Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/e7Lc-g7E_eKLpKITOVkRQNifHfk.roa
File: e7Lc-g7E_eKLpKITOVkRQNifHfk.roa (raw, json)
Hash identifier: /gm6goo5ng2886LfhZr+z49JZZAZT1peY2jBo3OxuoA=
Subject key identifier: 7B:B2:DC:FA:0E:C4:FD:E2:8B:A4:A2:13:39:59:11:40:D8:9F:1D:F9
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0183EC9D162FA7D888D1F0AEE1B7912DAF29
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/e7Lc-g7E_eKLpKITOVkRQNifHfk.roa
Signing time: Tue 18 Oct 2022 19:41:01 +0000
ROA not before: Tue 18 Oct 2022 19:41:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211439
IP address blocks: 45.8.184.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ec:9d:16:2f:a7:d8:88:d1:f0:ae:e1:b7:91:2d:af:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 18 19:41:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7bb2dcfa0ec4fde28ba4a21339591140d89f1df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:80:00:10:49:e2:7b:c4:98:8b:ad:41:f2:3a:
f1:84:e3:e3:37:b2:8d:94:64:07:68:58:46:48:4f:
5c:c5:b2:9d:b4:51:ec:26:be:10:f5:44:c6:a6:65:
12:d6:9c:94:93:ec:92:c9:00:40:74:24:e0:58:3d:
73:c0:16:7c:01:70:65:33:3d:88:db:3e:a1:d6:61:
19:a9:77:6f:b3:f8:05:83:b3:19:02:51:cb:76:f5:
80:f5:6b:71:24:33:f8:04:b0:ba:9a:c2:de:54:4c:
d7:aa:54:3e:59:e1:8c:3e:4d:48:54:da:23:ec:c6:
1f:f1:7e:54:52:a8:b8:03:69:d4:ba:9d:73:9d:f0:
3f:26:f8:d2:82:d8:91:ce:ee:06:7d:f4:75:e0:cc:
5a:a1:e7:01:fd:bb:ec:41:18:b9:48:f0:18:e7:fc:
2a:79:83:9d:e4:cc:e2:ef:a0:47:76:d9:89:52:6b:
f8:ce:84:fc:cb:cf:3d:e4:54:7f:04:dd:8b:31:0e:
d9:7a:e2:61:b2:20:36:f2:6c:c4:12:8c:6e:b3:43:
cb:4e:f0:24:70:88:b2:9c:c3:ba:1c:bc:14:fd:61:
ac:5a:89:12:15:6a:17:7a:be:3c:8b:ff:01:66:17:
d9:b5:01:09:57:71:94:f0:cc:68:31:85:55:b1:6d:
c7:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B2:DC:FA:0E:C4:FD:E2:8B:A4:A2:13:39:59:11:40:D8:9F:1D:F9
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/e7Lc-g7E_eKLpKITOVkRQNifHfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.184.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:1e:c1:3d:81:e8:8d:56:73:1f:e1:2c:3d:be:a3:0c:4b:37:
71:50:52:a8:f2:25:8a:1c:f9:6a:f5:15:9d:bb:29:cd:ca:41:
f7:72:12:44:91:89:84:08:68:2e:11:b3:04:2c:8b:7d:30:23:
80:8b:21:91:c4:43:94:9e:d4:12:01:07:51:2d:ad:2e:25:b2:
32:00:17:9d:63:a7:47:7b:7d:af:52:5c:45:fa:32:26:81:c4:
24:09:74:91:75:c8:bd:33:f1:5f:b0:fc:58:36:bb:f7:b2:9c:
ed:84:71:6a:c5:09:64:d4:55:4e:de:98:79:61:17:d3:d1:26:
03:15:d0:b8:7a:2a:b4:9a:77:9e:0f:cf:71:ab:1d:cf:35:cd:
26:84:a8:1b:5b:a1:57:f0:08:93:1a:f7:a3:17:41:5b:e4:5a:
33:f2:32:d7:ff:e2:69:c7:26:00:fc:32:c2:44:cd:f7:5b:23:
59:cd:db:94:e0:c4:df:59:be:7e:0a:5e:b5:d3:a5:c3:e9:b2:
51:f6:1f:1e:3f:19:55:b3:2a:cb:6f:d2:5e:0d:ee:2a:24:ba:
29:09:42:df:5f:0a:2b:cd:81:18:52:77:aa:46:5d:db:45:5e:
57:99:ec:cf:f6:fe:06:34:7d:cd:f3:e5:24:4f:d2:bb:14:52:
8d:81:ce:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:22 2023 by rpki-client on console-ams.rpki-client.org