Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/1hV8GoiMM-b3s7hLuEtJOdU_T1Q.roa
File: 1hV8GoiMM-b3s7hLuEtJOdU_T1Q.roa (raw, json)
Hash identifier: 1diNIH3C8tgYWhcp2cT9iONysii/ytRE69Ic/qMCLcE=
Subject key identifier: D6:15:7C:1A:88:8C:33:E6:F7:B3:B8:4B:B8:4B:49:39:D5:3F:4F:54
Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial: 0182501A1657922ECD2E2D0EC1C7D8DE0EC0
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/1hV8GoiMM-b3s7hLuEtJOdU_T1Q.roa
Signing time: Sat 30 Jul 2022 17:14:23 +0000
ROA not before: Sat 30 Jul 2022 17:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 45.13.30.0/23 maxlen: 23
77.83.223.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:50:1a:16:57:92:2e:cd:2e:2d:0e:c1:c7:d8:de:0e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Validity
Not Before: Jul 30 17:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d6157c1a888c33e6f7b3b84bb84b4939d53f4f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:b5:47:46:61:1c:68:99:62:1f:a8:c0:2b:
ca:d3:5a:ae:e3:06:fc:09:e2:00:41:9d:be:c5:03:
06:4b:d0:98:e5:c1:0e:6a:bb:37:06:09:9c:d0:e3:
64:3d:3b:66:11:fb:b0:05:c6:ef:e2:fb:8c:84:95:
79:20:ef:4f:b1:4f:10:fb:f6:6c:8e:0d:50:39:15:
99:39:62:fe:d8:f1:f1:73:23:1a:02:50:b9:88:d1:
98:3a:2e:3d:15:e8:f4:17:9e:04:13:05:b0:d3:83:
bd:c0:2c:3e:28:72:85:12:f8:88:cb:1e:2f:16:27:
e9:56:d8:c0:ff:6c:75:f8:a7:f9:e5:16:d0:37:56:
0c:a3:d6:b3:21:4c:b6:77:4a:3c:fb:fc:e5:98:23:
9a:7d:f3:33:05:f3:95:dc:6b:82:74:4e:22:7a:4f:
ad:a3:4b:47:53:87:70:14:ce:e3:8d:aa:2d:87:68:
e1:46:b5:51:2b:a6:12:6e:d1:62:82:c4:82:84:d6:
db:8e:6f:3b:00:83:13:15:b9:bf:d3:b6:79:bf:38:
08:41:d2:de:65:95:9a:7d:16:e4:0a:58:f7:b6:32:
89:bc:2e:68:09:74:26:8e:1a:b2:59:5c:4f:41:a0:
43:62:0e:8e:67:bc:26:64:7c:a3:ad:5c:03:bd:a2:
40:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:15:7C:1A:88:8C:33:E6:F7:B3:B8:4B:B8:4B:49:39:D5:3F:4F:54
X509v3 Authority Key Identifier:
keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/1hV8GoiMM-b3s7hLuEtJOdU_T1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.30.0/23
77.83.223.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:7b:f5:1a:69:ad:f9:5f:dd:cc:60:26:d6:32:a4:27:66:a0:
66:5f:06:7a:f3:56:46:f5:cc:c8:bb:5d:77:cb:5f:4a:28:a8:
f9:d3:39:d7:ee:61:1d:63:8c:7a:60:7f:1f:90:4e:1c:af:9b:
2b:8b:12:9b:95:0e:cd:b6:a9:da:24:c0:21:c3:d8:e5:48:f5:
c6:06:e3:b8:5f:26:a6:ae:78:4e:98:f7:f7:f4:b1:c2:19:f3:
bf:ac:77:bf:67:14:34:d9:e5:4d:de:e3:3a:ae:63:9e:ab:d4:
b6:05:4f:58:0f:22:25:d7:dc:8a:41:74:e2:49:5d:96:99:8d:
d6:5a:e2:b1:d5:03:88:7f:4a:7c:5f:1a:6c:17:8e:b6:a1:e4:
b7:ed:24:14:31:1b:bd:75:ac:13:98:ef:60:ea:a5:5d:d8:24:
de:af:e9:85:cb:66:de:e4:fd:dc:a8:45:76:dc:16:20:e7:18:
94:a1:7b:2b:13:cc:45:90:42:24:56:8a:1b:09:75:1e:c6:df:
9e:85:70:2d:10:03:0e:dd:9c:5e:ce:54:e6:44:89:77:ce:c1:
c9:f2:c7:7a:21:68:9b:42:92:23:99:11:29:9e:24:a3:da:e1:
5b:30:1b:50:2a:68:a1:74:2b:bf:9a:d2:de:4b:39:cf:78:f5:
87:d9:6f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:09 2023 by rpki-client on console-fra.rpki-client.org