Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Wdq7kuphbRvLRwBEdqurjdV-fqE.roa
File: Wdq7kuphbRvLRwBEdqurjdV-fqE.roa (raw, json)
Hash identifier: Ze1rcaKWofRgQVozWratbgQH945x5Ak/A1EENMLfVxs=
Subject key identifier: 59:DA:BB:92:EA:61:6D:1B:CB:47:00:44:76:AB:AB:8D:D5:7E:7E:A1
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 1ADBE79B
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Wdq7kuphbRvLRwBEdqurjdV-fqE.roa
Signing time: Tue 29 Mar 2022 08:26:21 +0000
ROA not before: Tue 29 Mar 2022 08:26:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49981
IP address blocks: 45.139.163.0/24 maxlen: 24
45.83.207.0/24 maxlen: 24
2a07:e344::/32 maxlen: 32
2a07:e342::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 450619291 (0x1adbe79b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Mar 29 08:26:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=59dabb92ea616d1bcb47004476abab8dd57e7ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f3:f5:62:a6:73:46:60:0d:a3:8b:53:2a:37:
49:ec:0b:39:46:9a:0b:48:f3:ab:f0:9c:2b:a4:71:
7b:79:c3:34:c9:56:86:be:13:a1:7d:88:cd:e7:a8:
b5:aa:a4:87:39:b9:90:4a:0b:0b:e6:33:5a:ae:e6:
d2:b5:2c:57:b7:c1:61:09:d8:23:20:9e:71:f8:cb:
e8:ba:31:88:db:82:05:6d:f7:11:0e:6f:63:5e:67:
30:85:a7:f6:fc:3e:89:c8:c7:4c:b9:e4:0f:31:b1:
f4:b9:e7:da:d0:c7:b3:74:9f:2a:89:1c:64:24:51:
f6:18:aa:7c:10:08:83:c3:6b:ae:c2:81:2f:e4:22:
a4:7a:fe:12:32:0c:3c:c3:a3:c3:20:a3:24:79:c5:
01:38:7c:dc:16:25:93:0d:6e:4f:16:c7:02:b5:23:
a8:91:16:f8:b5:cb:34:4f:3a:47:bf:96:43:05:49:
5a:ee:db:9a:ec:40:4d:82:29:fc:94:51:77:c9:72:
a6:8e:d1:04:44:bf:ef:a7:b1:17:c2:5d:26:31:9a:
b9:37:e6:e7:7d:6c:cd:49:7d:30:43:f9:bb:40:0f:
d4:52:6b:aa:96:b9:f5:60:d9:d4:55:08:6b:4a:ea:
6b:da:f2:20:3f:96:af:54:8e:7f:0e:56:b7:a5:96:
22:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DA:BB:92:EA:61:6D:1B:CB:47:00:44:76:AB:AB:8D:D5:7E:7E:A1
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Wdq7kuphbRvLRwBEdqurjdV-fqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.207.0/24
45.139.163.0/24
IPv6:
2a07:e342::/32
2a07:e344::/32
Signature Algorithm: sha256WithRSAEncryption
3b:60:6d:c6:18:c9:5f:2c:ae:95:41:c3:df:07:f8:f3:c5:40:
b7:c9:4f:0b:bc:f0:39:c8:cf:a8:7e:92:74:51:80:79:dd:59:
7f:86:9a:de:45:6d:2c:a9:11:2e:5b:83:fd:6c:8e:69:ca:e6:
71:d8:a5:30:7f:cd:a3:c2:b2:b4:0e:93:a5:c1:1f:b2:b2:a2:
76:96:3a:18:3c:af:61:c1:3b:de:50:86:f1:9a:9e:3d:e8:91:
04:38:76:54:0e:45:d4:1d:b6:68:8c:54:93:bf:da:0b:40:b6:
15:38:6e:5c:4b:f4:1f:c8:8f:be:06:0f:83:89:15:93:33:ea:
f8:a3:17:10:80:83:31:b9:66:aa:e9:2b:b8:2e:69:52:2e:59:
93:d2:c2:56:55:a6:7b:f2:d7:bf:7d:d7:79:11:4e:b1:a3:6c:
e0:9c:18:eb:7c:31:30:af:87:7e:52:76:38:a8:bb:46:9c:0f:
c8:2e:ad:a8:08:f8:7e:d4:9a:e3:86:25:b4:4f:a5:c2:e7:b8:
78:14:bd:25:98:c1:f4:b6:2c:e6:bf:f5:90:e8:f6:15:17:75:
99:80:03:2a:5c:5c:4a:c8:1f:fa:33:33:48:bc:e2:38:b7:94:
f3:02:82:ec:e3:64:14:2a:55:66:f4:e1:d3:5e:17:7d:01:b5:
b3:56:76:25
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org