Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/gK8t-jAGW3cli5GNMGT5iBUX9vk.roa
File: gK8t-jAGW3cli5GNMGT5iBUX9vk.roa (raw, json)
Hash identifier: H5uXuLB2D0bnpLs/jff6ZAH4XolpSgKoedausm2TaAk=
Subject key identifier: 80:AF:2D:FA:30:06:5B:77:25:8B:91:8D:30:64:F9:88:15:17:F6:F9
Certificate issuer: /CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Certificate serial: 0438C854
Authority key identifier: AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/gK8t-jAGW3cli5GNMGT5iBUX9vk.roa
Signing time: Fri 10 Jun 2022 11:37:02 +0000
ROA not before: Fri 10 Jun 2022 11:37:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3352
IP address blocks: 45.148.220.0/24 maxlen: 24
81.90.111.0/24 maxlen: 24
81.90.110.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 70830164 (0x438c854)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Validity
Not Before: Jun 10 11:37:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80af2dfa30065b77258b918d3064f9881517f6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ec:39:82:69:f1:43:9d:d8:66:a7:6b:ee:cf:
8d:8b:47:f2:8c:1d:65:5f:56:f9:b1:4c:49:8e:cd:
f5:11:6e:8d:5e:d9:e0:6b:b2:d3:75:08:ec:04:61:
16:94:8a:d6:db:52:9e:11:3d:ef:8b:a0:78:89:c0:
a3:dd:54:db:a2:d8:0d:f5:f6:9b:a3:f6:48:4f:34:
a9:e6:81:65:4f:fb:a4:ea:20:b8:6b:88:3f:ce:7f:
2f:2d:3e:cc:c5:1f:56:9c:cb:6c:d5:be:4e:c0:f8:
12:47:97:c1:f8:91:8b:57:33:3f:b4:4a:95:2c:f0:
0b:96:31:cb:38:0a:96:40:dd:39:99:2f:e4:05:2f:
a6:59:26:a1:68:cc:bb:90:7a:ef:c5:be:a7:30:92:
50:15:e5:85:01:3b:4c:89:e8:2a:7e:40:c0:ab:73:
dd:42:bd:b1:bc:2e:b4:3e:64:49:c2:d8:98:ee:69:
37:59:4c:93:7f:16:7f:47:ad:17:93:37:98:64:c0:
1f:cf:67:cb:b8:0e:a8:34:57:00:33:41:25:f6:12:
6d:ac:f7:f1:70:85:8e:d7:50:3d:78:de:f5:56:19:
0f:a2:f1:98:21:21:e7:14:6b:4a:cf:dc:b7:27:6c:
4d:c6:29:54:71:71:bc:db:bd:c0:ec:ab:98:40:ce:
f8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:AF:2D:FA:30:06:5B:77:25:8B:91:8D:30:64:F9:88:15:17:F6:F9
X509v3 Authority Key Identifier:
keyid:AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/gK8t-jAGW3cli5GNMGT5iBUX9vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.220.0/24
81.90.110.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:dd:26:10:86:24:bc:2c:2a:2e:de:bc:fd:2f:e1:3b:99:43:
98:97:0d:49:1f:68:4d:f5:05:a1:41:a3:e3:86:22:8f:56:23:
fc:92:18:b8:3b:82:3d:78:72:2c:1d:2f:ee:30:fb:24:e4:b1:
e7:be:5c:d6:b9:c7:4f:46:30:9d:15:0b:31:c5:29:66:78:6d:
18:73:f1:2e:49:4b:eb:7b:8d:a8:47:a0:7c:95:3a:58:58:6a:
16:2b:52:c1:cb:d3:8a:b8:ae:0d:3d:65:af:c3:84:27:e8:78:
e8:11:15:f3:fc:22:a0:3a:60:4d:55:07:95:a3:6a:08:fb:0b:
63:b5:e1:54:97:96:11:db:c5:e8:ec:ad:9d:d5:37:cc:29:aa:
b9:f2:37:79:08:f0:91:04:83:e8:6c:e5:42:31:5c:1b:e1:a5:
0d:1d:d5:d3:c8:dd:5f:0f:9a:b1:9f:70:d8:c4:fa:40:33:51:
48:61:f0:00:a9:38:d3:52:5d:ef:0f:56:18:ff:2e:99:cb:da:
b8:26:13:72:b7:4a:ca:3b:fc:f0:45:3d:2f:7c:7d:97:9f:34:
c4:7a:2d:38:86:c5:47:7d:77:93:ec:d8:b8:48:d9:bb:fc:1d:
8a:1c:0b:5d:c1:a9:e4:e3:ad:d9:90:e3:66:fb:22:3d:dc:72:
85:80:4b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:29 2023 by rpki-client on console-ams.rpki-client.org