Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/RX07bXt1ZXgSd_C81DwYymqH1rA.roa
File: RX07bXt1ZXgSd_C81DwYymqH1rA.roa (raw, json)
Hash identifier: hcwJvXTPkin7OGADS0UBQ27iKWNjMq5yyb6fOHja1Xs=
Subject key identifier: 45:7D:3B:6D:7B:75:65:78:12:77:F0:BC:D4:3C:18:CA:6A:87:D6:B0
Certificate issuer: /CN=854c8176d9c42c704b310913309470351bb599e5
Certificate serial: 03C4798F
Authority key identifier: 85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/RX07bXt1ZXgSd_C81DwYymqH1rA.roa
Signing time: Thu 23 Jun 2022 19:56:18 +0000
ROA not before: Thu 23 Jun 2022 19:56:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6768
IP address blocks: 45.14.108.0/22 maxlen: 22
45.14.108.0/24 maxlen: 24
45.14.111.0/24 maxlen: 24
45.14.110.0/24 maxlen: 24
45.14.109.0/24 maxlen: 24
2a01:4a60::/32 maxlen: 32
2a0e:c080::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63207823 (0x3c4798f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c8176d9c42c704b310913309470351bb599e5
Validity
Not Before: Jun 23 19:56:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=457d3b6d7b7565781277f0bcd43c18ca6a87d6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e5:b5:20:a1:3b:5d:28:b7:8f:7a:35:88:89:
6e:73:d3:63:38:d9:ca:0b:3a:44:6a:9d:d6:12:79:
0e:d9:40:5a:7a:a9:56:ac:4d:c4:c6:6d:00:92:8d:
26:16:49:3a:2f:a5:7c:da:87:8b:64:31:de:cd:8d:
57:4e:d9:47:45:98:68:74:7b:b4:95:d0:95:08:3a:
06:87:80:f1:d4:38:33:47:dd:67:89:63:0b:0a:72:
1f:82:8a:9a:ac:16:aa:cc:af:68:eb:93:f6:28:80:
f4:4b:e8:fa:26:8c:a4:a7:0f:0a:7c:1f:34:2b:29:
eb:ba:e1:38:77:0f:74:3a:37:61:99:63:ae:5e:8f:
a4:5c:4d:65:b1:3c:00:74:ab:1e:cd:a4:95:4a:03:
ee:57:a9:be:a2:bd:19:31:7a:b6:9a:d1:13:4d:ce:
2f:43:b1:03:dc:ef:f3:ef:77:68:ac:d0:7a:27:fc:
75:ae:65:d1:cd:84:ec:a7:d9:dc:44:1a:7b:fd:9e:
07:b1:92:2d:6d:dc:cf:07:27:ed:0b:14:1d:b0:c9:
b2:2c:e1:26:ed:56:be:bb:a3:06:75:46:23:e8:ff:
52:3a:d0:3c:c4:44:f5:d4:33:58:5d:aa:58:bf:99:
71:2c:fa:c9:a3:6a:9c:25:7a:f9:bb:85:cf:10:32:
dd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:7D:3B:6D:7B:75:65:78:12:77:F0:BC:D4:3C:18:CA:6A:87:D6:B0
X509v3 Authority Key Identifier:
keyid:85:4C:81:76:D9:C4:2C:70:4B:31:09:13:30:94:70:35:1B:B5:99:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUyBdtnELHBLMQkTMJRwNRu1meU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/RX07bXt1ZXgSd_C81DwYymqH1rA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/cff630-6c8a-43bd-afb9-b07f016a1762/1/hUyBdtnELHBLMQkTMJRwNRu1meU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.108.0/22
IPv6:
2a01:4a60::/32
2a0e:c080::/29
Signature Algorithm: sha256WithRSAEncryption
6a:d6:2c:8e:08:d0:64:c6:81:e3:c6:b4:14:d7:17:5a:d3:c6:
4b:5f:68:6e:72:88:bd:02:5a:c2:7b:5e:0b:ca:ba:fc:80:7b:
72:9c:68:7c:ce:e1:7d:8b:98:bc:3c:8c:23:b4:32:b8:14:1b:
06:d9:25:8a:0c:37:83:9f:94:4d:fb:93:05:42:77:ff:04:e5:
5a:f3:bd:61:54:83:77:1b:42:36:36:fa:d7:13:b8:42:89:08:
1d:28:a8:7e:a2:4d:da:15:53:b4:8c:66:8a:cf:14:db:fc:76:
7f:b2:38:1c:c0:7d:bc:9d:b4:c4:16:22:95:02:f9:f5:44:a8:
37:3b:b6:0a:01:94:aa:48:69:69:c7:9c:64:b0:5d:91:99:11:
da:68:84:2a:21:cc:ae:51:99:f3:ff:89:01:e8:ea:9c:33:93:
f8:26:ad:ab:e8:f5:97:57:e4:06:b6:b5:de:62:7d:ac:99:f3:
b2:20:aa:34:af:52:c5:fe:18:72:e1:52:a1:9a:e9:09:59:60:
b1:79:26:7e:11:2c:30:04:38:01:47:0b:97:d6:4b:1d:c8:6b:
b1:d2:ff:83:9f:6b:32:5e:70:0b:32:54:ee:70:0a:56:bc:a0:
3e:f0:a0:68:8d:e3:97:bc:12:0e:6e:85:fb:98:cb:81:94:32:
80:a9:c2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:45 2023 by rpki-client on console-ams.rpki-client.org