Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/mI8FQM-BxS2FXVKo6Bov54YZs3A.roa
File: mI8FQM-BxS2FXVKo6Bov54YZs3A.roa (raw, json)
Hash identifier: xtejVgwwaVNQj7qVBkGq9usi6czDs32e6uH/fM2PE3w=
Subject key identifier: 98:8F:05:40:CF:81:C5:2D:85:5D:52:A8:E8:1A:2F:E7:86:19:B3:70
Certificate issuer: /CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Certificate serial: 7D528A
Authority key identifier: 2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/mI8FQM-BxS2FXVKo6Bov54YZs3A.roa
Signing time: Sat 01 Jan 2022 02:59:49 +0000
ROA not before: Sat 01 Jan 2022 02:59:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204582
IP address blocks: 45.144.44.8/29 maxlen: 29
45.144.44.0/30 maxlen: 30
2a0e:eac0:2101::/48 maxlen: 48
2a0e:eac0:2000::/44 maxlen: 44
2a0e:eac0:2100::/44 maxlen: 44
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 8213130 (0x7d528a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b6d7e5191f81ff0a19f102b1718ab4f9e0ea3a0
Validity
Not Before: Jan 1 02:59:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=988f0540cf81c52d855d52a8e81a2fe78619b370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:74:7f:6b:91:ff:a7:61:1d:15:1e:25:2d:de:
9a:e9:e8:06:20:1a:de:e1:69:a3:2c:e7:ea:49:1d:
f9:93:c1:ed:33:ce:22:12:ea:60:31:0a:d3:63:97:
89:42:09:12:60:cf:09:81:ca:a3:98:78:87:8f:4f:
d0:96:c7:a9:d1:93:61:9d:bd:36:2b:b6:0c:f8:27:
4d:04:1b:1a:1f:75:24:5e:f3:b0:f7:1e:ea:a2:c6:
e3:25:a6:8f:d5:ef:3d:73:5b:05:88:01:fd:8c:80:
fa:f3:34:8e:3f:66:6f:ad:ca:29:d9:e9:44:2d:2b:
29:a1:56:3d:5d:3c:5d:8f:30:06:48:9b:59:97:b0:
8a:c8:ee:39:ea:12:58:38:68:39:84:03:d6:c0:52:
d4:24:4a:79:71:70:23:ad:e1:d9:94:e0:01:d7:a0:
f1:57:2f:8d:c0:41:14:28:a7:f1:12:7d:15:96:d3:
57:d1:e1:55:01:7f:1c:af:a5:f0:97:2f:7b:73:dc:
ea:26:9b:3f:36:17:6d:a8:4f:ec:d4:3a:2c:f9:cf:
8a:71:dd:51:cd:ee:00:77:e5:5a:fc:0c:1b:d4:df:
76:43:1b:7f:db:5e:cc:c8:3e:ab:2c:8b:58:7f:90:
24:0f:dc:be:61:ff:d0:60:bc:62:0d:ef:c6:18:0a:
96:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8F:05:40:CF:81:C5:2D:85:5D:52:A8:E8:1A:2F:E7:86:19:B3:70
X509v3 Authority Key Identifier:
keyid:2B:6D:7E:51:91:F8:1F:F0:A1:9F:10:2B:17:18:AB:4F:9E:0E:A3:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K21-UZH4H_ChnxArFxirT54Oo6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/mI8FQM-BxS2FXVKo6Bov54YZs3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3156-b061-49fc-b1f0-00ca3126b3fe/1/K21-UZH4H_ChnxArFxirT54Oo6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.44.0/30
45.144.44.8/29
IPv6:
2a0e:eac0:2000::/44
2a0e:eac0:2100::/44
Signature Algorithm: sha256WithRSAEncryption
7c:66:66:73:22:ce:10:54:f0:53:d9:70:f8:67:3b:64:c1:bb:
4e:1a:a8:8a:71:4e:69:f1:7e:2f:9b:fa:fd:f0:5d:7f:2b:e5:
e9:7e:e0:d7:8b:64:0a:33:16:74:83:9e:8e:1a:98:30:a8:10:
f1:be:39:f6:13:79:45:b5:d5:a6:79:f1:4b:d1:fd:9a:90:81:
38:b6:97:9f:f4:65:bf:8c:b0:b2:f0:f2:9c:65:bf:a2:9a:c7:
1f:01:a4:03:f5:1c:4c:16:5c:e0:91:8f:49:f6:de:a6:11:1f:
39:4d:df:7b:48:d2:d0:b1:03:4b:32:ab:91:14:0c:3f:9f:9e:
61:60:90:ce:d8:33:3a:c4:ce:9c:49:78:0b:c9:f2:65:51:b1:
b0:7d:25:d2:fa:e1:90:bb:11:e1:62:2c:72:d3:d8:e2:27:42:
25:c9:93:c8:3b:78:ce:83:09:ed:e5:95:a7:e7:2c:3f:9f:33:
f4:3a:f1:64:97:92:29:83:be:12:de:1e:24:c5:29:37:95:e5:
c7:fd:4b:64:77:bf:e5:88:f2:38:e9:eb:f2:8a:26:7c:75:98:
af:44:83:d3:07:2f:ce:33:c9:a9:37:3f:14:d3:c9:3e:bd:8f:
85:44:3b:e8:b2:b7:a5:81:12:48:7d:46:55:34:d9:5b:ed:fb:
41:62:68:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:05 2023 by rpki-client on console-ams.rpki-client.org