Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/swEX7hLk_yqhW1bXpl3D9h6M5U8.roa
File: swEX7hLk_yqhW1bXpl3D9h6M5U8.roa (raw, json)
Hash identifier: UMmS8dPYNZ/vVUAb/nHuRH6SoBbtHVZ1ti4hjIWlHyw=
Subject key identifier: B3:01:17:EE:12:E4:FF:2A:A1:5B:56:D7:A6:5D:C3:F6:1E:8C:E5:4F
Certificate issuer: /CN=52702cdee043094ac2f33170125f94f7034da8f0
Certificate serial: 011CEBA3
Authority key identifier: 52:70:2C:DE:E0:43:09:4A:C2:F3:31:70:12:5F:94:F7:03:4D:A8:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/swEX7hLk_yqhW1bXpl3D9h6M5U8.roa
Signing time: Sat 01 Jan 2022 13:03:13 +0000
ROA not before: Sat 01 Jan 2022 13:03:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29396
IP address blocks: 185.171.128.0/22 maxlen: 24
45.80.38.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18672547 (0x11ceba3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52702cdee043094ac2f33170125f94f7034da8f0
Validity
Not Before: Jan 1 13:03:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b30117ee12e4ff2aa15b56d7a65dc3f61e8ce54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ce:47:8e:58:f5:b3:6e:2f:8a:b8:d8:82:b5:
3b:1f:d3:9d:c4:8c:58:c2:16:a4:fa:e4:19:2f:c5:
d4:a5:b4:c1:ce:57:c2:99:1e:7c:7a:44:2f:c9:53:
cc:7f:6e:b5:93:78:a0:cd:b5:27:c3:63:4a:5e:cf:
2f:0f:7a:d1:6f:ef:e3:8e:79:84:55:a7:64:0e:b1:
d0:3f:f6:69:15:cb:a6:9c:6a:bb:da:82:cb:6d:80:
67:b1:47:6d:f8:82:68:f8:de:ac:ad:b3:f7:33:3d:
d1:06:28:8e:b8:3b:d7:08:37:12:2e:dd:cf:3f:42:
19:09:ac:78:75:a5:c2:ed:54:f4:a5:c6:05:3c:b3:
34:e2:7e:0d:4b:1f:15:37:a4:c2:41:72:f2:13:f3:
d3:f2:4b:0a:22:37:cc:30:0c:c8:e2:cc:8a:69:1e:
0b:39:1d:fa:f4:2c:77:c7:ce:d1:cd:a4:66:ac:f8:
9e:85:a2:2e:1c:98:66:3f:59:49:85:dd:a7:74:81:
82:f3:d7:86:40:14:02:e3:d1:26:15:b2:4c:87:cd:
be:f4:e7:f9:65:c0:10:6d:85:d8:7c:f4:55:1b:2b:
81:bb:79:f1:12:b2:f5:fc:76:2c:cf:84:25:e8:e9:
74:93:c2:b0:4f:a5:fc:9e:ce:c2:79:d2:32:60:47:
93:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:01:17:EE:12:E4:FF:2A:A1:5B:56:D7:A6:5D:C3:F6:1E:8C:E5:4F
X509v3 Authority Key Identifier:
keyid:52:70:2C:DE:E0:43:09:4A:C2:F3:31:70:12:5F:94:F7:03:4D:A8:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnAs3uBDCUrC8zFwEl-U9wNNqPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/swEX7hLk_yqhW1bXpl3D9h6M5U8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d8c85e-4198-4869-b9cd-e280b6501704/1/UnAs3uBDCUrC8zFwEl-U9wNNqPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.38.0/23
185.171.128.0/22
Signature Algorithm: sha256WithRSAEncryption
23:9b:07:12:9b:f8:7a:99:d4:cb:4b:3c:cc:a8:b0:e5:f7:00:
75:29:93:c7:b1:1e:84:44:bb:73:e9:99:13:ba:97:67:d3:72:
b3:a2:d0:8b:c0:2c:8d:95:2a:65:4a:7b:6e:b3:3b:6f:6a:f1:
cf:8f:8f:e5:43:d1:a4:4d:03:d7:3c:81:7b:e4:4c:29:3f:f1:
70:c1:22:05:92:f1:60:90:e4:e1:e2:c4:f7:3c:f2:0a:d2:06:
a9:8b:de:58:8d:81:eb:68:f5:35:6d:13:c0:f1:e5:88:38:0b:
db:f2:f4:37:65:52:1f:19:cb:07:5a:c4:e1:d9:fc:fb:1d:d3:
9d:dc:99:06:66:af:e1:03:37:70:29:44:55:a4:fe:3a:f9:78:
e5:f8:eb:9f:63:44:f1:00:63:4a:95:a7:9f:00:20:4c:68:cd:
bd:f0:08:2c:7b:c8:06:e5:d0:e2:1f:40:de:35:2a:de:1c:1e:
2d:50:f6:3e:fd:fb:10:32:af:f4:fc:37:60:fc:ef:37:44:5a:
90:b9:03:49:68:40:fb:4e:10:7f:fa:da:b3:b4:8e:1e:a8:70:
cb:4c:b4:49:b0:6f:b9:79:11:16:64:36:73:8f:2a:16:a0:0a:
5b:f5:41:a8:5b:98:55:72:76:b0:3e:b1:c1:5b:c1:86:81:f3:
63:4c:2e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:06 2023 by rpki-client on console-ams.rpki-client.org