Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/raPrCP8higSlzrJ4CI4srJmZEUY.roa
File: raPrCP8higSlzrJ4CI4srJmZEUY.roa (raw, json)
Hash identifier: STuvyItCK9icgbRi90p+IDcibMNFT6NG3MMA3GhYdgo=
Subject key identifier: AD:A3:EB:08:FF:21:8A:04:A5:CE:B2:78:08:8E:2C:AC:99:99:11:46
Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603
Certificate serial: 018467A9A9B88B7478B29148AC0E4093C693
Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/raPrCP8higSlzrJ4CI4srJmZEUY.roa
Signing time: Fri 11 Nov 2022 17:08:02 +0000
ROA not before: Fri 11 Nov 2022 17:08:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 64080
IP address blocks: 45.43.64.0/19 maxlen: 24
107.181.128.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:67:a9:a9:b8:8b:74:78:b2:91:48:ac:0e:40:93:c6:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603
Validity
Not Before: Nov 11 17:08:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ada3eb08ff218a04a5ceb278088e2cac99991146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b1:f9:e4:1d:f0:3b:7d:89:70:b5:53:42:68:
72:03:5b:dd:c3:87:cb:85:cc:b4:89:67:5d:82:1d:
ad:d8:ee:ad:77:9f:67:20:8b:b8:97:5d:5b:a6:71:
3c:e5:ea:aa:8b:7e:2f:53:8c:c9:7b:e8:64:45:44:
ff:a3:70:ad:a0:a5:d9:7c:90:ff:3e:fb:01:c2:be:
e7:a0:9e:a3:ab:9d:9a:33:36:5c:ed:01:a5:fe:d6:
d1:5e:5d:cd:44:df:91:31:72:7a:54:12:c7:d2:22:
95:33:49:e4:a6:f5:ea:e5:a6:4b:7c:c8:78:1b:39:
d0:90:66:0c:77:fa:37:cd:e4:45:9f:c5:c1:cc:56:
a3:30:83:0f:96:77:94:95:07:12:d2:78:27:17:fe:
58:55:12:4b:53:6f:1f:6a:df:ec:e8:f5:b2:b2:8a:
11:8d:b1:0d:24:f9:61:2f:ed:2e:cf:82:59:67:fa:
56:c7:d5:5f:74:2a:21:9a:82:4d:a6:10:ba:40:68:
ab:da:e5:cc:8a:bf:f9:68:36:15:70:ac:18:44:ee:
58:e4:5e:36:52:9d:6a:f5:fe:9e:47:ec:7b:33:96:
1a:d9:d2:66:37:68:c2:f1:39:f0:36:85:f7:44:ae:
85:c3:02:d4:69:89:ee:86:fc:3f:2c:ea:4f:15:38:
8f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A3:EB:08:FF:21:8A:04:A5:CE:B2:78:08:8E:2C:AC:99:99:11:46
X509v3 Authority Key Identifier:
keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/raPrCP8higSlzrJ4CI4srJmZEUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.43.64.0/19
107.181.128.0/19
Signature Algorithm: sha256WithRSAEncryption
34:73:2b:5e:4d:1d:13:3c:46:65:79:95:85:fb:1c:4c:ba:d9:
27:0c:29:21:82:4a:4c:d6:d1:1b:91:ac:08:54:d2:39:48:03:
7c:7f:b8:75:c4:7c:5e:9f:b9:36:55:8f:67:8c:5b:13:49:1b:
d4:1f:92:76:41:77:aa:1f:fb:cb:d8:97:6f:60:68:76:7a:09:
9e:d5:c9:57:5e:33:0e:d2:7f:b7:6b:1e:80:3c:34:0b:0e:11:
6b:a1:25:fc:eb:27:9c:ea:e7:39:97:a0:e0:31:35:28:dc:a4:
40:df:d5:97:35:4e:ca:f3:16:4f:f9:f5:3d:60:c4:93:75:d5:
d9:b3:1f:1a:02:e9:a0:fa:6d:13:af:96:07:40:d8:08:2f:ac:
09:34:02:10:d7:c4:8f:e0:49:c9:b4:be:c1:54:a9:bc:90:db:
48:61:1f:dd:82:93:3e:67:63:ee:5c:6d:9a:90:f4:35:20:d8:
68:e0:e3:d7:6d:db:ad:48:a6:6e:02:30:53:69:f0:2e:dc:47:
62:b4:44:2a:7f:e7:91:8e:60:b4:09:71:41:33:65:6e:0d:30:
e8:26:db:7b:af:60:24:4a:ec:82:69:27:a5:ff:67:75:a0:f8:
e9:8e:b3:cd:7f:5c:c6:4d:42:25:9a:3c:08:5e:cf:8b:fc:bb:
0c:5e:1b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:04 2024 by rpki-client on console-fra.rpki-client.org