Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/ttjm03QSqhLi1A1_U6R2aYvGzYU.roa
File: ttjm03QSqhLi1A1_U6R2aYvGzYU.roa (raw, json)
Hash identifier: J3zu2jMXzcRTtILJyx8xbClj7MMJMPg+61fhGYLCuYc=
Subject key identifier: B6:D8:E6:D3:74:12:AA:12:E2:D4:0D:7F:53:A4:76:69:8B:C6:CD:85
Certificate issuer: /CN=a66246b806e89aba40e7e58888f3576513a3934a
Certificate serial: 08238F21
Authority key identifier: A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/ttjm03QSqhLi1A1_U6R2aYvGzYU.roa
Signing time: Sat 01 Jan 2022 04:02:11 +0000
ROA not before: Sat 01 Jan 2022 04:02:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208821
IP address blocks: 45.83.33.0/24 maxlen: 24
45.83.35.0/24 maxlen: 24
45.83.32.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136548129 (0x8238f21)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66246b806e89aba40e7e58888f3576513a3934a
Validity
Not Before: Jan 1 04:02:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b6d8e6d37412aa12e2d40d7f53a476698bc6cd85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:43:49:f4:d2:42:70:58:65:d2:91:6d:15:58:
b4:56:3a:1b:7a:1c:ab:8f:ab:b6:76:6e:62:f2:48:
8f:11:d5:c7:3e:65:de:eb:71:f1:69:f0:3a:8c:b9:
fc:70:18:6a:49:0d:e2:73:58:33:fc:cc:20:0c:e4:
ce:b1:e9:48:fa:b6:a4:6e:8c:8b:10:26:7d:fc:b3:
90:81:ff:dd:52:07:37:4f:3e:7b:0a:52:13:55:aa:
d7:32:68:2f:32:4c:4c:d3:b1:a3:a4:ae:86:22:97:
2c:10:59:dc:3e:ce:b5:00:fb:a3:55:0d:51:14:89:
95:46:5a:59:8a:90:d5:04:35:ff:58:f9:62:33:03:
61:50:bb:0d:1f:68:c9:d1:29:05:c2:e3:67:ec:0d:
35:88:0d:5f:44:ef:b4:e3:80:88:9a:0a:24:c5:3e:
9f:39:f0:d1:3e:b5:3c:87:ea:4b:e7:44:f7:38:e3:
c6:6a:c7:06:28:57:08:fe:8e:c8:10:25:f5:b6:5e:
3d:f8:58:8e:bb:71:d3:c7:98:04:e7:2a:49:43:36:
89:8d:fe:e2:6e:b4:66:80:54:39:b0:ed:17:a4:6f:
4a:64:32:b7:fc:d7:a2:01:2d:f6:1e:71:3e:ee:3b:
9b:96:36:92:90:b1:82:44:ec:27:8d:bf:0c:5a:d5:
69:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D8:E6:D3:74:12:AA:12:E2:D4:0D:7F:53:A4:76:69:8B:C6:CD:85
X509v3 Authority Key Identifier:
keyid:A6:62:46:B8:06:E8:9A:BA:40:E7:E5:88:88:F3:57:65:13:A3:93:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmJGuAbomrpA5-WIiPNXZROjk0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/ttjm03QSqhLi1A1_U6R2aYvGzYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/555221-000d-49f6-8335-4fd28c6619ae/1/pmJGuAbomrpA5-WIiPNXZROjk0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.32.0/23
45.83.35.0/24
Signature Algorithm: sha256WithRSAEncryption
65:01:a8:06:20:89:14:3e:82:d8:3e:62:4a:22:e4:31:91:eb:
8b:93:fa:5d:5f:a5:21:0d:d9:46:a9:c2:f3:42:07:f6:1a:26:
9b:35:76:ef:25:61:5c:9b:1b:99:33:f9:2e:b8:e1:2d:01:f0:
3a:ca:df:c4:9d:7b:05:b1:3e:f9:a1:05:cf:a3:d8:80:ef:5a:
03:b0:1b:38:c0:86:e8:a2:52:a2:54:de:fa:7c:e3:3e:93:56:
0c:ba:32:c3:31:e5:e2:d9:8e:c8:b7:5b:01:55:19:d4:01:69:
65:8c:72:d0:e9:c4:08:1d:59:ef:cc:4f:4a:a6:fb:14:83:50:
bb:88:b4:6e:5a:80:d7:b6:b9:43:8f:c6:78:e1:20:e1:21:e2:
13:86:4c:35:fe:fa:f4:e4:4f:bb:2a:bf:a5:17:23:be:14:5d:
fb:a5:20:72:cf:3f:8d:47:a4:b6:44:bb:e6:4a:88:f1:56:86:
fa:ad:c2:0d:3e:cc:60:1b:80:ea:9d:5d:dd:0a:37:02:51:3a:
58:95:ed:17:e7:34:c5:87:10:52:98:08:99:2a:23:32:10:ea:
3a:b2:44:88:4e:e3:cb:b2:d6:e6:db:32:98:36:2c:7a:5b:0f:
c3:b4:43:50:97:f8:21:ef:e0:d2:da:eb:e9:7c:d6:ad:0f:42:
95:e4:2e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:25 2023 by rpki-client on console-ams.rpki-client.org