Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/gH7KhNzA9EiarlHWww6pCIFtPmM.roa
File: gH7KhNzA9EiarlHWww6pCIFtPmM.roa (raw, json)
Hash identifier: 055bn0D9Z3Vq1xN7nrNdnqBxIeymSHrseIZTSwDKPDo=
Subject key identifier: 80:7E:CA:84:DC:C0:F4:48:9A:AE:51:D6:C3:0E:A9:08:81:6D:3E:63
Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial: 05670D56
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/gH7KhNzA9EiarlHWww6pCIFtPmM.roa
Signing time: Wed 08 Jun 2022 22:24:03 +0000
ROA not before: Wed 08 Jun 2022 22:24:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398772
IP address blocks: 45.136.60.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90639702 (0x5670d56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
Validity
Not Before: Jun 8 22:24:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=807eca84dcc0f4489aae51d6c30ea908816d3e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:38:f1:ee:78:bb:34:f4:9c:7a:44:97:68:74:
f7:55:26:7e:44:f8:04:53:5e:e2:eb:c0:b3:ab:63:
49:88:08:d4:9a:43:e3:57:40:30:07:a3:04:79:18:
a3:db:d8:e4:53:3e:91:60:0c:1d:ce:67:b7:3e:24:
23:99:fa:e0:f1:e2:6e:fb:53:6e:eb:eb:ae:82:61:
2b:ea:03:dc:d4:e1:55:1a:c3:9d:aa:8a:77:45:f0:
7b:e3:80:34:7e:86:d4:b6:69:f5:fc:89:b1:a7:e4:
3a:d9:ed:7e:71:5d:dc:cd:ef:f6:42:5e:d2:c7:43:
60:19:bc:e8:3d:a8:c0:38:8e:ae:6b:b3:79:a6:ce:
a5:16:81:a1:2b:eb:de:ea:5f:3f:b8:0b:af:51:0a:
d4:55:5e:0d:75:da:59:c2:f7:9f:21:76:e2:e1:c3:
2e:41:f8:bd:38:be:39:c5:9a:79:d5:78:73:53:69:
17:bb:f1:28:79:0c:cc:40:b9:c7:e0:82:8b:d7:b1:
31:95:0d:0e:c2:5c:23:28:c7:13:48:14:eb:21:bd:
ec:3d:31:27:79:45:cc:94:69:02:c0:36:38:fc:3d:
9e:b3:d2:26:0e:ba:ea:43:b5:97:f6:9b:8c:0d:df:
99:af:92:a8:c0:b5:dd:26:13:57:f0:44:97:59:81:
c6:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7E:CA:84:DC:C0:F4:48:9A:AE:51:D6:C3:0E:A9:08:81:6D:3E:63
X509v3 Authority Key Identifier:
keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/gH7KhNzA9EiarlHWww6pCIFtPmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.60.0/22
Signature Algorithm: sha256WithRSAEncryption
88:c4:6a:31:9d:90:9a:f8:da:6e:06:2f:78:9e:04:9e:b9:20:
95:28:c4:fe:97:42:51:94:9e:e1:ad:2b:61:e4:7a:a2:47:6c:
71:d9:bb:68:13:f3:e0:40:8c:ff:97:23:85:0c:41:7a:f9:7f:
1b:2b:66:81:a8:38:22:7b:0b:4a:26:08:4d:8b:94:e6:31:39:
bb:44:ee:34:68:59:a3:e4:c6:bf:70:13:10:c2:87:8e:da:6c:
8b:91:0c:ed:1a:1a:82:9e:a4:d8:bc:71:56:81:f4:79:dc:bc:
cf:78:4e:6f:1d:cb:91:5d:5a:68:ef:8d:9f:73:e6:ed:56:d6:
f3:2e:83:6d:40:be:3e:e1:5e:fe:f6:b6:2f:79:d4:b9:cf:dd:
20:21:a3:17:4f:35:99:1e:1f:15:45:c0:b7:b0:11:2b:19:d6:
46:7e:e3:f2:c1:16:9b:7f:f5:54:e0:9c:93:ba:c6:8c:51:fd:
dc:7b:f0:42:9b:2d:a5:64:da:85:de:3a:2b:9d:20:c2:8f:32:
13:36:cc:1b:34:c4:7d:31:2c:39:08:07:4c:35:b7:aa:88:33:
73:c5:2b:c8:3d:95:0a:a5:ad:5d:19:4e:4f:0a:f0:2e:83:89:
2e:a7:0c:db:04:88:f2:c8:52:9d:d8:8d:5e:e3:37:36:f9:6c:
b1:7a:07:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:29 2023 by rpki-client on console-fra.rpki-client.org