Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/RBSL3FrZtpZAOn0WLIbsEOBbDlY.roa
File: RBSL3FrZtpZAOn0WLIbsEOBbDlY.roa (raw, json)
Hash identifier: SJxcH91w9Qg3EqIBGkgKwb+aizjGKjZTAhqINGIl1PY=
Subject key identifier: 44:14:8B:DC:5A:D9:B6:96:40:3A:7D:16:2C:86:EC:10:E0:5B:0E:56
Certificate issuer: /CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Certificate serial: 01847EF740E808C367009CA05BD9D3E79F23
Authority key identifier: C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/RBSL3FrZtpZAOn0WLIbsEOBbDlY.roa
Signing time: Wed 16 Nov 2022 05:44:03 +0000
ROA not before: Wed 16 Nov 2022 05:44:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3215
IP address blocks: 45.141.50.0/24 maxlen: 24
45.141.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7e:f7:40:e8:08:c3:67:00:9c:a0:5b:d9:d3:e7:9f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d21e804ab7713ad7877dde603aa7824b31983c
Validity
Not Before: Nov 16 05:44:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44148bdc5ad9b696403a7d162c86ec10e05b0e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:78:01:e9:9f:db:05:a9:93:65:42:3b:1a:c6:
04:c7:59:4f:60:bb:4c:c8:b8:8e:4a:8a:9a:70:1b:
11:b9:ec:eb:e4:79:9c:c3:fd:62:4c:bb:5a:3d:4c:
d8:02:21:8a:28:57:0d:af:14:24:07:f1:fe:18:b9:
75:c3:22:a3:43:53:bb:15:62:66:5e:23:35:ce:b6:
85:94:67:c5:f9:43:d4:66:2c:20:21:21:3a:3f:8d:
66:0d:b5:12:f1:a0:5f:49:e5:1c:87:11:53:8f:e4:
c6:1d:bd:53:2a:90:f9:ab:30:26:d5:08:eb:80:e5:
91:a5:57:31:cc:7e:4c:7e:2e:e3:0a:84:27:45:f2:
d9:2e:46:2b:7c:44:a5:eb:78:b9:c5:66:4f:ad:8d:
1d:34:df:67:54:6b:ce:3b:3b:cd:e1:48:1c:15:15:
a4:59:47:57:96:fe:bc:ba:1a:e8:4d:36:64:ec:39:
da:6d:c1:96:be:bf:25:72:3b:4e:e0:2e:26:c2:ad:
ef:ba:69:61:0b:20:b9:17:fb:5a:06:ab:e2:dd:74:
74:61:09:38:94:01:8b:3d:51:a4:df:a1:e6:01:af:
29:51:b3:27:d2:1a:69:06:51:d3:1a:12:f0:59:88:
2e:59:b8:3e:81:36:2b:11:e8:dc:8c:38:01:2f:a6:
39:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:14:8B:DC:5A:D9:B6:96:40:3A:7D:16:2C:86:EC:10:E0:5B:0E:56
X509v3 Authority Key Identifier:
keyid:C2:D2:1E:80:4A:B7:71:3A:D7:87:7D:DE:60:3A:A7:82:4B:31:98:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtIegEq3cTrXh33eYDqngksxmDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/RBSL3FrZtpZAOn0WLIbsEOBbDlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/04b446-4ae1-4fe5-b646-59ae09edbeb9/1/wtIegEq3cTrXh33eYDqngksxmDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.48.0/24
45.141.50.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:76:2a:62:46:f7:00:74:4f:33:44:6f:d5:fb:59:49:bb:80:
f1:54:a1:15:e0:49:f4:99:73:68:76:84:fb:1e:5c:34:23:9b:
e3:cc:b8:6d:0a:df:06:2f:4d:3b:8e:53:f9:b2:ba:4b:e4:4d:
7d:65:af:f5:18:49:33:a3:c2:60:ad:d6:7f:24:24:0d:b9:b2:
22:2b:64:23:79:12:0e:92:4c:7b:30:b0:01:00:be:84:54:d6:
74:9a:ee:ba:61:ee:0f:c2:c2:bb:3e:e8:3a:4e:6e:ed:45:32:
09:54:ee:b5:af:22:9e:72:e6:e0:7a:a3:cb:dc:6c:ad:60:65:
e0:e5:31:d6:a0:c9:5c:90:b0:a5:43:f5:d9:b7:af:31:94:6b:
d8:30:5a:67:8d:30:45:dc:3b:61:4c:91:17:c1:8e:66:32:bc:
de:47:9c:75:76:42:fe:eb:b4:43:8a:28:89:68:6b:f4:13:54:
14:04:2f:55:c7:cf:07:3e:90:22:1a:05:21:17:1f:98:fd:84:
5e:6f:44:cc:af:37:c1:42:df:2b:30:e1:9a:17:4e:2e:12:a5:
1c:c7:fe:45:96:22:77:cd:de:7a:ec:ec:7c:88:4f:b9:f9:99:
dc:99:ab:42:84:cf:69:bd:cd:c8:46:37:47:52:88:35:6c:4d:
e4:ff:e5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:01 2023 by rpki-client on console-ams.rpki-client.org