Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/eOaUxRiafg791pFW31sOi9mnWT8.roa
File: eOaUxRiafg791pFW31sOi9mnWT8.roa (raw, json)
Hash identifier: uqpL0a2OPwH34VayXFaLglixCtPhqVg970wqRVsvuZs=
Subject key identifier: 78:E6:94:C5:18:9A:7E:0E:FD:D6:91:56:DF:5B:0E:8B:D9:A7:59:3F
Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Certificate serial: 018356383F71B4CE05FF0C33841B43F50ED2
Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/eOaUxRiafg791pFW31sOi9mnWT8.roa
Signing time: Mon 19 Sep 2022 14:47:50 +0000
ROA not before: Mon 19 Sep 2022 14:47:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 45.153.238.0/24 maxlen: 24
45.153.236.0/24 maxlen: 24
45.153.237.0/24 maxlen: 24
77.83.71.0/24 maxlen: 24
45.11.232.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:56:38:3f:71:b4:ce:05:ff:0c:33:84:1b:43:f5:0e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c
Validity
Not Before: Sep 19 14:47:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78e694c5189a7e0efdd69156df5b0e8bd9a7593f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e7:c9:ec:00:c2:5a:f9:db:f8:4f:f7:65:bd:
27:46:e1:ba:2b:39:93:cb:58:99:d8:5d:fc:25:fd:
c0:b5:3b:4f:6b:9c:89:01:e0:f8:ae:84:30:89:6d:
a4:63:3b:6a:ed:53:f9:7e:0e:52:34:ba:b3:fc:ca:
d2:0a:1a:76:7b:1a:89:56:90:b7:ea:93:bb:15:5f:
83:94:76:ce:b2:a3:e9:30:a8:0f:f9:5c:94:64:62:
e5:49:12:db:e7:0b:88:ed:78:44:5d:5c:de:8e:d0:
58:1f:c3:3d:b4:5e:27:fb:8f:a6:8e:99:e2:22:e2:
24:53:76:5f:66:9e:63:93:9c:19:86:07:d6:1a:b1:
37:89:60:b4:c6:06:92:6a:5c:3b:9f:23:6f:c8:05:
93:36:6e:2c:18:04:71:e5:24:2a:57:e8:8c:30:64:
13:d0:bc:16:80:4c:2c:b9:91:33:86:86:ca:8c:38:
b8:2c:3c:90:aa:fe:79:59:ab:4d:02:cb:64:98:17:
c2:b3:5f:9f:cb:31:05:6b:9b:42:e0:6c:b7:43:cf:
0d:ae:12:85:53:e3:1a:7a:3d:29:31:65:b7:c3:d6:
ca:15:5f:7f:56:63:25:7a:dd:4b:42:78:52:4d:67:
b2:1e:ac:95:dc:d3:a7:0a:92:d1:1a:02:ba:fb:66:
83:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E6:94:C5:18:9A:7E:0E:FD:D6:91:56:DF:5B:0E:8B:D9:A7:59:3F
X509v3 Authority Key Identifier:
keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/eOaUxRiafg791pFW31sOi9mnWT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.232.0/24
45.153.236.0-45.153.238.255
77.83.71.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:ff:4d:fd:4a:d0:b0:06:8f:b1:76:b7:9b:6a:b9:64:3b:fb:
bb:53:e0:76:f1:66:0d:4c:2d:2e:2e:ef:d9:2e:6c:60:b8:fc:
83:ac:48:df:48:60:ff:7b:26:f9:45:31:ac:c2:b5:c8:01:d8:
03:1f:d3:82:10:29:d3:28:c6:82:d5:67:4a:fe:da:f8:7a:b7:
b5:06:19:f0:af:67:22:74:ac:dc:10:66:66:a4:d0:c7:df:7f:
b5:09:26:6a:15:b6:b0:f0:73:70:2b:dc:69:42:02:12:df:c3:
bc:79:fe:44:2f:22:b7:3c:b8:7e:7d:ef:31:b0:33:68:d6:4f:
ee:b4:c8:5b:9e:fa:2e:de:a1:e0:0c:fa:58:2d:35:0b:f0:2f:
25:b6:ba:d6:7d:b7:08:2e:ac:73:5e:f4:93:e9:9d:dc:5e:44:
0c:ad:98:04:d9:d4:35:ed:06:97:22:5f:c8:96:dd:78:ff:da:
e7:78:b0:8a:bd:fa:ea:0b:0f:21:df:25:9e:7e:cd:67:86:86:
3e:da:8e:7c:65:38:72:80:64:8f:23:1a:af:26:a7:3e:f4:01:
2c:09:07:20:a2:7b:a7:69:35:ef:e6:bb:9d:29:a1:1c:11:0f:
a6:37:5b:d0:35:73:4e:03:f5:8f:fc:74:c2:a5:1f:e5:0b:40:
79:06:26:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:03 2023 by rpki-client on console-ams.rpki-client.org