Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/exs4e6S3iWpY3ziKvV2MhLUzyIw.roa
File: exs4e6S3iWpY3ziKvV2MhLUzyIw.roa (raw, json)
Hash identifier: FRLb8rD5ZXSg5yn9TluBF2P5kG121r/0J9R6BZBzeaU=
Subject key identifier: 7B:1B:38:7B:A4:B7:89:6A:58:DF:38:8A:BD:5D:8C:84:B5:33:C8:8C
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 0602D728
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/exs4e6S3iWpY3ziKvV2MhLUzyIw.roa
Signing time: Sat 01 Jan 2022 16:01:20 +0000
ROA not before: Sat 01 Jan 2022 16:01:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208174
IP address blocks: 45.12.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100849448 (0x602d728)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 16:01:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b1b387ba4b7896a58df388abd5d8c84b533c88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ab:ca:63:01:e2:48:00:30:dc:83:05:de:b6:
2a:74:88:bf:a4:21:f2:08:53:d5:6f:6f:95:4a:48:
76:16:e4:0b:57:8e:ea:96:cf:1f:a1:30:1c:d5:80:
42:8b:bf:22:c2:02:50:99:7c:df:a3:99:6c:0c:de:
2d:dc:46:7c:70:e5:53:11:1f:91:3c:92:8b:4e:af:
85:5a:1b:7f:d6:f2:97:52:c2:a5:17:d5:23:55:54:
89:31:bd:a3:56:6f:09:5e:e4:a9:07:1f:ee:76:56:
84:1b:eb:27:c3:92:40:66:01:a6:fc:a7:03:fc:f2:
04:1c:c0:24:5a:f5:95:3d:e0:96:fa:89:23:6d:45:
31:03:11:05:95:ee:2d:14:6e:0e:bd:ac:ed:f5:2c:
31:ff:a2:22:89:af:23:fe:61:14:dc:27:b2:b9:35:
6b:6a:9d:32:d5:01:ed:44:c3:c7:87:01:a5:2f:58:
2f:f9:ea:35:9e:39:98:fc:42:06:87:ef:7d:5f:af:
2e:66:49:50:93:a5:49:ee:12:bf:bb:ae:3e:24:cd:
2f:54:d2:c2:28:79:c7:d2:91:03:f3:24:f6:e0:cf:
05:d4:47:ec:12:35:66:db:1b:8d:aa:a0:ef:5d:cd:
3f:3d:6f:d6:c3:d7:1a:42:f2:37:2e:9d:d3:09:f4:
ec:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:1B:38:7B:A4:B7:89:6A:58:DF:38:8A:BD:5D:8C:84:B5:33:C8:8C
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/exs4e6S3iWpY3ziKvV2MhLUzyIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.28.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:e6:34:a5:c3:f9:7a:52:77:e9:75:86:6a:7a:4b:7c:14:bd:
6f:05:b2:6c:c5:ff:f0:05:7b:5e:45:d3:64:48:eb:4b:47:d0:
d8:3f:22:53:8c:e2:37:85:d7:8e:f8:47:49:7b:56:05:7f:b0:
7d:39:f0:1f:c8:41:fd:0b:58:6b:c5:cb:9d:61:71:08:bd:57:
0e:96:8a:c0:4d:0a:3e:2e:7f:87:15:b8:54:f7:d9:ce:5c:33:
70:a3:34:c2:b2:c4:91:86:6d:10:8e:9e:05:9b:7a:8e:94:87:
2b:4a:5d:54:af:13:16:c1:07:91:3b:5e:26:72:79:1a:77:e4:
46:ef:a2:5b:c5:c2:27:0e:4d:1f:46:20:80:2b:01:67:42:86:
15:d0:1e:f1:72:4a:b0:d0:93:8a:c1:18:84:a2:19:e2:92:15:
17:a6:28:c6:4b:6b:f4:66:b3:ae:9c:22:6b:24:22:0d:7f:7e:
42:9a:00:94:81:c2:23:2c:b2:dc:72:ec:df:4d:de:f8:be:c9:
47:7b:ff:21:63:a9:4b:53:e5:3b:b6:c0:81:a6:cc:69:a7:85:
4b:82:81:9e:75:12:1a:7d:e2:e2:27:f1:7f:d0:f5:7f:67:98:
fa:52:0b:01:7b:0f:0b:ff:bb:30:25:92:18:68:a7:47:cb:2a:
4c:37:ab:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:45 2023 by rpki-client on console-fra.rpki-client.org