Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/wK2ZJbpco0EUOiglF9HRiKyRwuU.roa
File: wK2ZJbpco0EUOiglF9HRiKyRwuU.roa (raw, json)
Hash identifier: o9Ew2G3QfP6kKueEzC7GkvCzIM+kP9ljM4OL6oL15zQ=
Subject key identifier: C0:AD:99:25:BA:5C:A3:41:14:3A:28:25:17:D1:D1:88:AC:91:C2:E5
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 018263E9EB9EBFEAAB163E32510E3592EBE7
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/wK2ZJbpco0EUOiglF9HRiKyRwuU.roa
Signing time: Wed 03 Aug 2022 13:34:10 +0000
ROA not before: Wed 03 Aug 2022 13:34:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209242
IP address blocks: 45.12.30.0/23 maxlen: 23
45.85.118.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:63:e9:eb:9e:bf:ea:ab:16:3e:32:51:0e:35:92:eb:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Aug 3 13:34:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0ad9925ba5ca341143a282517d1d188ac91c2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ea:2f:8b:00:de:55:fc:12:55:a8:03:73:db:
7e:ab:26:ca:54:ef:64:ad:18:c8:d0:c4:eb:29:d8:
a4:8b:f3:ce:02:c6:ae:58:4f:6f:2b:71:e0:61:48:
16:5e:40:b0:ce:9b:2e:51:23:aa:30:a7:16:76:07:
6a:5e:71:1a:29:fb:0d:8d:95:88:95:de:10:8b:93:
36:84:1e:27:e6:ba:f5:b1:5f:91:5b:21:7d:45:6d:
aa:8a:92:c7:e3:ea:88:1b:9f:07:84:e8:d5:8b:79:
aa:b1:af:d4:3d:18:26:09:eb:ed:43:ef:07:27:18:
62:7e:4b:c2:ae:8a:ca:31:2c:ed:e5:23:67:7f:7a:
e2:79:34:5c:3a:e9:2b:e3:2c:cd:f7:dc:76:d0:59:
84:15:54:da:ff:e8:ef:58:eb:cc:80:c2:de:4d:19:
0d:fe:a1:28:f9:dd:f7:6b:d4:1c:ff:11:8c:52:e9:
b1:96:18:67:7a:51:09:37:18:37:a7:c8:b9:af:7b:
1d:b0:fd:1f:7a:2b:40:90:b1:e7:e5:34:b8:9d:37:
8f:34:5e:7f:53:34:84:ca:87:b6:96:c9:c4:e6:3d:
5f:26:e2:54:ae:b2:f5:cc:ff:98:05:20:0f:aa:84:
b8:cf:35:d4:f3:7d:f3:7f:11:14:d9:57:f1:00:5b:
ce:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:AD:99:25:BA:5C:A3:41:14:3A:28:25:17:D1:D1:88:AC:91:C2:E5
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/wK2ZJbpco0EUOiglF9HRiKyRwuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.30.0/23
45.85.118.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:70:5c:a7:b8:2a:b8:22:57:91:68:1f:90:17:5a:3e:a5:c7:
9f:40:5c:0f:4e:20:d4:95:4f:6e:4c:ed:c2:b8:55:69:e9:f6:
3f:60:97:67:df:76:99:75:71:86:29:51:8b:3b:d1:21:c8:c1:
dc:14:26:cc:0b:ad:03:ce:87:5e:c3:ee:f6:cd:e0:c4:1d:c1:
24:e4:bd:68:8d:a1:1d:46:26:6e:a8:cc:28:f3:87:48:d8:9d:
80:1a:e1:96:f6:ec:8c:56:cc:7a:1d:df:fa:d2:6f:e9:db:cf:
2f:42:9b:cd:0f:9e:ee:46:42:6b:b9:8f:52:fc:cf:cf:a0:98:
e6:16:48:9c:4c:85:5c:d1:64:ea:50:36:48:d9:51:6e:5e:bb:
5f:c9:88:31:7e:a0:36:c1:34:56:0a:58:fc:69:42:a0:72:65:
41:54:6c:88:68:67:6d:88:7f:4f:b3:a5:a0:c1:27:25:23:fa:
1f:33:af:00:df:9f:a4:38:93:fd:f2:b3:53:4f:1b:bf:83:7c:
3a:91:bd:d7:ff:85:db:0e:81:2c:fb:fc:40:9c:82:b9:23:34:
86:ce:5f:a2:13:9a:9b:73:9e:ff:b4:26:b4:15:85:fa:e3:4f:
36:1a:63:9e:92:56:df:58:15:a5:1e:1e:a6:2a:bc:00:d7:66:
2c:ba:29:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:25 2024 by rpki-client on console-fra.rpki-client.org