Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/nt3YFzaTJ31A8FTcQ5bgAcAOuoU.roa
File: nt3YFzaTJ31A8FTcQ5bgAcAOuoU.roa (raw, json)
Hash identifier: 9nm0rCgHQJb/I6PicxTJnrioxk/EF8EuoymMgX+cVa8=
Subject key identifier: 9E:DD:D8:17:36:93:27:7D:40:F0:54:DC:43:96:E0:01:C0:0E:BA:85
Certificate issuer: /CN=a66246b806e89aba40e7e58888f3576513a3934a
Certificate serial: 018418BDDB25903DF526129F2CD3ACD6AAF9
Authority key identifier: A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/nt3YFzaTJ31A8FTcQ5bgAcAOuoU.roa
Signing time: Thu 27 Oct 2022 09:20:06 +0000
ROA not before: Thu 27 Oct 2022 09:20:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208821
IP address blocks: 45.83.33.0/24 maxlen: 24
45.83.35.0/24 maxlen: 24
45.83.32.0/24 maxlen: 24
45.83.34.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:18:bd:db:25:90:3d:f5:26:12:9f:2c:d3:ac:d6:aa:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66246b806e89aba40e7e58888f3576513a3934a
Validity
Not Before: Oct 27 09:20:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9eddd8173693277d40f054dc4396e001c00eba85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:72:eb:0e:e2:8f:83:ff:0c:98:32:33:eb:5d:
20:1e:14:43:ee:8f:2e:03:bb:c9:04:f3:de:57:89:
c3:c3:50:fd:a1:16:d4:23:74:99:b5:25:8b:74:af:
9b:38:60:05:07:7f:5d:b6:fc:c1:c2:ae:2e:3c:1e:
84:42:f0:60:65:61:c8:58:dd:a5:5a:3d:4b:5f:e0:
19:30:d4:4e:78:c3:8f:da:fa:b1:4d:b6:d7:83:04:
19:1e:fd:43:be:a8:51:38:a0:c3:b2:10:3b:b6:17:
b6:d4:94:46:ba:55:92:a9:f3:e5:c9:bd:33:5d:dd:
c5:e0:e5:dc:8e:cc:0b:c0:1e:5f:b2:3b:3a:b5:96:
b6:ec:09:8c:cc:55:84:77:22:72:42:2d:d8:05:3e:
9d:92:a6:61:98:ed:9e:54:e1:ef:a7:00:28:1b:ee:
b5:77:0b:9f:bd:42:b0:d7:bd:15:29:ab:c6:80:ed:
7f:d6:19:02:36:f8:c6:24:16:2b:90:82:3a:d7:dd:
0e:0e:79:b2:d9:49:05:a3:15:58:83:88:9e:f7:ba:
c5:e8:72:60:5b:a4:b6:3c:f3:c3:d7:0b:6a:b3:ce:
8f:fc:d0:8b:59:be:3d:31:fa:57:01:96:65:16:51:
d3:80:dd:1a:ae:af:0a:f6:6f:d2:d0:4d:56:f0:3a:
0e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:DD:D8:17:36:93:27:7D:40:F0:54:DC:43:96:E0:01:C0:0E:BA:85
X509v3 Authority Key Identifier:
keyid:A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/nt3YFzaTJ31A8FTcQ5bgAcAOuoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.32.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:fa:f9:98:90:3e:55:20:f5:16:7f:ea:16:33:37:4d:84:84:
ec:b0:20:fd:ec:a2:94:77:a3:6f:ff:94:3b:41:56:d0:9a:bc:
53:c9:08:d3:a2:a1:4f:73:b0:2c:78:07:a9:ac:d5:e1:4b:5d:
a9:38:bc:8a:d1:4e:b4:f1:cc:97:11:87:8d:bd:00:e5:9f:43:
c8:ea:82:4c:ae:43:18:53:ed:10:b8:bf:82:9e:59:1a:b0:54:
ba:ff:42:ef:0d:49:ee:9e:d3:4b:77:ce:40:61:2c:f0:14:f4:
0f:57:b8:8d:64:82:e2:41:ef:34:22:4c:6f:cc:e6:ab:8f:5b:
51:77:a3:14:16:e6:d4:a0:06:0c:82:5d:c1:9b:6b:73:ef:c6:
1b:f0:9f:d0:7c:07:b4:e5:e6:48:11:12:8f:e5:d5:1c:ce:c3:
48:7e:72:e0:9f:4f:6b:71:76:48:4f:5d:62:ed:5a:6d:aa:e8:
d6:47:e5:65:ac:28:36:eb:2f:29:53:4c:1d:53:98:81:74:03:
59:19:2c:bb:33:17:4c:cd:43:79:5d:b4:bd:02:bf:db:8f:44:
39:79:dc:63:e8:76:c7:b1:73:bf:b4:7b:fc:be:3a:b9:f3:4c:
53:e9:1b:78:04:ba:00:34:9e:ee:ce:ee:6e:a7:e8:5f:94:e3:
4f:c5:d0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:49 2023 by rpki-client on console-fra.rpki-client.org