Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/4VjPJWWXKJiyr25U-nrF1kETmgA.roa
File: 4VjPJWWXKJiyr25U-nrF1kETmgA.roa (raw, json)
Hash identifier: 4dSRSEkcG4zvBccWQRksLnH78MYUvyecjyy+67Bttx8=
Subject key identifier: E1:58:CF:25:65:97:28:98:B2:AF:6E:54:FA:7A:C5:D6:41:13:9A:00
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0182179C6AFB5BFA38B295686A363AECAA18
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/4VjPJWWXKJiyr25U-nrF1kETmgA.roa
Signing time: Tue 19 Jul 2022 17:58:23 +0000
ROA not before: Tue 19 Jul 2022 17:58:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48357
IP address blocks: 45.12.134.0/24 maxlen: 24
45.89.97.0/24 maxlen: 24
45.83.128.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:17:9c:6a:fb:5b:fa:38:b2:95:68:6a:36:3a:ec:aa:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 19 17:58:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e158cf2565972898b2af6e54fa7ac5d641139a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:22:1e:08:54:50:16:6e:bb:c6:a8:3a:9c:75:
e3:4c:d7:be:db:c2:34:51:bf:a0:54:35:80:29:20:
35:fd:66:98:fd:6f:13:6f:17:4a:1c:0a:a6:b4:83:
76:07:72:c3:7c:3f:27:87:a5:37:76:32:32:90:9d:
9d:25:ae:e3:f3:43:1a:ce:52:f6:b4:e1:13:e7:11:
c6:49:94:f9:34:6f:26:62:b3:6d:3b:74:a5:cc:9e:
fe:8d:ec:91:9f:30:ba:00:4b:c6:0e:39:44:da:6c:
72:2b:ef:d2:e0:c3:a6:55:3e:4b:18:cd:10:8d:d5:
0e:03:b4:80:de:a4:1b:a9:34:2d:ef:e7:a2:77:2a:
80:6b:e0:47:8b:ef:7b:1a:0e:44:c3:dd:0c:3f:c6:
cb:da:ca:58:92:f1:bc:ef:31:74:a3:4f:a5:33:ee:
a2:54:05:d1:d4:9e:3e:02:21:f3:dc:41:38:3d:12:
f4:0a:a8:b3:1a:8b:80:fc:1d:5a:24:d6:00:98:3b:
f1:7d:c4:f0:6b:28:16:a0:33:fe:f6:3f:0d:1f:76:
86:28:a9:65:1c:d7:89:45:87:7e:cd:03:1d:75:84:
bd:a5:ba:53:dc:08:61:a9:32:82:19:9b:76:05:c2:
28:80:fc:ed:ff:f0:20:77:96:1b:43:4a:63:99:96:
56:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:58:CF:25:65:97:28:98:B2:AF:6E:54:FA:7A:C5:D6:41:13:9A:00
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/4VjPJWWXKJiyr25U-nrF1kETmgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.134.0/24
45.83.128.0/24
45.89.97.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:90:d9:76:88:b7:63:41:a8:a4:8e:77:86:9a:6a:fd:5a:a6:
4e:61:b1:cc:5c:97:00:18:8f:e3:3f:82:ee:97:42:ef:cf:d5:
22:aa:76:fd:d9:31:fb:d2:a3:73:b3:ba:c2:20:7f:f9:6a:28:
e3:2c:30:54:f8:25:6a:57:40:31:bf:c9:a1:26:6f:04:d9:1c:
f4:c9:51:bf:8e:5a:7d:66:2b:ae:4a:27:af:60:32:ff:05:d0:
61:01:05:3f:ef:ac:aa:ac:e0:5d:8c:01:13:95:42:26:a2:eb:
67:7a:b1:fc:ae:da:00:ed:5d:80:d5:15:3a:e7:ca:39:c7:5c:
8d:50:a4:3c:90:97:85:69:a4:48:03:a6:1d:9b:22:7e:eb:d3:
d9:c0:be:67:15:1f:c7:e9:9e:fc:7b:3f:21:ef:0d:d2:e2:4d:
e4:38:70:3b:8c:44:b6:f2:bf:1a:ba:09:7d:03:23:44:23:51:
9e:e8:8f:f3:44:e8:bd:0e:6a:97:1b:91:44:29:6e:31:89:76:
6e:41:4d:ac:68:98:af:7d:70:17:3d:b8:8c:8a:36:4e:22:47:
ec:27:49:d3:dd:0a:10:3e:14:d6:a8:49:07:f7:94:98:51:27:
08:f4:ed:53:08:5a:e9:dd:86:f8:66:6a:2d:af:ca:0a:91:ad:
1f:90:66:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:22 2023 by rpki-client on console-ams.rpki-client.org