Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/UrTnX7RIxn5yh6nfcPpiOg1RJpg.roa
File: UrTnX7RIxn5yh6nfcPpiOg1RJpg.roa (raw, json)
Hash identifier: qaez/QevD9LRUqnHty43TBsJStlhK7ZRSwDEA8UAvFk=
Subject key identifier: 52:B4:E7:5F:B4:48:C6:7E:72:87:A9:DF:70:FA:62:3A:0D:51:26:98
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 018333420C57632AE6B23AF5C80EDF0AC779
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/UrTnX7RIxn5yh6nfcPpiOg1RJpg.roa
Signing time: Mon 12 Sep 2022 19:51:49 +0000
ROA not before: Mon 12 Sep 2022 19:51:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51167
IP address blocks: 45.92.31.0/24 maxlen: 24
45.92.30.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:33:42:0c:57:63:2a:e6:b2:3a:f5:c8:0e:df:0a:c7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Sep 12 19:51:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52b4e75fb448c67e7287a9df70fa623a0d512698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3c:6f:ba:b3:af:04:01:17:b8:7a:f0:cd:fb:
fc:14:b4:92:16:e4:c6:e5:45:ae:b3:19:ce:08:c4:
d7:2c:6a:ee:fb:3c:a3:4a:55:b4:4c:2d:b1:fd:e7:
3a:60:f0:3b:45:2c:2e:68:16:cf:71:a1:4c:2e:68:
c5:f5:2d:9f:aa:28:3d:50:58:00:5f:56:49:b7:33:
b4:d6:c9:7b:87:50:82:b5:b4:fb:0f:61:34:2b:ec:
b1:d3:c1:84:b5:ff:61:cb:48:7b:90:7b:27:28:9f:
16:54:95:93:c7:4e:61:fd:be:5f:18:74:d7:25:16:
8f:0e:38:a5:fe:d2:3d:8d:95:bf:d2:28:fc:6d:65:
9d:31:97:00:08:74:eb:63:25:91:c8:a3:93:57:de:
31:f6:7a:2e:b1:27:da:ae:54:18:aa:d3:71:59:43:
5e:64:54:c9:03:55:ec:45:28:f2:d4:3b:29:06:f8:
9b:d4:d4:54:d5:db:f9:7e:1a:92:52:89:68:86:c2:
ac:c2:a9:26:a2:73:d0:c1:4b:9b:89:da:47:1e:b3:
18:83:dc:c8:cd:80:ce:1f:f9:49:34:2f:20:c7:04:
2b:91:10:28:4f:48:d5:b9:d4:7e:2d:8a:b7:10:05:
dd:46:44:5e:2c:cd:d1:0d:ee:33:e2:3d:2c:0b:4b:
b8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B4:E7:5F:B4:48:C6:7E:72:87:A9:DF:70:FA:62:3A:0D:51:26:98
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/UrTnX7RIxn5yh6nfcPpiOg1RJpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.30.0/23
Signature Algorithm: sha256WithRSAEncryption
69:f7:ea:1f:02:c8:fa:6e:2c:1b:27:a7:e0:fb:bd:5f:59:94:
16:2f:03:29:6d:78:60:45:f0:eb:fb:cd:0b:db:b2:38:b9:02:
03:c9:6c:37:9b:eb:1a:06:51:0b:ed:74:2a:0a:83:41:3e:a5:
12:82:a6:81:d8:f1:0b:51:e6:99:6b:77:6c:95:9c:49:a4:eb:
b9:f0:b3:e7:2f:93:97:d9:5c:44:10:e9:72:a5:8d:0d:3b:71:
d7:87:0d:95:a0:04:39:9a:52:e2:f8:0b:4e:55:f6:0d:03:b2:
1d:ee:4f:3b:8b:00:79:32:d0:17:d5:7b:e2:60:b0:42:2e:44:
70:c4:4d:cc:00:64:74:74:5f:89:35:98:b7:aa:15:b7:87:4e:
3a:44:18:03:25:0e:a5:ba:78:a5:a6:68:81:be:0d:5b:74:9d:
ff:1d:bf:6b:4b:f7:b0:bd:e1:e4:0b:df:31:af:92:c4:6a:a5:
37:73:70:b9:b1:ab:9a:ee:4e:2e:f9:90:30:12:e8:a2:00:89:
f2:f8:71:53:b0:df:8d:d2:9a:c9:13:26:1a:aa:91:cc:5b:f4:
1b:e8:12:7a:0d:19:fa:47:18:b4:1a:ea:8b:5f:bb:37:5f:d4:
04:11:94:78:8d:de:47:3e:d9:f8:77:26:b7:fb:91:bc:eb:37:
4b:17:d7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:08 2024 by rpki-client on console-fra.rpki-client.org