Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_2HDkyuVc0EcTiost5goY315rz8.roa
File: _2HDkyuVc0EcTiost5goY315rz8.roa (raw, json)
Hash identifier: +l4M4RfcOmYUMUBs7Xl7M79onLvxAClTyV22Xy5pZTQ=
Subject key identifier: FF:61:C3:93:2B:95:73:41:1C:4E:2A:2C:B7:98:28:63:7D:79:AF:3F
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01834E6FB43189F4AEDE5AB2F97D175BAD72
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_2HDkyuVc0EcTiost5goY315rz8.roa
Signing time: Sun 18 Sep 2022 02:31:26 +0000
ROA not before: Sun 18 Sep 2022 02:31:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48357
IP address blocks: 45.15.140.0/24 maxlen: 24
45.89.97.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:4e:6f:b4:31:89:f4:ae:de:5a:b2:f9:7d:17:5b:ad:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 18 02:31:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff61c3932b9573411c4e2a2cb79828637d79af3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3d:41:f3:a1:69:20:3a:c6:2d:dc:74:59:49:
6b:28:92:c4:f1:d8:00:7e:80:72:3b:c3:2b:42:7d:
92:84:79:e0:d0:64:2b:f6:ac:2e:86:25:78:94:e9:
74:6a:e6:a1:cc:45:fe:34:e6:aa:f6:73:b6:99:f7:
58:05:0f:2c:2d:71:e2:a8:f0:b0:67:13:23:92:42:
b9:01:be:17:37:c0:d3:57:57:1e:15:34:71:55:d1:
f0:96:93:2e:a7:6f:0d:85:bd:2e:e1:57:f3:70:4a:
a3:d2:5c:3a:84:cf:8b:f3:95:09:b6:be:0a:ac:b1:
b7:99:30:b7:94:a0:35:27:69:64:31:e4:8f:56:5a:
3c:79:6e:61:b8:3e:0b:7c:13:7d:fe:68:7f:1e:d4:
93:f0:c9:8c:37:c3:bc:6a:58:09:76:08:f7:51:c9:
6a:aa:a5:4f:c8:2d:8a:57:45:ab:6a:fc:7e:11:6d:
9e:83:b5:41:aa:14:19:b0:aa:8d:16:8a:33:d2:eb:
bd:a0:e9:9a:e2:bd:8b:bb:49:26:9b:2a:b1:64:01:
46:23:47:bb:bd:ef:40:9b:29:81:b9:82:32:a6:bb:
e6:6d:69:34:99:c3:53:4b:59:51:12:19:df:00:01:
41:d8:90:53:0f:af:77:81:67:32:f2:07:5d:4d:c8:
3a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:61:C3:93:2B:95:73:41:1C:4E:2A:2C:B7:98:28:63:7D:79:AF:3F
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/_2HDkyuVc0EcTiost5goY315rz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.140.0/24
45.89.97.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:aa:f9:a0:97:3c:1d:a6:e4:f2:27:c9:08:92:0e:ae:61:42:
9a:05:14:d1:d5:f3:fd:a5:2d:b7:ef:29:a4:31:b7:15:68:87:
a6:8b:dd:ea:2d:f4:c3:ea:c6:12:c2:b4:db:89:ca:a5:03:2e:
c9:ca:90:1a:e4:51:eb:ed:74:c1:7b:bb:11:a4:21:5f:3e:ca:
bb:7e:07:de:ba:84:38:c0:2d:89:e2:db:e7:ed:00:8e:d7:76:
1f:ad:93:10:f1:dc:0b:07:a1:70:25:d8:5c:bd:2f:f9:92:b8:
1f:cb:a6:dd:dc:3d:4f:ce:55:51:8c:4f:f6:0f:71:c9:08:c7:
08:11:61:5c:91:2c:52:77:c8:f6:c2:2f:34:ea:e2:a0:2d:77:
b9:e2:62:fb:9b:91:5b:4c:54:61:72:6d:85:6e:bd:3b:5a:ee:
18:d7:d4:d5:5c:5d:a4:18:04:b9:a6:7b:1c:bf:86:65:6c:c6:
65:89:30:b5:99:54:88:e5:8d:5b:16:5b:06:61:89:63:ff:fa:
e9:85:25:47:70:0e:4a:b5:e5:eb:90:fc:36:bf:49:98:16:71:
da:a7:00:18:28:ec:59:fc:98:71:3a:11:33:43:cb:aa:e7:ca:
dd:e1:46:42:b9:3e:da:5c:31:f0:b1:58:7e:5d:cb:89:a0:14:
4d:e7:3d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:29 2023 by rpki-client on console-fra.rpki-client.org