Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/vKBK1VV_eiTNXvZbGEtP7Zmrc14.roa
File: vKBK1VV_eiTNXvZbGEtP7Zmrc14.roa (raw, json)
Hash identifier: ZZ6Ya/HW5jaDT6oLe/dIKoiSLbAtYcemBq/3lJnw9Rs=
Subject key identifier: BC:A0:4A:D5:55:7F:7A:24:CD:5E:F6:5B:18:4B:4F:ED:99:AB:73:5E
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01839976E13256D241062006E12CCB99D4FA
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/vKBK1VV_eiTNXvZbGEtP7Zmrc14.roa
Signing time: Sun 02 Oct 2022 16:10:48 +0000
ROA not before: Sun 02 Oct 2022 16:10:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 45.128.56.0/24 maxlen: 24
45.128.74.0/24 maxlen: 24
45.92.165.0/24 maxlen: 24
45.92.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:99:76:e1:32:56:d2:41:06:20:06:e1:2c:cb:99:d4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 2 16:10:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bca04ad5557f7a24cd5ef65b184b4fed99ab735e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:67:4b:77:d4:42:0d:43:63:e2:8a:19:c2:fb:
ec:4b:db:50:e9:58:3c:b6:87:7a:ef:46:6a:7c:2c:
f3:8d:cc:c8:ff:e4:23:a3:cf:23:d1:18:99:04:c6:
a7:58:fe:a9:6f:af:37:8f:3b:99:ee:86:c2:90:33:
35:9d:c3:51:15:d8:5f:94:98:78:b0:13:e0:4a:31:
74:ab:da:ab:96:f9:ef:7c:38:8e:ea:50:a4:e8:d9:
61:53:9c:80:28:2d:05:da:db:e2:f3:9c:5b:72:d0:
58:3c:91:6f:c2:f7:b0:d5:b1:06:d7:86:7e:80:79:
20:49:e8:9f:0d:90:6c:88:2f:ee:db:d1:3d:8f:d7:
77:60:86:d9:8b:98:93:a5:df:3e:b3:81:f9:61:f7:
e2:12:c0:e5:02:8c:f5:67:cc:86:8c:97:96:2c:ba:
93:d8:39:64:a3:7d:ab:fe:75:a3:58:47:6a:36:3f:
15:0c:3f:67:20:46:ce:69:ce:f2:bd:68:ad:49:64:
5e:7b:3b:be:1f:94:f1:b4:23:ee:a5:06:2f:75:87:
70:72:27:5b:2f:ae:38:43:45:72:41:65:10:16:65:
85:c6:fc:bf:4f:b7:99:b6:30:f3:88:9a:9d:95:ba:
e8:e7:7d:a5:e4:91:80:dc:b1:05:bb:42:b5:d7:eb:
78:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A0:4A:D5:55:7F:7A:24:CD:5E:F6:5B:18:4B:4F:ED:99:AB:73:5E
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/vKBK1VV_eiTNXvZbGEtP7Zmrc14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.164.0/23
45.128.56.0/24
45.128.74.0/24
Signature Algorithm: sha256WithRSAEncryption
42:78:cd:ae:67:56:8f:5a:ea:1a:ef:c1:ec:8e:45:7e:16:64:
56:4d:7f:0a:9b:6a:eb:3b:68:2f:d5:fd:e0:1d:e0:e9:34:ac:
42:e2:8e:52:68:07:5e:35:66:c7:57:6f:d9:a1:5d:f5:8a:86:
a1:c5:b0:00:65:5b:76:b3:dc:93:09:38:9e:92:e3:a0:58:b7:
9f:cd:b3:c5:2c:d7:0a:c0:2b:72:ca:97:a1:60:30:77:4f:31:
c4:56:9d:86:37:a5:d6:ba:ca:33:47:4f:61:76:34:85:30:08:
e5:53:33:60:9b:e1:6b:c9:3a:da:02:d0:2d:e8:9c:70:e1:f1:
5d:39:57:a1:db:41:e8:5e:01:3d:70:b0:24:76:eb:32:b3:93:
4d:9e:e7:2e:97:52:55:b6:a8:04:ae:9c:b6:09:85:b5:ac:89:
ac:72:47:14:02:96:0a:17:47:88:ca:d0:73:ba:34:bb:2e:b6:
66:e8:4f:ea:08:c3:b9:eb:0b:67:26:eb:29:0f:31:12:d3:51:
54:99:18:49:f3:59:c4:d7:e4:3e:b4:71:1d:af:e2:75:b6:3e:
06:b4:c2:c4:59:76:ef:e1:f5:85:ae:b3:20:aa:98:87:04:e5:
a7:cb:2c:18:2b:fe:44:91:74:f2:aa:9f:14:88:81:60:f4:4d:
2a:04:f1:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:23 2023 by rpki-client on console-ams.rpki-client.org