Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/QV82mfxOGLitgqwQYlpNL-rygqQ.roa
File: QV82mfxOGLitgqwQYlpNL-rygqQ.roa (raw, json)
Hash identifier: TwUng7wre2rA4L2bAdJBNnib9mTOULRpJyJaLUi+Gv4=
Subject key identifier: 41:5F:36:99:FC:4E:18:B8:AD:82:AC:10:62:5A:4D:2F:EA:F2:82:A4
Certificate issuer: /CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Certificate serial: 01849041188757537962B80B82073F76C56E
Authority key identifier: 17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/QV82mfxOGLitgqwQYlpNL-rygqQ.roa
Signing time: Sat 19 Nov 2022 14:18:15 +0000
ROA not before: Sat 19 Nov 2022 14:18:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44176
IP address blocks: 45.118.184.0/22 maxlen: 22
45.81.188.0/22 maxlen: 24
216.205.160.0/19 maxlen: 24
2a0e:5e80::/29 maxlen: 32
2a0e:5e80::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:90:41:18:87:57:53:79:62:b8:0b:82:07:3f:76:c5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Validity
Not Before: Nov 19 14:18:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=415f3699fc4e18b8ad82ac10625a4d2feaf282a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:dd:f4:7c:e5:c1:41:01:e2:7a:03:99:d7:71:
11:4d:43:b3:c7:6f:ca:6e:c6:de:1e:fa:94:5c:5e:
07:26:14:30:0e:68:ec:13:51:f0:bc:51:2c:bd:4a:
d8:f4:ea:6e:cc:bf:f3:7c:59:e9:f7:10:b1:17:62:
ea:28:b8:0a:14:36:a6:d6:f0:51:83:ad:f4:b6:05:
5a:14:9d:08:b4:35:c0:e7:cd:ae:df:c8:2e:74:6b:
be:68:16:57:cf:c4:9e:25:0b:96:45:67:d8:d3:70:
fd:be:89:bd:8e:d1:66:ee:b1:f6:20:2d:e2:f4:2b:
fa:a1:12:1f:8e:5d:c6:a9:97:11:ab:21:a6:07:46:
ae:37:ad:d1:9a:84:da:d7:e8:4a:2d:20:24:c0:90:
d7:4d:be:4e:2c:42:68:39:a4:09:d1:8b:1d:e9:dd:
d7:7a:e3:66:fe:34:b7:fc:c8:9d:71:02:27:df:c7:
e0:16:a0:e2:81:c9:87:0a:fe:a8:51:24:d1:df:31:
fb:28:64:92:0a:44:6f:b0:19:18:ad:76:a0:8d:e7:
4a:64:73:39:37:30:44:71:af:44:a8:fe:54:e9:ce:
20:89:65:f6:d8:74:70:e4:37:c0:55:4a:8c:7d:ba:
78:69:bc:09:a5:1b:17:6a:03:8f:a4:5f:e7:b2:2c:
9f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5F:36:99:FC:4E:18:B8:AD:82:AC:10:62:5A:4D:2F:EA:F2:82:A4
X509v3 Authority Key Identifier:
keyid:17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/QV82mfxOGLitgqwQYlpNL-rygqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.188.0/22
45.118.184.0/22
216.205.160.0/19
IPv6:
2a0e:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
90:cd:76:4c:90:fe:0a:f9:8b:57:6e:6f:a8:92:38:af:dc:98:
15:68:72:63:9c:ac:c6:92:99:96:fc:1d:36:fc:c5:62:0b:2a:
ec:85:10:97:1c:da:9c:00:eb:c4:89:6b:f1:bd:26:39:7e:a3:
d3:2c:fa:ba:13:aa:ca:fe:30:3b:4b:ae:c0:76:a1:1c:10:a6:
e0:1d:db:6d:e6:94:1e:9c:4a:69:32:24:92:00:2c:c3:50:5d:
7a:65:68:87:3a:f9:8c:d3:00:f5:19:83:53:b8:72:eb:57:37:
2b:0c:12:6e:aa:06:3f:ef:d9:dc:5c:41:0e:ee:74:c0:fa:79:
fb:59:55:4d:a5:00:83:15:2c:aa:73:54:8e:c2:d6:51:47:65:
67:9a:6f:d2:9b:59:44:ce:65:11:92:7e:84:10:c0:43:7b:8f:
4b:ba:18:21:b1:aa:cc:87:50:cf:0d:d2:19:83:75:4a:9f:7e:
88:a6:33:2e:8f:83:86:fa:1d:f3:7e:31:5e:b5:54:0d:8c:b1:
98:b4:07:de:93:16:39:0c:c9:80:ae:b9:12:7c:9e:68:4c:ad:
8b:ab:fc:75:8c:fb:c3:85:28:ce:77:9c:7e:08:87:c9:ab:bc:
a9:bf:2d:3c:79:59:ab:b5:87:73:70:8b:84:95:29:b9:29:df:
2f:c5:67:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:48 2023 by rpki-client on console-ams.rpki-client.org