Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/jZmxomnuWbOIQD_c5MsPbPQeyHU.roa
File: jZmxomnuWbOIQD_c5MsPbPQeyHU.roa (raw, json)
Hash identifier: hVci5G2AUJiC/ZaoFC2yOkfYU5tYYci1K+/ZKgOFTWc=
Subject key identifier: 8D:99:B1:A2:69:EE:59:B3:88:40:3F:DC:E4:CB:0F:6C:F4:1E:C8:75
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 018475BB5E7D4646108E1D66A5985D028381
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/jZmxomnuWbOIQD_c5MsPbPQeyHU.roa
Signing time: Mon 14 Nov 2022 10:42:04 +0000
ROA not before: Mon 14 Nov 2022 10:42:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 194.247.44.0/23 maxlen: 23
45.149.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:75:bb:5e:7d:46:46:10:8e:1d:66:a5:98:5d:02:83:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Nov 14 10:42:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d99b1a269ee59b388403fdce4cb0f6cf41ec875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5f:41:02:ea:26:d4:f8:a6:61:b2:ce:ba:3f:
ee:fe:2f:b9:7f:3e:8c:e4:e1:b7:c5:d4:6d:ff:8c:
1a:64:2e:44:4c:e9:2e:e9:cb:9a:c6:af:9a:8e:f1:
5e:c9:72:36:d8:71:6f:e2:79:74:39:be:97:7f:e4:
8e:c4:30:5c:3e:72:da:84:52:59:4c:93:08:ed:22:
f9:cd:38:bc:5c:5d:29:c6:8f:d1:e2:45:c7:a3:53:
a1:81:b2:df:de:cb:a9:29:fe:5c:a2:ae:41:0f:53:
58:a1:14:e2:67:37:2a:1f:5c:f7:ca:f7:44:83:da:
5b:14:0f:cf:b1:a6:94:40:03:f1:2d:47:06:52:17:
b5:f1:da:0b:85:3b:db:54:a9:4f:1e:6d:82:2f:17:
23:de:b5:0f:2c:3d:df:ad:34:c6:de:4f:8a:5a:ad:
85:c5:ab:aa:56:6f:46:d8:76:15:76:b4:d8:ad:20:
20:2b:f2:f8:c7:3f:05:1c:f1:d7:71:b7:c9:b2:2e:
45:c4:82:06:c8:e3:22:cd:4a:b9:3b:e2:e8:e3:02:
87:ad:eb:05:16:98:2a:88:95:34:54:f2:c3:ad:26:
64:42:ff:95:fb:6e:41:38:eb:c6:8d:42:4b:6f:cb:
fd:33:ea:8c:dc:08:20:af:ac:e3:7c:ce:46:e9:ed:
14:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:99:B1:A2:69:EE:59:B3:88:40:3F:DC:E4:CB:0F:6C:F4:1E:C8:75
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/jZmxomnuWbOIQD_c5MsPbPQeyHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.164.0/24
194.247.44.0/23
Signature Algorithm: sha256WithRSAEncryption
38:df:49:3c:3e:03:9f:94:5d:c6:a2:21:71:22:c0:93:5b:62:
6b:ce:93:87:b7:1d:e9:a0:ac:0f:94:67:b2:74:6b:62:93:7d:
a9:75:05:e0:a1:47:fa:d7:bd:ed:5d:c6:15:22:41:4f:d0:18:
7c:7b:bd:38:1f:6e:17:65:8a:87:83:13:cc:a5:ef:2d:cf:e4:
f1:f7:cd:b6:6f:c0:9e:7f:d7:4d:9b:88:9b:a6:06:f0:c7:99:
d5:71:18:6a:22:73:7d:78:a1:83:f9:d4:c7:4b:67:76:bb:13:
66:99:a5:5b:cb:4e:14:19:c6:58:99:18:7f:4d:c1:9a:6d:58:
eb:48:51:8c:81:82:91:a4:d2:1f:43:21:6e:70:c5:cc:1a:6b:
43:84:69:5f:d6:15:ac:6a:bd:b8:76:8c:dc:c3:0b:52:ee:2c:
5d:2e:40:e4:9d:b2:05:51:17:b1:6d:85:a2:4e:1e:b3:b4:0e:
e7:45:ea:1f:f7:83:e6:14:d1:7a:9b:75:f6:56:86:e4:ea:4d:
5b:75:6f:31:bf:1a:39:6f:eb:c1:2b:6e:04:34:bd:81:bf:db:
3b:66:e3:68:81:c8:e9:bd:90:3e:96:a0:23:96:74:a3:3e:dd:
d9:21:6d:61:bc:f7:44:c2:7e:e1:f9:c0:b1:88:50:d9:d4:63:
7e:4b:a7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:46 2023 by rpki-client on console-ams.rpki-client.org