Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/RgcotZuk3-AuAKHD4C_g8aTV1EU.roa
File: RgcotZuk3-AuAKHD4C_g8aTV1EU.roa (raw, json)
Hash identifier: QqHDjpC6gCObtWMpsLa0VHi8TDAdnAlCvTDxCOsxcO4=
Subject key identifier: 46:07:28:B5:9B:A4:DF:E0:2E:00:A1:C3:E0:2F:E0:F1:A4:D5:D4:45
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 079D11AA
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/RgcotZuk3-AuAKHD4C_g8aTV1EU.roa
Signing time: Sat 01 Jan 2022 08:01:42 +0000
ROA not before: Sat 01 Jan 2022 08:01:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9312
IP address blocks: 45.90.211.0/24 maxlen: 24
45.90.209.0/24 maxlen: 24
45.90.208.0/24 maxlen: 24
194.36.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127734186 (0x79d11aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 08:01:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=460728b59ba4dfe02e00a1c3e02fe0f1a4d5d445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:41:2b:1b:e5:5c:ba:bb:68:df:e4:c5:58:82:
5d:3c:a9:55:b1:6a:d7:5f:3d:38:69:21:c9:03:2e:
02:57:4f:21:6b:58:cd:4e:9a:ac:d9:63:fd:c4:49:
46:e2:a4:23:7d:c3:fc:4b:3c:8c:fc:97:3a:c9:b0:
a2:37:38:7f:0b:2e:44:92:94:61:75:aa:f7:3c:6f:
6a:39:59:33:3d:66:91:96:2a:a9:fc:30:c5:46:96:
aa:e8:a4:33:8f:69:22:48:b3:24:4b:26:aa:ed:7d:
be:6a:04:a6:87:8f:6c:09:64:59:c3:c7:a7:a9:14:
bc:04:6d:4c:52:bc:64:0c:b3:2e:5b:8a:56:85:6a:
13:17:80:8b:08:d0:6e:bf:8c:1f:2a:c2:98:4a:95:
2d:8a:e7:0a:41:bc:86:61:72:d5:08:96:a4:6d:0b:
cd:9f:de:c5:92:40:9e:de:ea:8b:c6:2d:75:de:e1:
eb:ce:51:0e:44:ec:3b:98:90:a4:d8:72:44:d4:45:
9b:ca:99:f2:00:67:07:a4:e7:1f:aa:6c:a9:3e:35:
75:4e:fd:d0:31:f7:77:55:66:85:67:62:7e:30:0e:
ff:ac:cc:38:1d:48:d7:2a:f7:74:2b:9c:e0:d2:12:
3c:45:c7:89:32:b3:51:52:e5:1c:14:0e:d4:1b:b1:
48:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:07:28:B5:9B:A4:DF:E0:2E:00:A1:C3:E0:2F:E0:F1:A4:D5:D4:45
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/RgcotZuk3-AuAKHD4C_g8aTV1EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.208.0/23
45.90.211.0/24
194.36.243.0/24
Signature Algorithm: sha256WithRSAEncryption
56:28:e9:af:66:13:bf:25:5a:79:8b:dd:27:9e:9d:c7:ab:71:
d1:5c:76:19:76:2a:13:44:f2:3f:c2:d3:78:a9:a2:9c:0e:96:
8a:48:68:64:a8:59:ab:7d:ae:df:13:10:cb:71:3d:58:39:5e:
1f:da:3e:72:d9:33:90:cf:d0:b7:64:30:e7:b9:15:b2:4c:31:
fe:4a:6e:84:12:c4:1f:2d:0a:4e:c1:a6:88:b8:f0:08:89:c9:
a1:db:1f:0a:2d:98:f9:56:57:10:fc:bf:73:83:52:2d:fa:d3:
ab:bd:4c:0e:56:91:93:a9:97:b7:ee:87:1b:51:f6:75:8a:44:
a0:ea:88:e9:95:ef:bc:40:d7:ad:ce:db:71:ae:c6:28:bc:c2:
a1:af:10:19:b7:4c:f2:4e:e4:db:a4:a9:6b:2d:40:11:82:28:
0e:f9:6a:f7:6d:5d:54:5d:24:c6:0f:9b:ab:e0:c4:1a:0f:de:
75:c2:cc:9a:9c:8a:a3:ba:39:91:df:eb:13:f5:8f:f6:4e:70:
3e:1b:0e:8a:a0:4c:2e:0d:cf:52:16:e5:97:1b:2c:69:0e:3d:
c9:eb:0d:04:0c:4e:d4:2c:e9:8b:14:99:e0:31:ef:40:30:ba:
97:c4:4f:76:df:16:a3:08:8a:99:a7:5c:be:11:98:d3:77:63:
41:b8:80:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:59 2023 by rpki-client on console-fra.rpki-client.org