Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/Rabu4LfBExfQN0lptzs6iYoTxuo.roa
File: Rabu4LfBExfQN0lptzs6iYoTxuo.roa (raw, json)
Hash identifier: S0yzRTqE1fHK37a9etYZXeGhOpG9e/Cx6IaD3V9P8sU=
Subject key identifier: 45:A6:EE:E0:B7:C1:13:17:D0:37:49:69:B7:3B:3A:89:8A:13:C6:EA
Certificate issuer: /CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Certificate serial: 0185530D59B4FE01017FD76282422BE7F979
Authority key identifier: 71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/Rabu4LfBExfQN0lptzs6iYoTxuo.roa
Signing time: Tue 27 Dec 2022 10:07:41 +0000
ROA not before: Tue 27 Dec 2022 10:07:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208928
IP address blocks: 45.15.1.0/24 maxlen: 24
45.15.0.0/22 maxlen: 22
45.15.0.0/24 maxlen: 24
45.15.3.0/24 maxlen: 24
45.15.2.0/24 maxlen: 24
45.147.128.0/23 maxlen: 23
45.147.128.0/24 maxlen: 24
45.147.129.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:53:0d:59:b4:fe:01:01:7f:d7:62:82:42:2b:e7:f9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712ff11dd0c66ce67fe0f1d749c0909ef3418d29
Validity
Not Before: Dec 27 10:07:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45a6eee0b7c11317d0374969b73b3a898a13c6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:21:e9:7f:1c:98:61:fc:93:87:57:d7:f3:53:
35:6e:3f:33:0c:1a:86:81:40:fa:a1:a3:89:bf:97:
22:54:b6:0b:cf:d4:b8:fd:91:67:6a:8b:ab:44:72:
66:d6:a7:33:77:b9:f1:c7:95:5d:ff:aa:6f:14:6d:
eb:16:3e:6c:88:ea:80:f9:1d:a6:bd:c3:2d:1f:1d:
04:1f:2c:cc:0a:db:99:96:7c:06:27:bb:9b:66:24:
9f:7c:d2:29:9f:99:60:73:00:80:c4:c5:4e:4f:b5:
f2:71:bc:49:65:a3:5d:6c:4e:96:00:65:ee:25:3d:
cd:7b:8d:35:13:e3:fe:8d:fd:8d:3b:d8:7d:8a:3f:
9f:c4:f9:09:e1:0b:e6:9e:77:db:37:ca:8a:a6:5e:
2d:f7:c4:6d:4a:49:2e:68:de:c6:5c:41:33:b7:dc:
84:f3:76:0f:c9:d6:e5:de:b1:03:dd:de:21:d1:81:
0a:eb:cd:99:f7:c5:29:87:7c:73:f0:e6:a1:69:d2:
c5:82:23:ee:0b:91:38:5f:9e:da:bb:d1:ec:43:34:
fb:5c:b1:c4:16:dd:fd:9f:cb:b4:79:d4:cd:2d:4f:
10:25:f6:94:4b:f3:54:9c:43:66:59:e8:bb:05:b5:
c5:aa:5d:84:ea:4b:e8:a7:6b:55:04:dd:c0:06:de:
d0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A6:EE:E0:B7:C1:13:17:D0:37:49:69:B7:3B:3A:89:8A:13:C6:EA
X509v3 Authority Key Identifier:
keyid:71:2F:F1:1D:D0:C6:6C:E6:7F:E0:F1:D7:49:C0:90:9E:F3:41:8D:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cS_xHdDGbOZ_4PHXScCQnvNBjSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/Rabu4LfBExfQN0lptzs6iYoTxuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d9cc8d-95ac-4848-b097-9d63b0476e24/1/cS_xHdDGbOZ_4PHXScCQnvNBjSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.0.0/22
45.147.128.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:b1:1d:0d:a7:21:e3:7b:d6:5d:d6:01:0e:48:ae:9d:34:cd:
61:a4:d6:5b:70:2f:00:43:b2:f7:b8:9c:9a:9d:9c:53:2e:d5:
91:9b:1a:68:42:6c:26:f9:de:ce:58:29:34:62:fb:a8:d9:1e:
ce:58:50:ed:ce:1d:ac:30:73:94:d2:c3:e8:27:fd:d4:d4:65:
b8:dc:a4:c0:e8:39:4f:0d:a2:4f:fb:55:cc:87:3c:eb:55:7f:
4e:61:60:49:93:c2:d4:14:64:67:e6:5d:c3:ef:d7:32:88:9f:
e5:f1:0c:13:95:fc:a0:3b:0c:a7:cd:c5:b7:aa:38:35:68:08:
84:a5:31:7f:13:20:76:d6:98:af:06:ef:cd:03:b0:9a:ff:2f:
6b:d4:c4:37:5a:41:b1:7e:4a:56:fa:84:66:af:8b:80:a6:ad:
19:8d:48:3f:23:a6:87:81:19:e6:08:a4:1a:78:cc:55:10:d5:
2a:c0:5d:de:71:26:12:13:5e:36:9f:81:4e:1e:38:25:fe:56:
7a:a8:f5:99:52:0d:a3:6a:70:c4:bb:ee:b1:bf:ab:05:f0:c6:
e5:3e:82:61:8e:52:10:c0:49:27:bf:85:80:4e:5b:67:a0:f4:
76:14:00:13:8e:af:7c:76:7a:3a:aa:07:22:71:22:2f:91:66:
02:cc:da:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:15 2024 by rpki-client on console-ams.rpki-client.org