Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/s6TSws-sk6hpJYk2zjjN4TensA0.roa
File: s6TSws-sk6hpJYk2zjjN4TensA0.roa (raw, json)
Hash identifier: 8wT8H5scKygtvUxRtGd23UZ/R/kTwhs/BtFpbV8s8gk=
Subject key identifier: B3:A4:D2:C2:CF:AC:93:A8:69:25:89:36:CE:38:CD:E1:37:A7:B0:0D
Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial: 04252673
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/s6TSws-sk6hpJYk2zjjN4TensA0.roa
Signing time: Wed 26 Jan 2022 09:17:45 +0000
ROA not before: Wed 26 Jan 2022 09:17:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.86.192.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69543539 (0x4252673)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
Validity
Not Before: Jan 26 09:17:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b3a4d2c2cfac93a869258936ce38cde137a7b00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:13:cc:5c:5f:94:18:3a:f9:0b:25:c5:17:51:
bd:b2:58:36:42:22:26:11:15:44:01:58:c3:a6:2c:
19:a2:2d:cc:b6:11:13:02:26:9e:99:a4:fe:25:15:
92:87:12:2b:f6:79:15:67:a2:7b:3d:2f:54:74:f5:
1f:4c:01:96:07:4c:0e:0f:13:f5:10:34:0b:25:e6:
a1:3d:8b:10:f0:2a:fd:b2:da:0d:c6:6e:e8:06:a0:
09:79:4b:79:87:eb:a8:95:5a:4d:f3:a9:54:de:60:
0a:88:ea:d7:ea:1d:ef:8a:cf:78:ec:4c:0c:f5:4a:
7d:73:f0:1c:20:b0:1c:87:2e:ad:7a:aa:4a:08:de:
77:f1:d2:6a:aa:cd:53:d5:5c:d1:fa:ef:2a:8e:a0:
48:61:44:e3:38:8d:c3:3e:6b:03:bf:5a:c3:eb:6a:
c2:e7:51:c5:12:e9:ed:0c:83:11:bb:43:13:07:35:
d2:3f:68:59:38:bd:9d:19:9d:27:42:3f:79:1d:ae:
2d:5a:5f:68:39:c1:56:f2:a1:a7:48:b0:22:b5:1b:
cb:f4:79:a6:41:a7:f9:ea:92:3c:fc:c8:12:09:8c:
45:11:10:8f:04:78:cb:50:2b:00:ab:c0:a8:2d:90:
2b:6e:95:9e:82:24:fa:06:32:8c:2c:a0:79:c7:da:
fb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A4:D2:C2:CF:AC:93:A8:69:25:89:36:CE:38:CD:E1:37:A7:B0:0D
X509v3 Authority Key Identifier:
keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/s6TSws-sk6hpJYk2zjjN4TensA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.192.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:fd:cd:9f:34:11:38:f0:81:cf:27:0d:6f:d9:fb:ce:c2:23:
c9:5f:30:ec:0f:5b:ec:5e:d2:97:53:2e:fc:20:83:65:31:f2:
2a:3d:f7:88:4c:cf:c2:a1:f7:d7:6a:5c:c0:02:2e:37:ef:55:
1b:43:3a:41:94:6a:57:7d:d1:7a:ad:a7:c1:38:35:d3:43:61:
f6:a4:64:ca:f8:26:3f:70:7c:16:ef:b3:49:22:08:8c:a3:47:
b5:85:6f:73:48:e5:31:ec:06:35:23:52:8a:e9:98:7e:8d:49:
88:e7:b3:98:42:4f:fa:95:68:e5:a1:9f:44:e3:a1:6a:2f:97:
b8:56:23:fb:c7:3b:cb:63:41:1b:2d:34:47:d8:36:ca:56:e4:
7f:8e:81:d5:70:6b:12:47:7b:8f:44:77:a3:2a:5e:30:23:de:
28:c4:45:a1:b4:8f:06:34:c8:0a:38:b1:d8:75:9c:fb:15:f2:
0c:fe:ab:af:6b:0e:7a:1f:dd:bb:03:d8:80:8b:13:42:de:46:
b4:e0:b5:17:97:b8:72:5a:99:3d:26:6c:6d:5a:75:50:ff:94:
06:15:2d:f5:59:a3:da:1d:6a:71:75:b8:2d:02:ce:96:bc:c1:
65:49:27:36:ab:de:bd:0f:c2:61:d3:ab:ee:d0:11:1f:88:23:
47:8c:10:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:29 2023 by rpki-client on console-fra.rpki-client.org