Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/1Vh_fgv5OA9X6vzc4OLTc4H03gE.roa
File: 1Vh_fgv5OA9X6vzc4OLTc4H03gE.roa (raw, json)
Hash identifier: PXXPEartbOzYk6RTSWJ1cRbnpT1lTxSHx/nRDZ8JgiE=
Subject key identifier: D5:58:7F:7E:0B:F9:38:0F:57:EA:FC:DC:E0:E2:D3:73:81:F4:DE:01
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 01847EFCC1D3B064D7B776837BFF48C6CBB2
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/1Vh_fgv5OA9X6vzc4OLTc4H03gE.roa
Signing time: Wed 16 Nov 2022 05:50:04 +0000
ROA not before: Wed 16 Nov 2022 05:50:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31122
IP address blocks: 45.141.49.0/24 maxlen: 24
45.141.51.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7e:fc:c1:d3:b0:64:d7:b7:76:83:7b:ff:48:c6:cb:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Nov 16 05:50:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5587f7e0bf9380f57eafcdce0e2d37381f4de01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:bb:b6:05:62:9f:69:78:e8:a8:44:a0:a8:ea:
a1:bc:78:f1:d8:c7:e5:42:5c:54:62:bb:7f:a8:0e:
c5:67:d3:4d:f4:9b:69:45:5a:f6:d6:25:a5:8f:b3:
a1:aa:3a:af:14:8f:d1:90:3d:ea:ca:2c:18:50:d7:
6c:85:45:c0:0b:f9:e7:80:fd:91:41:a7:03:be:69:
4c:31:84:12:45:b7:76:da:d1:0f:20:bb:3c:2f:21:
fc:78:8c:93:4f:4d:c1:94:0d:42:40:6c:0e:d7:37:
a4:2c:ef:d8:dc:92:08:e4:b7:26:dd:71:e3:40:72:
f4:74:d2:5d:85:7f:70:53:b7:82:97:11:35:15:b7:
12:fc:b0:d8:35:04:1d:16:0a:a8:9e:72:76:f0:ad:
40:de:af:5f:a0:54:db:77:67:96:2e:c7:a8:51:21:
40:d5:b7:0c:fd:f3:74:f8:88:5f:da:4f:97:c4:80:
fa:05:27:9f:d1:4b:2a:a8:1b:2b:41:ed:c3:e6:08:
aa:4f:c9:f7:bd:43:5f:eb:3a:3b:30:70:f4:98:5d:
b0:22:f2:06:14:11:65:30:80:75:2b:1a:55:81:b0:
2a:11:94:ad:de:f3:d1:bb:ae:8f:e1:40:dc:02:c0:
45:ac:47:02:b3:f5:f8:b8:36:ab:4f:e2:fb:7a:26:
42:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:58:7F:7E:0B:F9:38:0F:57:EA:FC:DC:E0:E2:D3:73:81:F4:DE:01
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/1Vh_fgv5OA9X6vzc4OLTc4H03gE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.49.0/24
45.141.51.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:2c:e0:ca:0b:34:75:f6:fe:a8:73:31:ff:f8:42:99:cd:4b:
e2:d1:40:4a:dd:b0:18:41:4b:f6:c6:2e:93:42:44:59:a9:19:
d9:55:d0:e7:eb:ac:87:bb:fc:58:20:07:24:d6:94:f4:3a:ee:
bd:6e:3d:aa:c7:9c:6f:41:11:e1:55:65:f5:7d:9c:c3:78:1d:
e7:75:68:6c:07:f3:89:0b:43:7a:ea:b1:ad:24:e0:05:be:5c:
8c:cf:b4:55:af:1d:ab:bd:d0:fa:fe:8e:e8:e6:b6:67:23:20:
02:45:4e:5f:2d:8d:63:fd:20:f4:f8:81:0e:09:09:72:1c:c4:
4e:d1:b1:bc:e8:f8:0d:08:04:41:08:8b:4d:19:d2:b2:9e:6b:
ed:75:d1:a3:89:f8:eb:02:1a:79:be:30:56:38:52:68:64:3a:
f3:9c:6b:e3:0b:41:25:94:57:53:17:60:1d:27:8e:39:ce:87:
87:51:b7:38:a0:e4:d1:d6:ee:77:66:53:3e:80:fd:bc:01:33:
05:e0:9e:63:fa:cc:b3:9c:83:a8:4f:69:93:e3:08:9c:cd:27:
b0:bf:d8:22:12:18:08:14:03:26:13:ae:5a:9b:9b:6d:44:d5:
df:b4:3a:83:d2:36:07:59:84:e5:37:f5:39:c5:8b:30:94:f9:
94:4d:94:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:17 2023 by rpki-client on console-fra.rpki-client.org