Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/nYDo9XVBcmgDDZplt4sTsqbXENs.roa
File: nYDo9XVBcmgDDZplt4sTsqbXENs.roa (raw, json)
Hash identifier: GmwU+hio0A8jmSCE4sha3uCktqsCepDwBJYhr5wfG8E=
Subject key identifier: 9D:80:E8:F5:75:41:72:68:03:0D:9A:65:B7:8B:13:B2:A6:D7:10:DB
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 08017394
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/nYDo9XVBcmgDDZplt4sTsqbXENs.roa
Signing time: Sat 01 Jan 2022 06:58:24 +0000
ROA not before: Sat 01 Jan 2022 06:58:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43624
IP address blocks: 45.67.229.0/24 maxlen: 24
45.67.228.0/24 maxlen: 24
45.67.231.0/24 maxlen: 24
2a09:7c44::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134312852 (0x8017394)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Jan 1 06:58:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9d80e8f575417268030d9a65b78b13b2a6d710db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ff:d5:a6:0d:a7:61:bf:44:41:48:3d:d4:cd:
98:9d:8b:9d:7e:86:da:4b:72:fd:f8:4b:77:3d:ab:
97:8f:ba:f2:a1:94:5e:b1:96:f5:e5:43:77:e7:63:
45:f9:f2:e1:2f:f6:23:db:76:c6:63:e2:b4:13:64:
1c:a5:b2:58:b5:25:28:19:7b:fb:81:9a:a9:b3:06:
de:c9:21:1d:e4:4c:bb:52:58:4d:9c:73:20:8a:4b:
89:a9:10:95:7e:6d:26:25:54:6e:e7:52:10:c7:ce:
24:8d:46:14:7e:be:fa:cd:d6:58:42:5c:62:8c:d2:
37:5a:5f:60:62:73:ce:64:8e:2f:de:64:cf:54:1d:
cf:df:73:be:52:dc:c8:da:ec:d1:11:5e:74:b8:d8:
d5:16:72:5a:da:94:5c:0a:bb:1f:b8:e6:1a:30:44:
6a:ff:0b:5a:7b:7a:ac:7a:66:07:fe:45:90:8e:fb:
0f:8b:95:79:ba:04:3f:37:88:77:4b:33:72:0f:06:
ce:35:80:10:07:ff:be:89:e3:da:0d:b3:de:df:31:
6e:cc:cd:9b:d3:73:ca:39:6b:cb:43:35:e7:2e:07:
94:84:ff:6b:48:e4:b0:0a:b4:56:3b:4f:5c:94:3f:
46:b4:37:08:bf:9a:4f:22:81:62:0f:40:9f:47:7d:
6b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:80:E8:F5:75:41:72:68:03:0D:9A:65:B7:8B:13:B2:A6:D7:10:DB
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/nYDo9XVBcmgDDZplt4sTsqbXENs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.228.0/23
45.67.231.0/24
IPv6:
2a09:7c44::/32
Signature Algorithm: sha256WithRSAEncryption
77:01:21:37:0e:0a:6c:96:fa:4b:0d:55:99:33:1b:3e:a2:d0:
ce:da:22:4f:db:fd:6c:3e:37:8c:ac:22:12:a8:d5:bb:8e:c1:
62:46:7c:3e:a0:93:18:b7:7a:b2:81:dc:c2:6a:77:f7:5b:a6:
ce:48:3f:a1:dd:33:4f:e9:97:f4:7a:f1:82:be:13:41:9b:2d:
81:bb:fd:7e:06:7f:44:1c:d3:f8:24:44:32:a7:5f:72:0b:55:
4e:c6:c5:36:1c:89:01:c8:43:91:41:43:a5:2a:c1:0f:33:46:
f1:ac:08:6f:79:f9:a5:22:a8:ba:f0:73:bd:b7:4f:c2:73:23:
11:96:cb:e1:e4:69:43:c2:1b:a8:af:07:9f:51:3b:55:a7:67:
d5:93:ba:9e:b4:ac:06:c3:71:27:54:58:ea:0e:03:4b:5f:1b:
7e:57:fa:c2:ca:91:14:53:5b:b1:44:3f:64:99:a1:86:30:a9:
81:c7:84:bb:f1:1e:2e:d6:c0:e4:64:8c:94:63:c5:9d:ec:6d:
e7:90:f7:4b:7f:ae:be:f2:0b:7b:59:0f:66:91:5d:b7:a3:0a:
b3:38:84:29:ac:78:3b:cd:4f:3d:4f:02:98:3e:81:1a:f9:26:
ab:74:84:24:5c:7e:4e:c6:6e:06:91:c8:6d:1e:a7:75:2a:c6:
0f:0e:1f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:28 2024 by rpki-client on console-ams.rpki-client.org