Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/erSDxrlfsuUVPuEyfVdchnp3604.roa
File: erSDxrlfsuUVPuEyfVdchnp3604.roa (raw, json)
Hash identifier: lDCTt1NYJRvIALqeVqHhk5zPUukPLWEpfx7rEGZs/Gs=
Subject key identifier: 7A:B4:83:C6:B9:5F:B2:E5:15:3E:E1:32:7D:57:5C:86:7A:77:EB:4E
Certificate issuer: /CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Certificate serial: 0185299FC7CEDCC5A3845168635D54B49F40
Authority key identifier: 80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/erSDxrlfsuUVPuEyfVdchnp3604.roa
Signing time: Mon 19 Dec 2022 09:03:35 +0000
ROA not before: Mon 19 Dec 2022 09:03:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41881
IP address blocks: 45.142.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:29:9f:c7:ce:dc:c5:a3:84:51:68:63:5d:54:b4:9f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80ad8c520bb9677461ddc4ec09b76d733b7d8370
Validity
Not Before: Dec 19 09:03:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7ab483c6b95fb2e5153ee1327d575c867a77eb4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ec:ce:99:2b:19:90:1c:bc:13:79:6f:05:dd:
fb:0a:c5:b1:09:c0:a9:57:5e:e9:ac:6d:2a:28:97:
5c:cb:14:57:17:cd:5b:0a:f1:c7:81:73:76:ff:dd:
d2:7d:88:5b:e7:83:6e:6e:d6:cc:9f:81:20:2f:b9:
47:dd:96:f6:a1:da:2d:dc:b7:7d:9f:87:b8:95:60:
07:5f:6a:3a:a9:07:ed:08:70:84:14:1e:c3:5d:60:
8d:09:b3:9d:a8:59:c0:b3:d1:0c:ba:8f:7d:59:44:
4a:7d:0e:85:75:3d:6f:5b:06:f1:89:77:4f:be:22:
95:15:de:02:c8:e1:52:f9:bd:e6:46:6a:7c:7b:a2:
e9:35:be:bb:63:8e:cf:d9:96:56:75:40:2e:72:e2:
06:a2:5b:68:15:af:c5:61:fe:4e:08:dd:7a:db:f0:
6c:34:ad:53:1d:f6:53:60:e1:91:66:c5:3d:7c:75:
71:1f:90:b2:4a:9b:40:2b:03:e5:7e:3b:02:39:e5:
76:2b:ad:24:da:78:b9:96:78:5e:49:9e:98:30:b7:
28:69:df:09:a0:45:84:52:7c:1e:ee:b6:4f:6d:02:
2a:e3:a7:ad:7c:75:04:26:a2:69:e6:2b:36:cf:13:
5b:81:d1:64:1f:aa:35:49:4b:19:36:7d:40:9f:1d:
76:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B4:83:C6:B9:5F:B2:E5:15:3E:E1:32:7D:57:5C:86:7A:77:EB:4E
X509v3 Authority Key Identifier:
keyid:80:AD:8C:52:0B:B9:67:74:61:DD:C4:EC:09:B7:6D:73:3B:7D:83:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/erSDxrlfsuUVPuEyfVdchnp3604.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/225ec3-0387-4b5d-88c1-c61751c6b195/1/gK2MUgu5Z3Rh3cTsCbdtczt9g3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.191.0/24
Signature Algorithm: sha256WithRSAEncryption
46:a8:76:24:30:1b:28:e9:e0:95:18:6f:17:ed:6c:99:af:09:
e3:79:80:f8:d1:b7:85:be:1b:7c:e9:d0:83:da:4f:81:e7:fe:
79:43:34:59:83:e9:5d:8b:d7:0b:ca:de:79:32:1e:1a:a5:03:
d4:dd:e1:c8:39:3a:0c:d7:0d:ae:cf:d5:5b:28:82:4b:07:2e:
a5:b7:36:ec:ea:1c:51:71:85:32:4a:ef:4f:04:85:44:fa:47:
1a:8d:f5:76:85:28:7d:1b:b1:d0:cf:8f:3f:45:9d:be:7b:d7:
42:1b:94:9a:ff:32:8a:09:68:b1:a2:97:bd:9c:d1:98:75:64:
65:7f:e8:66:44:c2:1a:78:4b:f9:34:1f:d7:69:9d:91:09:20:
1b:57:f2:7b:ac:4d:41:53:4c:30:9f:3f:b6:ae:8e:9f:2b:2f:
cf:61:f3:a0:0d:86:c6:d9:f3:e9:4d:24:2f:85:3c:f8:3e:7a:
5f:70:25:0f:8c:f6:8a:75:fe:a7:a0:e2:b9:f6:e7:fc:dd:e2:
d6:50:a2:6d:df:07:fc:00:f1:a7:c3:c2:36:c3:f2:41:ec:a3:
c3:7a:a4:86:71:f6:2e:95:cd:f6:4a:1b:ee:ff:f9:db:d5:d1:
cf:ac:3a:90:3d:44:21:ca:5b:70:20:4a:32:40:5f:8b:4d:34:
81:97:85:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:56 2024 by rpki-client on console-ams.rpki-client.org