Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/YuANYHrrHGIFA1uF-8PzDTebv8g.roa
File: YuANYHrrHGIFA1uF-8PzDTebv8g.roa (raw, json)
Hash identifier: gTksnz7yMgSo/3yvvaTV6yN6WufO/uS4utZiiu0rfXo=
Subject key identifier: 62:E0:0D:60:7A:EB:1C:62:05:03:5B:85:FB:C3:F3:0D:37:9B:BF:C8
Certificate issuer: /CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Certificate serial: 06B747A7
Authority key identifier: 17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/YuANYHrrHGIFA1uF-8PzDTebv8g.roa
Signing time: Sat 01 Jan 2022 07:01:29 +0000
ROA not before: Sat 01 Jan 2022 07:01:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44176
IP address blocks: 45.118.184.0/22 maxlen: 22
45.81.188.0/22 maxlen: 24
2a0e:5e80::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112674727 (0x6b747a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Validity
Not Before: Jan 1 07:01:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=62e00d607aeb1c6205035b85fbc3f30d379bbfc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8d:2c:c3:29:fa:65:55:39:40:8f:7f:bd:c9:
5e:ec:cd:ef:50:cf:63:8a:1e:58:f6:04:18:50:65:
1a:59:c9:52:5d:f7:23:29:73:be:05:e4:d5:4f:02:
50:60:8a:d5:a2:c1:ca:f8:2e:eb:da:72:aa:63:6c:
a9:cd:b2:4b:d2:f9:c8:7c:60:3c:cc:ea:ab:c9:f6:
d2:92:f8:6a:33:20:3a:6c:77:17:5d:38:b8:1d:d4:
26:c4:e4:3e:c4:35:c2:e4:a4:fc:77:f1:26:3f:89:
45:bd:11:68:43:63:e8:8d:02:e7:8e:72:91:83:aa:
7b:f7:18:b1:ac:ac:69:df:27:76:ad:b9:f6:82:5b:
85:91:8c:72:f8:c1:eb:f1:ff:1c:e2:3d:3d:56:36:
bd:de:de:95:92:5c:e7:c8:15:5a:98:bc:76:6e:28:
b5:14:74:44:2e:62:a8:59:1f:c2:ce:5c:29:06:b8:
ea:f8:0a:85:7c:95:91:9e:60:4d:41:ec:e4:7a:8b:
eb:e7:4d:b9:f9:75:61:9b:5d:48:71:03:c1:01:5c:
8e:f0:84:07:c5:46:ff:e7:87:28:5d:dd:0e:c4:fb:
d3:59:81:c6:25:a7:8d:23:b7:9e:e2:c0:72:3e:ce:
be:6b:db:05:42:17:9c:a0:33:bc:80:42:4e:8a:0c:
b7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E0:0D:60:7A:EB:1C:62:05:03:5B:85:FB:C3:F3:0D:37:9B:BF:C8
X509v3 Authority Key Identifier:
keyid:17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/YuANYHrrHGIFA1uF-8PzDTebv8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.188.0/22
45.118.184.0/22
IPv6:
2a0e:5e80::/29
Signature Algorithm: sha256WithRSAEncryption
65:32:26:49:c2:b2:f4:88:75:b9:98:e8:c3:e7:95:78:83:73:
4e:fe:7c:9a:6a:e6:3e:ee:78:6a:eb:45:d3:eb:6f:4a:67:ec:
05:f1:61:c6:61:e2:da:63:1e:14:1c:79:f5:cf:b1:49:df:1a:
ca:6d:7f:67:75:fa:7d:a3:c4:68:32:1d:7a:40:31:25:f2:9d:
e9:70:49:7e:28:d9:95:34:0c:ec:70:56:29:e6:33:d0:fc:59:
f1:cd:e6:2c:0e:62:fb:a8:99:df:27:3f:61:e5:0b:05:a9:f5:
0c:05:64:ea:a8:19:df:0f:af:83:5b:a3:4f:97:a7:f9:00:c0:
a1:89:50:ae:26:98:a3:31:47:68:42:5a:95:22:b0:36:b1:9f:
90:a6:03:cc:e3:f8:e7:7e:82:c0:1e:ee:8a:12:41:10:b4:42:
31:70:f8:d8:3f:82:2b:38:ad:10:4a:76:56:3f:02:82:8a:e0:
8c:76:f4:d1:b8:92:5b:86:30:2b:d1:90:9a:ca:26:02:ae:74:
44:5b:52:ff:51:cb:28:bf:aa:db:9b:dc:e3:3f:4e:f4:6e:9e:
fc:da:a2:23:2e:a2:b1:70:e7:1c:b0:db:09:87:8a:ed:63:b8:
b2:84:c5:bc:52:23:60:7d:ec:e5:b3:d8:3b:3b:05:78:00:3c:
5d:13:2c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:52 2023 by rpki-client on console-fra.rpki-client.org