Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/FY75lkyKWZoYQrEzRGpws9Qg9CA.roa
File: FY75lkyKWZoYQrEzRGpws9Qg9CA.roa (raw, json)
Hash identifier: paT+9NZ9RNXphfDUHarm+Kn/8e60NaS/+vLxpESEbHM=
Subject key identifier: 15:8E:F9:96:4C:8A:59:9A:18:42:B1:33:44:6A:70:B3:D4:20:F4:20
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 01823665471849310CFB085998DECB914D38
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/FY75lkyKWZoYQrEzRGpws9Qg9CA.roa
Signing time: Mon 25 Jul 2022 17:26:23 +0000
ROA not before: Mon 25 Jul 2022 17:26:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43624
IP address blocks: 45.67.228.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
2a09:7c44::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:36:65:47:18:49:31:0c:fb:08:59:98:de:cb:91:4d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Jul 25 17:26:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=158ef9964c8a599a1842b133446a70b3d420f420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ae:4a:20:d3:a6:8d:17:2a:d9:5c:18:c2:d8:
78:ae:3e:80:0d:fd:eb:f3:de:47:43:3d:97:d6:76:
72:cb:e4:be:0c:92:36:90:a6:5c:43:e9:8c:8c:b6:
d8:57:ea:4d:9e:c4:d3:67:f8:26:ee:a3:01:ae:4a:
14:2e:f1:8a:18:56:d5:31:97:72:ef:2d:3f:9c:4e:
13:8a:c2:ff:58:84:64:51:60:51:77:25:f7:80:d0:
1a:8c:21:25:d6:a5:8f:a7:a5:66:8e:90:ad:34:e3:
f5:9f:e6:55:6f:28:3e:08:81:b6:39:29:fe:b8:c8:
a0:f8:24:b6:1c:28:ac:27:59:a7:1a:17:aa:b7:0b:
06:37:db:07:e1:53:13:11:30:c8:d2:c0:76:80:4e:
4e:0d:70:89:66:b9:05:dc:f1:72:4c:e0:b5:6c:c1:
00:98:53:76:ef:e7:8b:88:09:b3:3d:3f:a3:b4:69:
ca:ab:a8:b8:ca:3d:70:78:c7:8a:04:a3:64:27:51:
ef:df:6b:7a:03:9c:b1:b8:e5:0d:fb:df:dc:11:58:
e1:f8:73:bc:57:71:0d:1d:ec:fc:bf:ec:4e:cd:07:
74:dd:4b:a9:b1:76:8b:b1:98:13:e4:c0:1d:0d:f4:
de:e5:08:d5:63:86:c6:81:58:36:ff:c8:f3:9c:a7:
ac:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8E:F9:96:4C:8A:59:9A:18:42:B1:33:44:6A:70:B3:D4:20:F4:20
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/FY75lkyKWZoYQrEzRGpws9Qg9CA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.228.0/24
45.67.231.0/24
IPv6:
2a09:7c44::/32
Signature Algorithm: sha256WithRSAEncryption
17:2f:1d:ff:e9:e6:d6:24:25:b2:ab:26:7b:91:33:a2:3b:6e:
10:d7:25:5b:2e:13:40:3f:23:dd:64:10:45:88:f3:0c:b0:80:
86:f9:ee:2d:8f:a1:55:15:50:e2:d3:87:7a:1d:02:f0:f8:80:
3d:79:6d:35:f2:a0:1e:f2:34:5f:fd:02:1e:f2:eb:83:f6:f1:
ed:36:a6:a7:f6:15:62:d2:4d:f1:e5:c7:f8:a7:55:19:aa:02:
27:c3:0d:21:45:97:ed:72:56:26:96:49:90:33:76:af:a9:15:
7b:06:42:e8:c4:59:8d:0b:5a:b8:a4:e8:fd:99:fa:ab:c0:6e:
d9:1e:a5:6d:de:8f:a0:e3:bc:3e:44:f8:9f:e5:27:9e:39:1e:
9a:ed:22:f5:07:c9:74:86:28:69:a6:ea:e2:aa:dd:98:50:e2:
27:0c:4f:52:fb:3d:a2:f5:78:bf:bc:c9:8a:a4:81:1b:83:7e:
a0:16:b8:00:9a:de:94:24:0a:01:93:9c:a2:e8:f7:50:a3:91:
48:2d:62:27:57:bc:4a:1d:45:7c:5a:75:c7:fc:80:ee:4d:30:
16:9b:ee:be:43:b2:b2:ed:08:f3:43:4e:e0:5b:fa:9e:0c:69:
ec:e1:9e:4d:eb:76:f3:22:f8:fc:d6:db:06:5d:48:ae:a4:b4:
a1:91:f6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-fra.rpki-client.org