Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/U-P2hxXYS4jI8OPIFKaY4pDO-kk.roa
File: U-P2hxXYS4jI8OPIFKaY4pDO-kk.roa (raw, json)
Hash identifier: nRK10CrCMBttocPq+S/W5zt+JP/N87Gsc25vs03EtNE=
Subject key identifier: 53:E3:F6:87:15:D8:4B:88:C8:F0:E3:C8:14:A6:98:E2:90:CE:FA:49
Certificate issuer: /CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Certificate serial: 018318883BF5C81C8CBE50E3B9D9235A5CA9
Authority key identifier: 6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/U-P2hxXYS4jI8OPIFKaY4pDO-kk.roa
Signing time: Wed 07 Sep 2022 15:18:44 +0000
ROA not before: Wed 07 Sep 2022 15:18:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209854
IP address blocks: 45.150.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:18:88:3b:f5:c8:1c:8c:be:50:e3:b9:d9:23:5a:5c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd0c5b3fa6c288860ccb6d90200cbb8e57db7f7
Validity
Not Before: Sep 7 15:18:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53e3f68715d84b88c8f0e3c814a698e290cefa49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5a:bf:46:d3:ea:ef:77:b1:90:00:18:5b:00:
ac:4d:76:8a:bf:a2:07:ba:d6:74:58:9f:c2:e2:8b:
89:ca:4d:0d:2d:33:9a:18:86:dc:a9:85:10:6d:fd:
6f:c2:63:0d:80:95:07:e2:69:54:da:94:7e:23:17:
08:a3:8b:4a:60:cc:4a:9f:54:16:e6:2e:26:4d:b2:
db:e2:cd:12:4c:06:7c:f6:e7:ff:9a:53:52:6c:bc:
1b:5a:23:99:74:20:83:90:a4:3b:03:1f:3e:e3:5f:
14:1e:fe:63:18:1e:4b:02:ba:03:bc:49:21:30:f3:
02:7e:06:41:13:bc:33:80:20:7b:f5:41:f6:f2:18:
17:b9:2c:05:6c:92:bd:3c:18:10:48:6d:06:c6:d9:
c3:49:48:4e:7a:a7:41:e6:63:43:28:0e:a5:3c:ad:
60:64:b3:92:32:07:50:14:2b:01:4d:5e:4f:bb:6b:
a9:91:f6:6e:77:12:07:70:b9:b4:a6:b8:a2:52:b2:
2d:5a:37:3f:54:77:eb:50:03:cf:84:4d:56:17:fc:
8e:2b:25:bc:20:0d:06:ad:aa:61:f4:53:01:9d:1a:
c1:93:f5:85:04:b4:41:60:40:48:86:b1:34:f9:f2:
d0:d5:a9:2c:72:79:e7:1e:d8:cc:7e:ce:ee:fc:65:
37:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E3:F6:87:15:D8:4B:88:C8:F0:E3:C8:14:A6:98:E2:90:CE:FA:49
X509v3 Authority Key Identifier:
keyid:6B:D0:C5:B3:FA:6C:28:88:60:CC:B6:D9:02:00:CB:B8:E5:7D:B7:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9DFs_psKIhgzLbZAgDLuOV9t_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/U-P2hxXYS4jI8OPIFKaY4pDO-kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/b4f584-f256-4cab-adbb-c4620fab1f19/1/a9DFs_psKIhgzLbZAgDLuOV9t_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.5.0/24
Signature Algorithm: sha256WithRSAEncryption
44:55:9e:90:41:64:e0:57:43:0c:ab:28:b6:7b:42:a7:99:fb:
a3:3a:de:68:df:4b:86:71:40:96:3b:d5:94:cf:12:ec:25:ed:
48:dd:b7:ac:39:1c:bd:b1:0d:8e:f6:a2:1e:7a:ec:55:86:9a:
5e:93:9e:22:80:e8:cb:18:86:af:a3:c1:4b:62:f8:11:65:37:
bd:14:5b:76:d8:8f:9f:f6:5f:24:46:da:8a:7e:92:b3:58:c7:
0b:b6:e9:89:b3:e9:8a:ba:8d:f7:ba:e6:62:47:42:0e:4c:81:
ed:be:1d:0e:a5:26:6d:a7:c3:e0:25:34:03:fa:fc:f8:e5:2f:
78:8e:1d:ab:ba:bc:a5:3a:c4:ea:40:31:15:47:5b:67:b9:8e:
30:84:2a:32:c2:31:f3:32:75:85:d5:84:c2:b1:66:0a:88:4a:
23:ba:07:7a:1e:bd:66:8c:8b:f1:81:b7:a7:f6:11:79:a1:70:
43:3f:f7:1b:b6:99:a4:89:6b:7b:ed:41:ad:08:4a:33:81:09:
a0:07:23:fd:7d:75:f7:61:0c:8e:ea:3a:fd:82:58:0f:93:93:
81:5c:15:93:19:3e:79:f0:5a:02:3f:53:95:f1:76:95:48:1a:
ba:4a:0b:79:6d:1f:8e:59:67:4c:aa:ae:b3:39:4d:9c:2d:1e:
6e:87:77:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:42 2023 by rpki-client on console-fra.rpki-client.org