74:06:36:ae:26:d1:6d:13:
51:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BF:F9:06:87:EF:BC:CE:88:8C:48:51:92:48:49:CF:81:B0:FA:AA
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/1-b_5BofvvM6IjEhRkkhJz4Gw-qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.116.0/22
194.147.109.0/24
Signature Algorithm: sha256WithRSAEncryption
10:d8:e0:47:cd:8c:4f:96:5d:3f:02:f1:32:e8:54:85:5b:0a:
dd:81:93:53:e4:6f:cc:26:bc:d1:8e:40:b1:e9:a5:f9:80:e3:
73:cc:8f:ef:e6:c7:b6:8b:47:0c:0b:c5:aa:32:74:09:61:5b:
81:cc:58:d5:ae:7e:a6:95:cd:21:30:ad:57:3d:1e:4c:ea:63:
8c:be:11:86:77:34:0b:6c:e7:7a:cf:23:3b:8d:7c:5e:25:18:
29:60:69:fa:28:19:94:12:e4:64:d7:fe:1b:e3:13:f3:c6:2b:
20:c6:6a:7b:e6:ba:c1:b4:41:38:3b:71:f9:d4:31:9c:7e:c2:
00:3f:60:9f:18:0f:b5:fd:a8:b9:39:b5:de:4d:b6:15:6d:61:
c3:f9:84:b2:08:1d:6a:db:56:77:df:9c:8f:c9:af:d3:3d:16:
ad:25:ee:8d:28:c4:cd:92:bc:5b:1b:b2:f9:3c:ed:c6:61:31:
30:33:42:bd:e4:89:79:65:b5:ae:9b:10:6c:55:76:31:20:01:
94:35:46:08:1d:aa:99:7b:02:9b:93:f7:f4:39:81:89:3b:8b:
b8:2e:aa:1d:dd:6f:ce:0e:10:87:21:25:10:71:c3:2d:10:20:
b1:38:0d:26:4f:c0:5e:4c:1d:d5:44:aa:c8:46:6c:02:a5:70:
89:46:f1:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:22 2023 by rpki-client on console-fra.rpki-client.org