Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uIjkPTOgYBonVhDZ04sjOix1KjQ.roa
File: uIjkPTOgYBonVhDZ04sjOix1KjQ.roa (raw, json)
Hash identifier: NxBIAISg1Z+Ppddu47NMBe9xfOHu2EDItSLZBuXBLMo=
Subject key identifier: B8:88:E4:3D:33:A0:60:1A:27:56:10:D9:D3:8B:23:3A:2C:75:2A:34
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 06411759
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uIjkPTOgYBonVhDZ04sjOix1KjQ.roa
Signing time: Wed 22 Jun 2022 04:19:44 +0000
ROA not before: Wed 22 Jun 2022 04:19:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398465
IP address blocks: 45.143.160.0/23 maxlen: 24
45.143.162.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104929113 (0x6411759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jun 22 04:19:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b888e43d33a0601a275610d9d38b233a2c752a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b3:e6:47:f9:cb:83:aa:c3:73:3a:2f:bd:37:
e0:db:11:22:d6:50:a0:1e:8c:54:7a:e3:27:55:f9:
9b:fb:2f:bd:4c:83:ac:0b:87:ba:91:9b:3f:26:a6:
cc:4a:ef:82:34:34:c0:cc:18:8d:23:99:7a:eb:76:
23:f0:78:1a:e3:2b:fe:12:25:5d:64:dd:ba:52:8b:
76:9b:14:e3:02:4c:7f:9d:6d:da:3e:95:f4:6b:83:
fe:20:16:e3:fb:81:d4:b6:bb:ff:1f:e3:ec:66:d6:
03:86:2d:27:dd:dc:04:f6:81:4c:21:0f:23:88:2d:
ec:8b:fb:c0:49:4a:d0:3b:ef:97:41:c4:88:61:5b:
44:c2:50:1d:9b:89:67:01:45:ce:c5:2e:92:27:f1:
a5:f1:55:4a:dd:ce:ce:62:58:60:ba:c1:ca:ca:86:
1c:6a:b4:f1:8e:ac:31:43:6b:5e:f8:a1:8e:f8:f9:
2c:61:8a:eb:15:40:a9:a5:ab:d8:6d:d7:bb:5d:54:
ee:8b:a0:fa:28:bc:e2:9f:f0:e1:27:bb:c0:de:78:
44:bd:9f:2f:aa:92:9b:96:2b:94:6f:ec:8e:08:b8:
5e:8e:84:24:b6:c7:e4:97:57:94:fa:bf:6a:ad:16:
ad:0f:24:dd:74:8e:ee:1a:37:c5:b5:8e:15:7e:ca:
c5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:88:E4:3D:33:A0:60:1A:27:56:10:D9:D3:8B:23:3A:2C:75:2A:34
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uIjkPTOgYBonVhDZ04sjOix1KjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.160.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:ca:9c:22:a3:64:6a:52:74:26:b9:9f:04:1f:2c:8d:b8:86:
8d:20:ad:cd:22:25:a0:ad:ce:f7:6f:ef:e1:ee:13:a5:df:a6:
dc:62:bd:ba:88:12:23:fb:0e:e0:c1:50:50:a3:eb:5b:dc:74:
11:22:77:12:99:c6:f0:23:18:09:bb:ec:4d:b8:12:82:04:ed:
19:34:d3:96:75:af:2d:71:ee:28:cc:5d:27:db:d5:ba:53:1a:
7a:e0:62:67:59:df:af:be:46:3e:81:af:1d:1b:a4:3a:e6:4b:
52:86:be:58:b0:b9:36:70:5c:6e:cc:fa:50:37:e0:47:ae:cc:
ca:7b:1e:d1:21:86:92:d9:67:9e:20:ec:43:26:dc:b5:21:b8:
37:d4:f6:af:a0:1c:3b:c9:39:9e:b4:21:c5:c6:e8:f6:ba:54:
a1:ed:13:93:b0:fd:13:dc:4d:99:89:2f:70:26:3c:ac:62:cb:
51:7d:df:cf:4e:6f:c4:8b:dc:1f:17:0b:99:bc:9f:5b:4e:25:
f2:28:2f:d5:d8:52:34:dc:3e:b2:ee:6b:c7:cd:e0:74:dc:d4:
ea:b7:8a:d1:bc:2d:c7:ec:34:9b:79:66:3a:f8:c9:27:26:f7:
25:31:61:fe:99:df:fd:0c:5c:a1:86:40:81:c6:06:38:4f:fa:
4a:78:6c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:53 2023 by rpki-client on console-fra.rpki-client.org