Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/T4Fs1nT_UKekfmN0A08dopPZwLE.roa
File: T4Fs1nT_UKekfmN0A08dopPZwLE.roa (raw, json)
Hash identifier: QskeQV3wE+zhgP3tHjntCGCD8Qjp9HtlByiQ2018btg=
Subject key identifier: 4F:81:6C:D6:74:FF:50:A7:A4:7E:63:74:03:4F:1D:A2:93:D9:C0:B1
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 018418DA3DA837806BB6EB253A933DE49D3F
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/T4Fs1nT_UKekfmN0A08dopPZwLE.roa
Signing time: Thu 27 Oct 2022 09:51:06 +0000
ROA not before: Thu 27 Oct 2022 09:51:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210558
IP address blocks: 45.138.16.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:18:da:3d:a8:37:80:6b:b6:eb:25:3a:93:3d:e4:9d:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Oct 27 09:51:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f816cd674ff50a7a47e6374034f1da293d9c0b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5a:b0:d6:2f:c3:44:fc:06:56:d1:d3:6b:96:
92:e2:55:7e:5d:f5:61:00:a8:b9:e3:8c:6f:34:23:
6c:e2:8a:c6:01:51:09:52:7e:c3:92:3f:14:07:cf:
69:48:81:ca:2a:17:84:1b:24:3d:7b:55:01:a1:1f:
4e:04:3e:74:e1:57:d7:48:df:79:c3:4e:66:0b:3f:
54:5c:fa:30:94:21:92:5b:9b:65:ea:c4:04:12:13:
a8:cf:0c:2d:fe:01:2f:1e:3a:b5:5b:72:ad:27:7e:
af:4e:55:2d:ae:54:8e:29:b3:c3:9e:ef:72:4e:d0:
8b:3d:55:7c:0e:3a:ac:73:9d:2a:26:21:ed:8f:9a:
20:29:0e:3b:fe:ba:78:d0:a2:57:da:26:9a:0e:8e:
bf:41:47:5a:36:78:74:fc:be:0e:16:b3:40:0e:a0:
c9:76:13:6c:d8:b9:77:0c:de:e3:fb:eb:60:0b:f0:
2a:c2:e1:92:a8:9b:24:11:c5:80:bb:53:88:7a:e3:
5f:51:7a:3e:e7:3e:6f:01:76:e0:8c:50:e2:d3:81:
9a:7e:31:64:f2:9e:38:40:21:6f:13:c8:0e:21:7e:
18:d1:9c:0e:4b:bc:a6:eb:70:fc:bc:7a:0d:93:7a:
e7:26:b8:6f:51:00:6f:f7:5e:14:60:43:c4:42:b9:
f3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:81:6C:D6:74:FF:50:A7:A4:7E:63:74:03:4F:1D:A2:93:D9:C0:B1
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/T4Fs1nT_UKekfmN0A08dopPZwLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.16.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:dc:32:d0:bd:06:bf:c6:ad:7a:9e:96:b1:7a:12:60:8b:f1:
3f:7c:58:05:c5:b0:c8:f0:1e:10:32:a8:b2:69:89:45:bb:1e:
76:78:81:b4:84:e9:38:0d:46:6e:09:4f:bb:e3:36:67:9f:86:
a5:de:92:e9:e9:14:65:17:9b:fe:76:3b:4e:fb:f9:06:fb:fd:
10:19:6b:47:8a:66:d6:3e:90:37:1e:60:3a:9f:2e:b5:80:f3:
91:80:fc:33:a7:93:19:24:0e:7f:1f:98:d2:e4:57:d2:cb:b0:
79:dd:38:ee:dc:43:27:ad:10:0d:0a:3c:23:0a:5b:90:93:79:
d1:bf:38:4e:ce:e1:9f:b4:f0:24:48:1a:19:44:45:75:8f:ee:
eb:e2:fa:05:07:b8:46:99:df:8c:b8:46:b5:5b:81:fc:b6:15:
fc:d1:14:03:cb:76:7b:1c:67:fa:4c:8d:9f:6d:09:93:37:3a:
dc:ba:82:3d:40:c4:91:ac:c5:f4:ef:6c:bb:45:38:2c:3a:84:
a5:ec:50:3a:5e:01:52:67:d6:98:07:68:36:a8:15:93:da:22:
aa:48:79:b9:d2:8c:23:53:bb:0d:14:9f:9f:fe:a2:33:5f:ad:
98:90:d5:eb:01:74:7c:e4:25:a1:71:76:11:64:49:20:11:50:
b5:fb:b5:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org