Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/KYeyGwZfWUOMHTxILkQ0tkb3qFw.roa
File: KYeyGwZfWUOMHTxILkQ0tkb3qFw.roa (raw, json)
Hash identifier: nlVLGvnrMzGsI2uxPrxlzxh1hLkonLqni48d9ZYon0U=
Subject key identifier: 29:87:B2:1B:06:5F:59:43:8C:1D:3C:48:2E:44:34:B6:46:F7:A8:5C
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 04B5D557
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/KYeyGwZfWUOMHTxILkQ0tkb3qFw.roa
Signing time: Sat 01 Jan 2022 05:01:57 +0000
ROA not before: Sat 01 Jan 2022 05:01:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 194.247.44.0/23 maxlen: 23
45.149.164.0/24 maxlen: 24
45.149.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79025495 (0x4b5d557)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jan 1 05:01:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2987b21b065f59438c1d3c482e4434b646f7a85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:9c:e8:de:cb:4d:6a:64:3d:52:fa:cb:33:
18:ea:1e:c4:ea:cf:0f:2c:d6:73:3d:a7:a9:28:d2:
44:17:ee:89:30:6f:2c:a4:be:f3:e1:94:f1:d8:24:
3a:f8:60:0a:2d:f5:d7:be:29:e0:03:3a:38:2a:4d:
f3:a9:70:26:07:69:4d:6a:dd:6f:31:04:e4:c6:f7:
29:5c:41:76:69:22:fc:4b:c8:8e:d4:1b:f4:68:18:
4b:84:d2:e6:d0:2d:fb:c8:92:11:42:b2:f6:64:fb:
8f:89:c6:8a:02:05:4f:04:79:70:e6:bf:c6:73:e5:
dd:5a:c7:9a:ad:ad:a5:ab:16:5c:89:11:6a:83:f7:
e0:6d:62:82:f8:86:44:27:c4:6e:ff:1f:e9:ca:ca:
a2:e4:0a:06:e2:2a:a5:08:a8:75:de:75:b7:de:9c:
5f:56:c5:12:83:ff:5d:2e:6c:43:96:32:b7:8b:5d:
6f:da:d8:81:1e:1a:f5:ee:04:2a:3f:d2:2d:cb:5e:
50:29:ef:b4:21:cd:52:33:6b:b7:e7:a6:33:82:cd:
57:02:99:27:10:87:a0:11:2e:c8:0d:42:20:86:cb:
de:f0:fb:8a:e8:92:0b:31:14:26:34:76:98:fa:8a:
ab:20:9c:4f:2f:28:f6:0e:a7:be:37:77:3d:6d:a1:
60:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:87:B2:1B:06:5F:59:43:8C:1D:3C:48:2E:44:34:B6:46:F7:A8:5C
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/KYeyGwZfWUOMHTxILkQ0tkb3qFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.164.0/24
45.149.167.0/24
194.247.44.0/23
Signature Algorithm: sha256WithRSAEncryption
73:2e:87:9b:4f:6d:b2:6f:c4:c9:d2:da:19:59:82:af:4b:65:
cd:2d:7b:aa:fe:e3:dd:9f:49:b7:47:fa:ee:36:f2:98:43:36:
3e:b4:35:34:b3:12:7a:92:1a:5a:8a:f2:60:d2:c8:05:6c:8e:
17:9d:a1:24:6e:df:b1:83:05:f8:10:0d:89:3a:30:17:69:4b:
4c:92:f7:3e:d5:34:e1:64:42:a1:56:34:ec:cb:5c:dc:24:62:
9f:ef:65:c8:6c:58:09:e7:86:70:56:4b:5b:14:f6:63:7b:d6:
42:30:38:2d:62:38:98:83:a1:ac:8a:cf:eb:ab:a3:48:be:40:
c8:d4:fc:a5:c1:ab:bd:bc:83:e2:68:7e:54:ad:f6:13:1c:b5:
f1:da:5a:61:da:5f:66:a7:71:b1:21:5b:91:7c:92:6c:85:5a:
ef:7e:4a:d8:87:c5:b1:dd:e8:3d:d9:ef:b0:63:73:80:7f:6e:
0a:d5:11:a0:57:68:9d:48:f1:0a:54:01:bd:d2:46:10:7b:97:
6f:e1:d8:3a:44:27:c5:b2:fb:f2:9f:f9:76:4e:55:d0:6b:73:
82:25:93:30:b4:83:e5:5b:13:0c:ed:54:05:17:bf:cd:12:b7:
10:d5:9d:9d:a8:21:35:f0:07:66:56:00:4f:41:38:14:3b:5c:
b4:35:88:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:53 2023 by rpki-client on console-fra.rpki-client.org