Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/a--J1p3e-9VX2lB-orcTUk7rb8E.roa
File: a--J1p3e-9VX2lB-orcTUk7rb8E.roa (raw, json)
Hash identifier: +NTjjGKi3igvZEPTn9gRSGVYGGQoERSR/NP5k905CXY=
Subject key identifier: 6B:EF:89:D6:9D:DE:FB:D5:57:DA:50:7E:A2:B7:13:52:4E:EB:6F:C1
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 01877444F241B244871933BBB1EB610F4965
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/a--J1p3e-9VX2lB-orcTUk7rb8E.roa
Signing time: Wed 12 Apr 2023 07:01:28 +0000
ROA not before: Wed 12 Apr 2023 07:01:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211415
IP address blocks: 45.90.248.0/22 maxlen: 22
194.31.180.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:74:44:f2:41:b2:44:87:19:33:bb:b1:eb:61:0f:49:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Apr 12 07:01:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bef89d69ddefbd557da507ea2b713524eeb6fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0f:3a:0d:1a:94:27:94:8f:79:68:8e:ea:8b:
6d:71:0a:47:aa:f5:6d:43:1b:8d:b2:cc:f7:ec:ad:
67:bf:07:ac:d1:4a:ef:b2:36:7f:78:df:2a:a0:30:
de:78:cd:b5:96:c4:f5:67:fc:51:a9:6f:0f:32:32:
3f:7b:d9:32:9c:e9:7a:87:5b:a7:bb:42:5c:d3:6f:
95:db:ff:6c:c5:db:45:81:3a:f0:77:8f:da:e7:46:
ba:20:fa:d0:7a:6e:36:d3:23:54:e9:35:82:45:26:
5e:af:82:fe:86:82:1f:d9:50:e1:72:1e:d0:d5:0a:
05:ac:69:1d:40:4d:54:af:69:2f:af:81:59:08:3e:
f1:e6:6f:61:4b:e9:18:9f:01:6b:15:d8:75:bd:d9:
a7:0d:02:85:8b:7c:f4:7d:1e:54:5f:ee:4c:4f:88:
93:e4:81:f0:09:0f:39:b3:25:d3:cc:a8:89:51:62:
c6:b3:8c:22:73:23:f7:b5:a3:81:ad:ad:e0:a3:e5:
54:02:56:7b:0b:e1:72:2c:6e:43:28:85:50:17:68:
05:ac:be:33:45:4f:78:ca:de:fa:b0:1d:a9:f3:44:
d8:61:ac:1e:04:b0:61:85:e5:a8:a3:4e:ec:f9:68:
a8:b9:56:7a:51:31:ce:38:d5:10:cd:80:fd:9f:f3:
38:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EF:89:D6:9D:DE:FB:D5:57:DA:50:7E:A2:B7:13:52:4E:EB:6F:C1
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/a--J1p3e-9VX2lB-orcTUk7rb8E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.248.0/22
194.31.180.0/22
Signature Algorithm: sha256WithRSAEncryption
48:db:42:da:1a:e6:49:9c:5a:73:0f:66:c9:79:3d:f4:18:1d:
dc:4f:98:a8:ad:8a:e0:21:55:4e:ae:03:d4:7b:6b:0f:11:76:
b5:c7:b9:bd:49:08:d4:24:42:ff:cb:72:63:a9:70:b2:e1:a9:
80:c6:e3:09:43:83:74:47:ae:6f:00:56:a9:b6:98:76:fe:18:
9d:cc:c1:79:83:f7:f4:1a:cb:04:54:bc:99:c4:75:7e:75:8c:
5d:03:f3:c8:6f:00:1f:79:43:24:9a:ac:fa:35:ee:57:67:60:
58:11:c4:19:d1:ed:c9:37:c5:d9:6b:79:4a:0a:dc:dd:99:b4:
b6:d0:64:01:17:22:f8:2b:ce:60:c3:8f:c1:47:a5:fb:f8:b3:
c2:8e:74:2a:1a:7e:e8:ff:69:9f:7f:3c:27:6a:e6:2d:b1:09:
d3:d2:a6:71:ee:ed:b5:80:28:c1:4f:f1:59:a2:84:d1:82:6c:
dd:af:fb:1e:cb:9d:7a:5b:eb:a4:bc:69:e2:4b:9f:1c:5e:a4:
7a:c3:41:bd:6d:ea:7e:a3:9f:50:32:4c:2d:51:8e:57:fc:0a:
71:8f:67:a1:9e:e2:b6:83:6f:d7:e5:25:ef:84:62:5e:36:b0:
03:68:9e:d1:49:cf:47:ff:2d:3d:80:bc:53:02:a6:51:85:46:
db:22:cc:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:43 2025 by rpki-client