Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ORW8LFMqaQ6TNETyI0BZsvXuoyA.roa
File: ORW8LFMqaQ6TNETyI0BZsvXuoyA.roa (raw, json)
Hash identifier: 3hs8v2x3KwPWrpu7d+iMkrObDniG4bm609nJtBkC/Rk=
Subject key identifier: 39:15:BC:2C:53:2A:69:0E:93:34:44:F2:23:40:59:B2:F5:EE:A3:20
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0183425B82F60F7A117E697438DC5EE70EE8
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ORW8LFMqaQ6TNETyI0BZsvXuoyA.roa
Signing time: Thu 15 Sep 2022 18:13:56 +0000
ROA not before: Thu 15 Sep 2022 18:13:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58110
IP address blocks: 45.88.169.0/24 maxlen: 24
45.15.140.0/24 maxlen: 24
45.92.162.0/24 maxlen: 24
45.15.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:42:5b:82:f6:0f:7a:11:7e:69:74:38:dc:5e:e7:0e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 15 18:13:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3915bc2c532a690e933444f2234059b2f5eea320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c4:c2:3b:13:48:da:a5:b7:1f:62:ec:57:8c:
65:89:d4:4b:7b:5f:22:b4:4a:56:64:39:e0:b5:2c:
71:7a:90:e7:cd:bb:43:69:c9:10:ee:6d:f8:fc:4b:
cf:85:3a:4d:ad:23:53:5e:1b:ed:7e:dc:29:65:40:
f8:4b:8a:0a:da:d6:60:16:81:5c:7b:0b:43:10:c3:
d0:e0:b2:64:a5:ef:be:81:3e:9e:94:4d:79:9f:fb:
39:d8:8b:54:18:36:b3:77:1e:ed:90:07:74:00:8b:
e5:40:d9:fa:a9:7b:48:be:90:93:a2:e2:86:17:42:
44:03:c7:6c:72:fd:f8:e1:53:11:20:5a:6d:57:d9:
45:36:7a:1b:e5:a8:71:9a:09:3c:a3:56:9f:ef:cd:
eb:59:0e:2a:7c:79:60:73:09:2a:21:bd:95:12:15:
9f:5a:e1:e2:7b:b7:f1:81:45:4a:3f:5d:6c:8a:0e:
3a:31:d4:10:b8:e2:05:6c:50:c1:e8:0e:2a:a5:ea:
b7:39:f7:c4:9d:82:4c:5d:3b:70:16:52:b4:61:40:
8a:42:3d:a9:af:41:8f:f0:69:a0:db:cf:d4:82:f2:
e9:5d:5d:8a:97:fb:27:67:1b:c7:0d:a7:6f:b5:73:
39:c4:51:ed:a2:d5:50:ad:c7:36:29:72:7f:81:8a:
44:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:15:BC:2C:53:2A:69:0E:93:34:44:F2:23:40:59:B2:F5:EE:A3:20
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/ORW8LFMqaQ6TNETyI0BZsvXuoyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.140.0/24
45.15.184.0/24
45.88.169.0/24
45.92.162.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:ed:24:a4:84:f0:7e:a8:f0:30:18:77:e3:3e:98:53:f9:fe:
b8:82:18:91:99:00:69:56:3d:03:32:e5:27:16:a7:e6:49:d2:
39:6d:d1:e1:05:09:4c:c3:be:e3:6e:6e:57:ee:f0:ad:2f:4d:
71:0a:d6:e0:70:a4:06:7d:c9:e6:f9:64:d1:51:a5:ec:e6:bd:
49:e7:82:6c:9c:92:e2:69:ca:f0:02:75:9d:99:66:9c:51:6d:
70:b9:ec:36:e1:91:ed:8b:02:ab:89:f0:b6:33:e8:05:79:08:
fc:f7:1d:7d:bd:c2:d6:f8:18:5a:e4:7c:ac:32:ac:c6:f7:15:
9d:2c:6c:af:67:6b:e9:5b:44:a5:13:a5:5c:26:cb:4b:9c:1d:
4d:26:a3:3c:86:ce:b8:4b:83:e9:c1:0e:e3:62:58:5d:6b:20:
a0:a1:76:19:25:87:e2:11:1b:53:bf:cc:a1:3f:a5:03:83:74:
c8:d7:67:36:61:54:64:06:0d:2c:78:df:72:23:3b:50:a8:81:
6f:cd:08:c1:f5:79:af:ec:39:42:83:4a:44:d4:af:90:8a:51:
e2:3e:a1:02:8a:d2:10:7c:79:74:24:20:5a:6f:e6:9c:4d:45:
29:08:60:88:15:5a:c4:c6:0f:9b:3d:c0:5b:4a:09:78:69:14:
f1:45:25:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:22 2023 by rpki-client on console-ams.rpki-client.org