Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/0qCitXQJW86LC-vg3HX-d9xoCdc.roa
File: 0qCitXQJW86LC-vg3HX-d9xoCdc.roa (raw, json)
Hash identifier: 6wB6MsTKMZ3HEw0x14CXjNLDeLyZNHmBNVQKGHkJgBw=
Subject key identifier: D2:A0:A2:B5:74:09:5B:CE:8B:0B:EB:E0:DC:75:FE:77:DC:68:09:D7
Certificate issuer: /CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Certificate serial: 0879A151
Authority key identifier: CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/0qCitXQJW86LC-vg3HX-d9xoCdc.roa
Signing time: Sat 01 Jan 2022 15:54:59 +0000
ROA not before: Sat 01 Jan 2022 15:54:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 45.10.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142188881 (0x879a151)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cc6077e004e88eff8f13b7740df254d9e48dd574
Validity
Not Before: Jan 1 15:54:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d2a0a2b574095bce8b0bebe0dc75fe77dc6809d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:22:a5:7f:4d:71:9c:ee:a3:e5:89:1b:b5:29:
c5:49:a0:b2:f9:d5:a0:72:17:d5:4b:30:99:84:81:
80:4b:05:26:0c:fe:ad:0a:81:af:25:39:c4:7c:d2:
da:ab:b8:dc:2e:98:90:1e:d6:2a:02:e0:b8:81:f2:
e7:eb:95:a5:d6:e9:b1:c1:45:26:c4:73:3f:24:e5:
7d:4d:a2:dd:62:66:f0:50:18:20:e9:55:a9:c2:f6:
32:5d:3a:e0:d7:1c:8e:44:8f:a2:83:e0:00:04:b0:
a9:32:53:34:42:f7:cc:51:5d:9b:6b:d0:43:95:b0:
4c:96:ef:dd:6c:61:77:50:6e:5f:46:10:1e:70:b3:
e4:e0:60:8e:8c:29:da:95:43:f8:77:73:dc:2b:99:
cd:ac:50:ce:8a:25:97:ce:77:2c:db:19:1e:55:44:
1f:98:1c:77:c0:c1:14:73:41:d1:51:63:38:d8:61:
ec:a7:2d:b9:8e:7b:c0:8e:6d:dd:b1:cb:53:ba:e4:
f3:6b:25:0a:3e:81:c7:d7:35:df:c5:67:f1:71:d7:
1e:b3:86:3c:68:f6:ca:27:2a:d8:f2:6e:94:d9:28:
ca:7d:3b:e8:cf:a7:f4:2d:73:0f:97:3a:46:33:42:
58:da:db:99:c1:bc:6c:e0:f1:f4:bb:38:04:cc:d0:
df:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A0:A2:B5:74:09:5B:CE:8B:0B:EB:E0:DC:75:FE:77:DC:68:09:D7
X509v3 Authority Key Identifier:
keyid:CC:60:77:E0:04:E8:8E:FF:8F:13:B7:74:0D:F2:54:D9:E4:8D:D5:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zGB34ATojv-PE7d0DfJU2eSN1XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/0qCitXQJW86LC-vg3HX-d9xoCdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/58178d-377b-460a-94b1-4671f4baa9b1/1/zGB34ATojv-PE7d0DfJU2eSN1XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.123.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:b6:01:d8:5d:eb:d0:05:58:a6:2f:6c:2f:e6:11:73:84:92:
b3:d2:50:cf:e4:e1:a7:fa:80:11:7f:ff:d7:65:3d:d4:20:19:
13:e1:ea:ea:08:74:3c:78:a3:46:08:4f:d9:7a:26:7c:09:5a:
09:30:72:4d:00:a6:b3:75:3b:13:cf:57:fc:1b:a2:96:e9:2c:
83:6b:96:16:b3:c3:c2:80:3c:34:b3:b8:50:0b:6e:09:cd:d5:
a8:6a:ca:db:24:95:a2:fe:73:0b:b5:a0:12:92:67:00:08:e1:
6b:c9:48:c2:2f:56:b9:41:3b:ed:01:2b:cf:53:62:c1:8b:9b:
ad:9e:26:4b:60:aa:55:7a:22:c8:23:77:d0:b8:76:0d:4f:05:
17:44:c7:7b:41:67:8a:e7:c9:d1:32:44:b9:cb:d3:82:64:d5:
70:40:33:fc:d1:58:3c:c1:a7:d1:20:ac:e0:1e:bd:c1:af:cc:
0c:b7:3c:58:45:a7:8c:bb:d5:1b:e1:76:7b:e1:73:dd:bb:d0:
c4:01:1f:dd:e1:b1:29:d0:f1:4d:e7:7a:8e:45:ec:27:b7:97:
11:71:2f:2d:f6:36:16:1b:41:de:b7:4f:45:05:4b:e9:84:d9:
da:31:15:ba:b0:6a:d7:2d:ad:b1:70:50:0a:4c:ad:ba:b0:1c:
9d:65:38:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:56 2023 by rpki-client on console-fra.rpki-client.org