Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/qxbqNRKAmeH5Ea1ekCBHPdDg5VA.roa
File: qxbqNRKAmeH5Ea1ekCBHPdDg5VA.roa (raw, json)
Hash identifier: WBXdh/1qupIwB2YfLCbU/SklWecvrieYxbgsNuwcEtY=
Subject key identifier: AB:16:EA:35:12:80:99:E1:F9:11:AD:5E:90:20:47:3D:D0:E0:E5:50
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 15618A27
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/qxbqNRKAmeH5Ea1ekCBHPdDg5VA.roa
Signing time: Sat 01 Jan 2022 11:55:37 +0000
ROA not before: Sat 01 Jan 2022 11:55:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 45.146.202.0/24 maxlen: 24
45.146.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358713895 (0x15618a27)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jan 1 11:55:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab16ea35128099e1f911ad5e9020473dd0e0e550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:55:b0:e7:49:a9:c0:2e:ff:21:d9:99:8d:f0:
cf:48:e7:73:81:76:9f:42:b2:88:f0:50:f3:6a:2b:
24:ea:38:b7:a2:40:68:be:d1:e6:ff:8f:82:ec:5a:
cd:c0:59:ec:36:0c:62:dd:7e:19:22:cc:b7:bb:e0:
f4:d0:cf:db:92:50:75:4f:53:e0:bb:30:8c:cd:39:
7a:5f:7a:a3:71:79:d5:a6:6d:d0:ba:14:7e:4c:b9:
bc:ac:9a:5a:13:10:84:ae:f1:a2:a5:81:c7:0d:61:
e3:75:ce:65:44:13:a8:97:62:15:36:53:75:7c:81:
08:7e:cc:0c:d3:30:7a:aa:20:d4:6c:fa:72:a2:c5:
ea:32:91:b8:a4:67:fd:2b:32:6b:57:de:15:8c:a6:
70:35:ad:8f:6a:e4:e7:8a:96:7f:1e:fe:92:37:54:
c3:b4:17:65:88:a6:fd:7f:6c:01:b7:7a:c6:cd:9f:
80:62:a2:dd:46:76:9e:b5:39:47:fa:b5:78:a2:a9:
6a:76:47:dc:85:09:b5:97:33:4c:79:fc:1a:b9:18:
0b:f8:54:56:c1:f3:e2:a1:7b:1f:7a:82:a6:8e:ac:
30:da:47:e7:11:d2:04:b1:fe:06:38:d1:5a:b1:11:
ee:a0:6f:98:46:aa:f3:63:eb:88:07:f3:dc:71:bd:
f0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:16:EA:35:12:80:99:E1:F9:11:AD:5E:90:20:47:3D:D0:E0:E5:50
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/qxbqNRKAmeH5Ea1ekCBHPdDg5VA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.202.0/23
Signature Algorithm: sha256WithRSAEncryption
67:a2:1f:6a:06:33:3c:cb:86:27:06:5d:59:c0:c2:41:67:18:
1a:c5:c6:01:6d:7c:bb:9c:91:b3:72:4d:36:50:ee:37:59:e2:
80:0c:a7:ac:46:91:24:0a:91:c1:36:30:b3:12:be:ff:7f:85:
c8:8b:49:20:75:d2:0c:ab:91:7f:6f:2c:b5:70:53:05:07:c1:
81:72:ea:4e:32:ad:12:90:fe:68:3d:e7:92:5a:ef:8e:37:f7:
ec:9f:60:87:50:1f:46:ac:aa:b1:b8:be:92:54:1c:9d:72:b8:
cc:b7:58:e9:08:73:c3:46:77:1f:10:a6:75:cf:85:c7:1f:f0:
c7:7e:e1:56:c7:fc:53:49:79:01:d3:90:2c:26:81:51:7c:8f:
66:80:f6:e1:91:60:f3:57:27:bf:ab:8d:31:a8:6c:0b:d4:6b:
a0:a2:a0:75:73:fb:bd:cb:bd:2d:07:e4:e2:b6:13:75:5a:2d:
b0:d1:ef:3d:8b:6b:9b:ae:b3:8f:9d:a7:6b:dd:bb:25:ce:dd:
1d:a7:bb:2f:e0:68:b7:83:8b:c6:56:4d:21:11:58:31:47:1b:
2d:a4:60:41:fb:1d:1b:b9:3f:63:53:10:90:3a:82:c0:7c:9c:
56:22:09:48:61:33:28:cd:ba:3c:a7:da:e3:ab:43:79:4d:e2:
88:5b:7d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-ams.rpki-client.org