Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/AacJrVLxU6UlwUxhQtNUIdSFLPY.roa
File: AacJrVLxU6UlwUxhQtNUIdSFLPY.roa (raw, json)
Hash identifier: 5bbhKdyW02V9yyBkNhTWtDbpPpdXP/FFUAHAXmhIonM=
Subject key identifier: 01:A7:09:AD:52:F1:53:A5:25:C1:4C:61:42:D3:54:21:D4:85:2C:F6
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0DC9E8FF
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/AacJrVLxU6UlwUxhQtNUIdSFLPY.roa
Signing time: Tue 05 Apr 2022 10:28:35 +0000
ROA not before: Tue 05 Apr 2022 10:28:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 45.91.50.0/24 maxlen: 24
45.8.68.0/24 maxlen: 24
45.67.97.0/24 maxlen: 24
45.67.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 231336191 (0xdc9e8ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Apr 5 10:28:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01a709ad52f153a525c14c6142d35421d4852cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bf:3e:30:b3:b2:23:3d:21:ba:b5:b6:89:9d:
9c:e5:da:f8:48:ce:4a:5d:b4:39:98:7b:d6:cd:5f:
f4:77:6b:20:04:14:dc:cc:b0:ca:98:8d:5a:5a:db:
06:e5:45:2d:41:81:12:fb:73:46:0f:a0:c8:ac:7a:
57:d9:af:24:26:ba:d7:57:dd:f1:2a:b6:47:c0:63:
eb:4d:b0:37:64:7a:52:fe:ac:9c:e9:d4:6c:41:7c:
25:f3:ed:18:5e:c7:a2:5a:06:0c:b0:bc:19:fb:61:
20:b1:0c:21:92:a0:0f:9c:82:d0:cb:59:5d:15:b4:
9c:eb:c9:74:f8:b9:8a:d8:de:18:d3:36:cc:5f:52:
b6:ba:e5:23:0f:f5:1c:a9:4f:50:d5:1d:63:1a:64:
26:93:c1:a3:4a:a2:c9:8c:4d:99:c6:4d:59:4c:f4:
a4:57:e2:68:9f:89:7b:4f:39:dd:84:38:a2:27:6a:
0d:d1:5e:61:4a:de:87:23:46:61:45:3c:00:b6:3f:
0e:22:aa:b5:6c:83:23:61:3f:b3:b3:48:0d:b8:74:
6a:8a:ef:4b:04:6b:58:7c:38:6a:ab:73:1c:df:d8:
e2:cf:6b:5f:a8:a7:0f:92:42:35:7c:9e:b5:44:88:
57:0a:46:70:03:d9:c5:7d:b9:d8:e9:5c:bd:ff:1c:
4b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:A7:09:AD:52:F1:53:A5:25:C1:4C:61:42:D3:54:21:D4:85:2C:F6
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/AacJrVLxU6UlwUxhQtNUIdSFLPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.68.0/24
45.67.97.0/24
45.67.99.0/24
45.91.50.0/24
Signature Algorithm: sha256WithRSAEncryption
11:3c:2f:0b:f9:60:c4:df:14:18:90:1d:be:63:06:c6:06:42:
45:9c:ec:3c:77:77:20:a7:5d:19:a8:b6:10:55:7e:16:39:f2:
ce:1b:45:39:7b:e3:a9:b0:f9:54:9c:43:b7:b1:e4:6e:51:75:
72:78:71:ca:b9:9b:c0:07:fd:1b:2e:84:14:d3:cf:7f:2f:ac:
55:19:23:d1:9f:c5:20:3e:dc:50:e0:7b:84:47:01:de:88:77:
a6:72:5f:ff:49:d4:c0:46:9b:f7:49:6e:a5:9d:60:f4:0e:3b:
3e:31:39:7c:84:24:d6:c7:9b:0c:ac:69:02:b5:c6:ce:7a:0e:
d9:51:05:9a:3a:db:3f:b5:4e:10:ea:26:7e:48:f2:de:3d:d4:
f5:54:68:47:08:17:72:89:90:63:99:20:3c:f6:9f:c8:cd:2f:
5d:38:7b:5a:13:58:74:13:ed:64:c8:a7:29:5c:df:3d:cf:d5:
07:ab:83:df:0d:1d:c1:c4:1d:84:60:80:b8:19:82:fc:87:7f:
3d:2b:a0:13:46:ee:ed:3e:2e:6a:ca:e0:46:bd:87:02:44:51:
40:d0:bd:fb:84:d4:4a:90:df:32:bf:d2:00:8f:94:0b:13:4e:
90:71:fb:0d:81:ad:be:1c:73:aa:0d:a9:d7:12:f7:49:04:d2:
ea:5f:95:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:53 2023 by rpki-client on console-ams.rpki-client.org