Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/AgGDTjq58WJmZj8HdHWVuoUisEA.roa
File: AgGDTjq58WJmZj8HdHWVuoUisEA.roa (raw, json)
Hash identifier: 8jWpclskIBYYvXU+2HsOzqMV3Icsg4R2tCsEQb38bX0=
Subject key identifier: 02:01:83:4E:3A:B9:F1:62:66:66:3F:07:74:75:95:BA:85:22:B0:40
Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial: 0525A58D
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/AgGDTjq58WJmZj8HdHWVuoUisEA.roa
Signing time: Fri 13 May 2022 06:29:02 +0000
ROA not before: Fri 13 May 2022 06:29:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398772
IP address blocks: 45.136.60.0/22 maxlen: 24
45.12.44.0/22 maxlen: 24
45.95.140.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86353293 (0x525a58d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
Validity
Not Before: May 13 06:29:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0201834e3ab9f16266663f07747595ba8522b040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6f:dd:5f:10:ae:12:d0:0c:4f:83:57:18:9d:
ed:bb:e0:78:7b:8f:77:9b:ab:37:3d:84:9f:af:fb:
cf:38:94:60:0f:39:c4:bb:b7:87:86:18:17:51:2d:
8c:6c:9e:08:42:62:25:a2:5d:33:99:4a:61:94:28:
d6:9e:e9:da:19:2f:5a:34:c0:c2:7c:cf:01:c6:e0:
92:e3:e8:67:86:f0:74:a5:d2:46:54:b3:54:59:15:
42:7a:5c:08:02:1a:26:19:6b:02:11:af:48:cd:d6:
33:84:4a:28:3f:8b:a9:7f:4a:fe:3c:55:f4:8c:cd:
00:75:f4:ec:8b:bf:c8:81:c1:9a:09:b4:d9:a4:f0:
a0:2e:10:cc:ff:c3:0a:ec:d0:b0:1b:f0:65:04:5d:
5b:6f:9f:3f:14:15:fe:88:63:c8:9e:72:d2:5b:e7:
fc:90:10:3a:1c:c4:85:16:35:03:b2:5e:de:15:3a:
f2:86:c1:16:7d:51:ab:d4:8e:7a:41:d5:49:e5:9d:
4a:29:f6:8d:34:a7:a9:45:8e:a1:4f:c4:46:d1:15:
8b:a8:64:62:b6:07:ca:fe:b1:c7:7a:9d:33:ab:2e:
a3:ff:e7:96:70:75:af:68:45:f6:a9:b4:57:dc:fb:
54:7d:dd:d6:f5:50:84:79:d8:12:e5:e5:93:cf:44:
9c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:01:83:4E:3A:B9:F1:62:66:66:3F:07:74:75:95:BA:85:22:B0:40
X509v3 Authority Key Identifier:
keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/AgGDTjq58WJmZj8HdHWVuoUisEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.44.0/22
45.95.140.0/22
45.136.60.0/22
Signature Algorithm: sha256WithRSAEncryption
11:48:98:6c:8f:5e:bd:a9:db:19:a3:0c:0b:a9:f9:46:ad:d8:
34:8e:b8:c1:b2:34:36:4e:9b:ab:f8:94:96:a1:eb:ed:58:59:
25:41:5d:42:c0:b3:96:aa:e5:f2:ad:69:f3:e1:92:ca:43:58:
4b:45:35:b6:c6:20:d6:63:7a:2d:dd:4d:19:07:00:10:b1:c3:
9d:63:34:52:c7:35:77:18:2f:14:2f:73:9d:19:dd:16:e6:3d:
5b:7b:8c:e7:a3:5d:91:ba:cb:e8:69:29:06:00:65:3d:e7:fd:
10:99:9e:5e:0f:f9:60:94:3a:d6:4e:3d:09:bd:0e:f6:95:e1:
c2:15:12:61:b6:b0:62:1f:c2:34:e2:73:b9:51:a5:af:bf:4a:
c4:2c:dc:53:50:2b:79:84:9c:bb:e0:c9:8c:2c:e0:cf:03:80:
bc:08:0b:60:66:0b:81:6e:ac:0e:bc:37:ea:ae:33:34:50:6e:
99:96:ec:e1:cc:c4:96:09:1c:e9:bb:24:3e:68:a5:8b:4c:93:
05:7a:7f:a9:dd:c1:a1:61:c8:34:85:1b:26:45:64:05:e5:fb:
a7:05:26:09:0a:df:71:24:53:ac:03:51:e1:64:c8:91:f5:46:
9f:9f:54:26:03:cb:cc:41:e5:9f:eb:16:63:aa:90:3f:49:70:
be:e2:48:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:07 2023 by rpki-client on console-ams.rpki-client.org