Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/4ONCioUl947xCWnKCWMKBT27KPk.roa
File: 4ONCioUl947xCWnKCWMKBT27KPk.roa (raw, json)
Hash identifier: r4OIeKvFh4TdX+D59JhjpTEdWRb3TzM/SHsceR1PFoE=
Subject key identifier: E0:E3:42:8A:85:25:F7:8E:F1:09:69:CA:09:63:0A:05:3D:BB:28:F9
Certificate issuer: /CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Certificate serial: 01992551
Authority key identifier: 28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/4ONCioUl947xCWnKCWMKBT27KPk.roa
Signing time: Sat 01 Jan 2022 13:06:21 +0000
ROA not before: Sat 01 Jan 2022 13:06:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 45.145.232.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26813777 (0x1992551)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Validity
Not Before: Jan 1 13:06:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0e3428a8525f78ef10969ca09630a053dbb28f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:82:da:f3:39:85:3e:30:8e:c4:07:a0:38:9b:
29:fc:2d:71:5c:a8:a9:c5:24:5b:49:2e:3b:c0:51:
2d:a6:2f:84:7c:ac:8f:61:fd:71:67:bf:11:9f:15:
30:f1:a9:60:79:01:f9:4e:d6:82:46:12:ba:13:f9:
6a:f1:86:fe:59:75:ec:f8:26:2a:d3:ab:96:f8:25:
ee:e1:30:5c:bd:a0:49:c4:0f:cb:22:c9:97:d7:7e:
92:06:e5:e3:51:89:7d:b0:22:5b:a2:ae:03:fc:78:
c1:c5:8f:88:36:ff:fb:47:e5:eb:d5:30:15:c2:b1:
c5:69:6c:37:e0:d6:90:b1:05:72:e6:92:13:d7:97:
b5:66:07:a9:ec:4f:c3:6f:c3:0f:56:bc:73:0b:32:
2e:96:ce:64:f5:5a:2e:10:83:d6:5d:e5:0f:0a:32:
15:14:0c:65:77:12:af:52:26:93:63:5f:0e:bc:5a:
e9:ee:ea:14:15:5a:8d:27:93:8d:c4:b4:f2:55:3b:
15:38:40:a4:65:05:5e:a5:b6:93:c2:0a:c4:75:a4:
33:3e:7c:d0:02:bc:1f:b5:ac:62:79:09:b6:d6:23:
b0:1f:72:de:5c:f8:78:19:e2:0e:f5:a7:86:76:0c:
81:66:2b:ad:98:0b:1c:da:e0:b9:28:67:45:2d:8a:
f6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:E3:42:8A:85:25:F7:8E:F1:09:69:CA:09:63:0A:05:3D:BB:28:F9
X509v3 Authority Key Identifier:
keyid:28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/4ONCioUl947xCWnKCWMKBT27KPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.232.0/22
Signature Algorithm: sha256WithRSAEncryption
85:c3:61:9f:dc:b2:eb:89:10:05:43:d2:d3:20:02:ad:52:a8:
fd:b1:5c:ee:e4:95:ab:e8:f9:1a:49:a6:0f:42:7f:19:8d:b9:
4d:12:67:d3:62:b0:0b:fd:4e:1b:e7:76:66:10:ef:de:46:b1:
39:94:05:63:83:bf:bb:ab:d2:68:f1:cb:c6:9a:b7:c8:9d:a8:
f5:ba:02:88:7f:9c:10:ff:d0:6a:6f:ae:cc:cb:2f:40:5b:d1:
e2:b6:4a:f4:5f:fb:b1:67:6d:07:bb:35:0e:0a:5b:44:85:e8:
d2:80:3f:17:de:58:3c:d8:bf:3b:78:29:03:59:4f:af:e9:92:
18:cc:f0:05:58:a2:e5:f0:10:38:b6:b1:93:9e:3c:5e:cf:1f:
0f:04:bf:3f:72:03:ba:9e:17:c8:82:a3:66:c3:e5:b8:f5:6a:
82:9d:93:4d:95:58:70:3f:dc:c5:fb:b0:d6:5d:0c:88:ef:68:
26:92:57:ca:a8:78:b2:46:58:3a:a1:70:90:7e:06:04:f7:1c:
5e:d8:6a:d0:ab:4e:d2:dd:3e:17:25:7c:27:2b:91:96:17:3f:
d8:97:17:7d:c8:5f:35:90:82:8f:a7:3b:66:14:8f:e8:28:76:
65:69:0b:e3:75:cc:aa:dc:fc:67:dd:6a:19:2d:26:b3:02:52:
1a:57:0a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:02 2023 by rpki-client on console-ams.rpki-client.org