Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/PW8UhpZNnvUG2Rk2_Wxyu-ozQCo.roa
File: PW8UhpZNnvUG2Rk2_Wxyu-ozQCo.roa (raw, json)
Hash identifier: pWIOspG/cIkHHCF+CJ3SsppKc5IwW6HBuw4yb4r8gUs=
Subject key identifier: 3D:6F:14:86:96:4D:9E:F5:06:D9:19:36:FD:6C:72:BB:EA:33:40:2A
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 1AAC3561
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/PW8UhpZNnvUG2Rk2_Wxyu-ozQCo.roa
Signing time: Sat 01 Jan 2022 12:02:41 +0000
ROA not before: Sat 01 Jan 2022 12:02:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42831
IP address blocks: 45.43.64.0/23 maxlen: 24
45.43.71.0/24 maxlen: 24
45.43.84.0/23 maxlen: 24
45.43.86.0/24 maxlen: 24
107.181.146.0/23 maxlen: 24
89.33.6.0/23 maxlen: 24
2a05:9f40:1f::/48 maxlen: 48
2a05:9f44:2a05::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 447493473 (0x1aac3561)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Jan 1 12:02:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d6f1486964d9ef506d91936fd6c72bbea33402a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:96:d6:7c:cb:71:7c:e2:8c:ec:fd:43:90:
f8:f9:51:e5:80:a5:c2:0a:27:3b:d7:d9:5d:33:06:
35:17:02:f4:be:b1:15:e9:2f:83:f6:94:48:3a:9d:
0a:80:77:cf:1b:c0:f1:49:31:a1:0a:e8:78:f6:e0:
1b:1d:c9:e7:6e:ae:36:61:34:bf:63:86:8e:65:7e:
ed:61:74:e3:11:35:0e:68:ad:c3:d1:3e:f1:9f:87:
a3:85:5c:53:49:c1:2d:33:a3:02:27:4e:0c:a9:cb:
f9:52:a3:42:95:33:de:30:b1:82:f9:ec:ae:43:6f:
14:66:82:b1:ca:7a:a3:ad:e1:17:c2:1f:15:aa:4a:
e5:3d:68:7a:4c:66:b2:58:31:ee:cf:7f:8a:59:62:
14:2b:db:3f:c3:e0:15:7f:6e:77:eb:d3:83:96:3a:
b3:07:ee:8f:ac:68:1a:cd:6a:da:aa:30:6a:82:5a:
ea:d2:06:cf:10:a7:70:02:03:6b:ad:b9:63:82:0d:
8b:25:5c:e7:39:e8:65:2e:35:73:56:ff:97:29:49:
74:55:74:ca:20:d1:9a:77:ac:ce:ad:fe:51:78:b0:
e2:40:1a:9a:1e:a3:06:45:4a:07:54:e3:4e:c6:21:
0b:b1:16:4e:3a:8b:d9:94:6c:ad:a8:58:53:54:d5:
eb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6F:14:86:96:4D:9E:F5:06:D9:19:36:FD:6C:72:BB:EA:33:40:2A
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/PW8UhpZNnvUG2Rk2_Wxyu-ozQCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.64.0/23
45.43.71.0/24
45.43.84.0-45.43.86.255
89.33.6.0/23
107.181.146.0/23
IPv6:
2a05:9f40:1f::/48
2a05:9f44:2a05::/48
Signature Algorithm: sha256WithRSAEncryption
aa:c8:36:33:23:80:f5:7e:1e:99:87:ac:0a:76:5b:b0:20:36:
03:85:28:18:22:2b:81:bb:2e:94:57:6c:83:9a:07:e7:f5:c8:
6c:44:70:85:6b:45:c7:71:e6:ab:b8:ba:9e:06:ef:c9:16:a1:
28:47:ec:34:cd:ea:11:fc:9d:e9:38:69:4a:fd:65:4b:55:71:
45:0c:c4:d2:bf:f0:91:f0:e3:91:d9:ed:78:c8:37:e6:9d:c4:
42:1c:4b:a8:20:ef:e7:28:68:b1:46:a7:b1:c7:53:d9:06:57:
43:e5:6b:2e:e6:a8:e9:6c:f2:d1:46:ff:75:74:cc:9e:c1:97:
46:4e:20:ad:85:b0:39:8e:80:ce:ca:84:b3:d5:70:9d:5a:74:
61:c9:2f:b9:c8:ec:e5:d5:30:6a:15:7b:78:e0:98:79:7e:dd:
77:34:84:8b:9f:db:61:39:44:72:05:21:22:d8:6d:24:ce:4e:
79:31:52:19:3d:9e:30:b1:f6:ec:84:ce:cc:95:da:a8:aa:25:
e6:49:c0:02:c9:b6:fd:ea:23:4f:4d:3f:52:bd:98:03:cc:d5:
fd:7a:6e:65:c1:47:bf:bf:95:33:dd:ba:49:49:14:0d:ca:50:
68:b9:e0:df:ad:9e:d0:bb:e3:1b:45:63:29:ca:cc:fd:77:ef:
f3:bd:e8:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:04 2024 by rpki-client on console-fra.rpki-client.org