Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/ul048ZeupIlrjGK1Gj2eVk6aH60.roa
File: ul048ZeupIlrjGK1Gj2eVk6aH60.roa (raw, json)
Hash identifier: 3Xs35oinIf5oy/bWH4CQ0jHOl+8F+1EJg8zY292/NKg=
Subject key identifier: BA:5D:38:F1:97:AE:A4:89:6B:8C:62:B5:1A:3D:9E:56:4E:9A:1F:AD
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 01845C771E0511CC15907E23E1991580A859
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/ul048ZeupIlrjGK1Gj2eVk6aH60.roa
Signing time: Wed 09 Nov 2022 12:57:01 +0000
ROA not before: Wed 09 Nov 2022 12:57:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.146.200.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5c:77:1e:05:11:cc:15:90:7e:23:e1:99:15:80:a8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Nov 9 12:57:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba5d38f197aea4896b8c62b51a3d9e564e9a1fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9f:26:9e:ed:aa:17:0d:7d:c9:57:ac:29:46:
f4:68:dd:16:49:24:1c:b6:d4:01:b1:05:6a:19:6b:
02:4e:58:f6:c5:f9:b0:bb:85:6c:fa:1a:c2:f3:de:
95:39:93:9f:71:dd:f0:35:16:53:50:19:b3:87:28:
f6:1e:61:fc:48:46:c6:42:38:63:7e:88:34:ee:b9:
71:00:72:8c:65:86:70:ba:7b:0f:e2:84:12:6f:d1:
bf:3d:bd:b9:29:bd:d0:f4:7e:1d:00:35:45:79:07:
40:8a:41:66:6d:a8:2f:1a:75:be:4b:7e:82:58:0c:
37:cd:71:1e:57:dd:bf:5c:12:52:f2:70:cf:19:72:
d5:d7:a2:55:b2:cd:fd:26:8a:8f:da:6c:b0:68:b6:
50:63:4f:5e:38:0f:5f:0f:7e:7e:c0:75:b4:cc:b3:
1a:1b:c6:33:23:40:bc:d2:5c:3a:44:99:64:c8:45:
a7:89:2d:44:af:1b:24:c1:cb:86:c7:a7:ff:9b:62:
4b:82:49:e4:c0:6f:4a:3f:d7:ae:92:49:ae:0e:1e:
9f:11:47:a0:b1:16:2d:27:3b:2b:c1:b1:b9:da:b3:
0d:b8:04:5c:53:d7:c5:89:15:da:41:57:8d:1e:80:
88:8b:da:a9:03:99:52:bf:4a:3b:47:09:f7:2a:8b:
38:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5D:38:F1:97:AE:A4:89:6B:8C:62:B5:1A:3D:9E:56:4E:9A:1F:AD
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/ul048ZeupIlrjGK1Gj2eVk6aH60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.200.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:30:16:89:04:e7:ea:d9:e5:96:6e:75:54:55:c4:6c:e0:c7:
ab:b5:df:91:22:36:26:02:d2:d9:c1:a2:c6:24:3d:e4:d5:7a:
3f:65:66:ca:29:30:66:cb:6e:0f:f1:90:29:18:68:15:04:45:
80:e0:c0:85:57:54:2f:c6:0b:52:94:c8:d9:13:8e:5a:01:54:
79:67:42:f7:62:80:20:fa:45:b1:fa:c8:0e:ff:6c:6d:02:42:
f0:a8:ea:45:ce:d2:91:95:19:e1:5b:e0:13:a7:d4:ab:80:7b:
fc:2a:93:59:81:f4:de:20:fe:9b:6b:f7:f1:c7:91:51:02:35:
61:01:1d:52:ab:61:7b:3c:17:e6:30:e9:92:67:c4:1a:9a:3d:
f4:d6:53:9f:af:0d:3d:68:af:b9:1f:6f:19:d3:56:f9:7b:f1:
80:da:ae:63:b2:31:78:e7:76:86:1e:1a:5b:4e:44:8f:1a:5c:
f8:9b:76:86:ba:39:74:a2:c6:9c:f8:da:78:6d:ba:34:0a:f2:
25:7a:ed:55:f9:26:2f:50:36:26:39:d0:a4:43:51:be:af:17:
b2:c8:3a:48:82:73:72:12:27:ec:30:c5:ab:43:be:10:53:ab:
e3:a1:fe:fd:27:d7:c8:4e:c2:2f:20:84:4d:72:63:a0:92:a8:
14:4e:27:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:50 2024 by rpki-client on console-fra.rpki-client.org