Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/kq6-SJZkfCJfGGriCh723l4niCM.roa
File: kq6-SJZkfCJfGGriCh723l4niCM.roa (raw, json)
Hash identifier: xKCSqXgIDbKjjPsiTlgT6KKyqVr5xPFzcsLrdu+WH64=
Subject key identifier: 92:AE:BE:48:96:64:7C:22:5F:18:6A:E2:0A:1E:F6:DE:5E:27:88:23
Certificate issuer: /CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
Certificate serial: 0932BE3B
Authority key identifier: 29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/kq6-SJZkfCJfGGriCh723l4niCM.roa
Signing time: Sat 16 Apr 2022 14:36:34 +0000
ROA not before: Sat 16 Apr 2022 14:36:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208956
IP address blocks: 45.13.67.0/24 maxlen: 24
45.13.66.0/24 maxlen: 24
45.13.64.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154320443 (0x932be3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
Validity
Not Before: Apr 16 14:36:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92aebe4896647c225f186ae20a1ef6de5e278823
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0a:64:13:fd:34:b1:ac:91:29:96:be:f3:6c:
7c:88:73:0c:92:94:d1:8d:36:2b:6c:13:2b:2f:e5:
0a:08:8c:bf:e3:fb:02:c4:d5:06:67:db:3e:11:1c:
99:71:3c:35:d6:b2:bc:0d:e6:f7:9c:cf:8c:bf:c5:
fe:36:7d:73:f6:64:0b:f6:7b:20:40:bb:12:87:5b:
dd:95:93:c2:ee:ca:23:06:30:04:40:b6:38:82:fc:
b1:a5:15:c5:6f:1b:df:62:b6:68:17:13:55:d0:88:
97:33:b0:c9:3e:16:6f:df:1b:e2:9b:90:c7:d7:8d:
6f:0e:b0:7d:d3:f5:d6:a1:3b:fc:39:3d:e6:aa:f2:
fa:2b:df:03:9e:21:bd:31:42:9d:85:9a:4d:c5:61:
9e:a7:85:82:22:fe:70:0b:0d:0a:a8:75:2a:ad:d9:
ec:4a:65:c2:2f:9f:ae:ef:79:a9:ac:5f:65:c8:64:
a3:00:63:91:cd:a1:a0:da:1b:05:e1:f3:4a:26:6e:
81:1f:79:fb:28:80:a4:05:3f:75:45:fc:39:a7:f1:
97:0a:02:c6:a4:17:f9:ef:a4:a4:c0:88:05:1e:ee:
d1:06:e8:8f:93:cf:9d:92:e3:f0:7b:50:d6:cf:8d:
f7:3f:5c:73:4f:97:9e:a7:98:36:e3:93:39:82:91:
1c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AE:BE:48:96:64:7C:22:5F:18:6A:E2:0A:1E:F6:DE:5E:27:88:23
X509v3 Authority Key Identifier:
keyid:29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/kq6-SJZkfCJfGGriCh723l4niCM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.64.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:35:e9:58:ed:50:f8:cb:fa:eb:55:bc:93:71:ee:cc:76:95:
79:8b:33:77:a7:70:f5:5a:d8:bb:70:2b:7d:8e:d3:a9:5f:e6:
c7:89:39:e3:ee:41:65:3b:f6:dd:cd:62:43:3c:e0:11:07:91:
01:ce:f5:03:b4:9a:34:a1:ed:29:44:8a:93:40:f9:47:71:82:
f8:d9:64:d8:31:34:e7:8e:39:bf:5a:f6:7d:a8:74:c3:68:de:
29:01:4c:c5:43:87:ed:c6:2d:1f:a3:8d:9e:ed:a2:31:9b:ef:
af:90:d7:f2:26:d6:50:5c:53:f4:5b:24:8b:47:46:9f:e2:34:
85:fb:82:68:4a:e3:6d:5c:57:91:3d:bc:29:8d:08:4e:2a:1b:
50:e8:9c:44:c4:10:ab:78:32:2a:ab:d7:4e:e3:6c:4e:ea:06:
db:70:81:93:3e:bd:9b:99:69:a4:2a:39:21:dd:77:47:67:cc:
b3:5c:65:78:9c:2b:5a:83:a7:4a:fa:0e:82:dc:14:44:3a:fa:
22:7f:40:fb:bb:89:fa:1b:8d:7d:bd:7b:12:a9:96:4d:a4:30:
b3:b7:1d:3e:26:dd:1c:d1:7a:24:8f:a1:71:43:90:2f:c1:b3:
e0:1f:9a:f7:25:6a:13:a6:e7:c6:c0:17:a4:36:e3:e0:e5:cb:
4f:a8:a4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:28 2023 by rpki-client on console-ams.rpki-client.org