Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/rujYxSV4p7c-BLuGhO9jLR-vBoI.roa
File: rujYxSV4p7c-BLuGhO9jLR-vBoI.roa (raw, json)
Hash identifier: WaDnJhKpibJxeIi5k4lM7jZrzzYWXKzQnn2xk/sr9GI=
Subject key identifier: AE:E8:D8:C5:25:78:A7:B7:3E:04:BB:86:84:EF:63:2D:1F:AF:06:82
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01829DA301487A9D3277AA0CA95A3725EE77
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/rujYxSV4p7c-BLuGhO9jLR-vBoI.roa
Signing time: Sun 14 Aug 2022 18:34:41 +0000
ROA not before: Sun 14 Aug 2022 18:34:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205220
IP address blocks: 45.8.206.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:9d:a3:01:48:7a:9d:32:77:aa:0c:a9:5a:37:25:ee:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Aug 14 18:34:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aee8d8c52578a7b73e04bb8684ef632d1faf0682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cf:c5:83:8e:89:d9:79:b1:ab:68:3e:aa:46:
de:15:c2:58:38:f2:b3:dc:79:16:53:f2:8d:b9:c4:
eb:f1:ab:15:52:3d:de:3d:8b:1e:49:ef:f4:45:0d:
b2:70:21:de:63:f9:3a:e0:9f:0e:8e:64:1f:c9:e1:
ca:f0:6f:e2:b0:e6:e3:2a:65:96:14:43:2d:82:2e:
98:7b:fa:93:df:93:11:c7:23:6a:90:46:e8:3a:e5:
c5:98:79:31:07:02:36:aa:80:d1:e9:90:3f:be:c7:
5d:af:08:19:06:d1:7c:c3:07:6b:9d:8c:07:14:16:
22:61:40:35:22:53:b1:0d:8e:92:cb:e0:27:44:46:
6c:42:07:3c:ab:f6:0d:42:b8:26:7a:2c:ed:91:96:
b1:7c:9e:a1:3d:0e:db:4b:2f:9d:27:fe:b9:12:de:
72:ac:a2:8b:13:ed:78:c3:04:72:9b:ab:4a:13:6a:
86:4a:61:be:18:e4:6b:34:65:10:a7:52:09:9e:c8:
fc:36:8c:b4:18:03:56:6b:c5:a9:da:ff:1e:98:4e:
34:d9:ce:9d:46:8a:dc:3b:00:01:63:01:ff:07:52:
c4:be:36:77:b6:66:a7:b6:13:e8:26:02:c1:0c:84:
3c:81:14:74:eb:18:99:65:70:c3:a3:e7:b1:af:5a:
2f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E8:D8:C5:25:78:A7:B7:3E:04:BB:86:84:EF:63:2D:1F:AF:06:82
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/rujYxSV4p7c-BLuGhO9jLR-vBoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.206.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:58:ca:56:55:a1:a3:04:dd:9f:da:a8:90:82:47:3b:a9:50:
34:af:66:ea:ed:ad:2b:74:65:28:01:1d:95:45:3c:3d:27:79:
88:66:23:ab:07:36:76:df:c5:db:21:99:4c:56:8d:3f:ed:13:
31:8c:a3:50:97:36:58:c3:6b:97:4b:8e:c2:54:f8:ec:74:fa:
2e:56:20:25:a8:db:2c:f3:51:e1:12:c8:c8:ac:13:d7:8b:e2:
1c:15:cf:b2:f0:5e:b6:ee:62:66:50:16:1b:80:e9:5f:6e:0a:
c6:84:1a:95:c4:1d:6b:7d:e3:3b:88:b3:13:e5:da:85:e5:0c:
fd:ff:71:b9:f4:50:91:39:da:be:75:d3:3d:ea:ce:99:48:ac:
9b:89:fa:4b:1d:0c:ad:e8:d8:87:c5:26:d3:e5:b4:4e:2a:82:
d5:1c:3d:fa:12:62:43:39:be:50:8e:75:22:74:4e:86:d5:a9:
15:86:be:ff:e9:4d:63:d0:10:b5:6a:d2:a9:df:b4:c2:7a:18:
1c:c1:af:63:0c:15:b3:40:ec:7a:8f:5b:01:49:96:28:96:df:
3b:52:d4:ae:d1:07:0c:f3:07:39:60:03:3a:9e:2c:66:ce:e2:
98:c1:ab:64:d0:6f:58:8d:0d:08:fa:1c:49:3d:b5:2b:55:1d:
79:de:be:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:29 2023 by rpki-client on console-fra.rpki-client.org