Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/kXZUoFMuJfJ7bMbpFn2jAWQvx9s.roa
File: kXZUoFMuJfJ7bMbpFn2jAWQvx9s.roa (raw, json)
Hash identifier: kCVTeNT2eQkvf5g4fpMU8YhT5W9E65DSlVsIb7N7C6U=
Subject key identifier: 91:76:54:A0:53:2E:25:F2:7B:6C:C6:E9:16:7D:A3:01:64:2F:C7:DB
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0182AFA2D0914B96B0BF2A2A35ED4E0303F1
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/kXZUoFMuJfJ7bMbpFn2jAWQvx9s.roa
Signing time: Thu 18 Aug 2022 06:27:39 +0000
ROA not before: Thu 18 Aug 2022 06:27:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209181
IP address blocks: 45.144.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:af:a2:d0:91:4b:96:b0:bf:2a:2a:35:ed:4e:03:03:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Aug 18 06:27:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=917654a0532e25f27b6cc6e9167da301642fc7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:95:d4:ca:f2:f5:ba:be:e0:28:da:3a:e8:
3f:c6:bc:8c:e1:f0:9d:15:d5:e1:73:99:26:aa:d4:
a0:64:77:fc:7f:bb:90:66:45:ac:76:b9:87:b4:d7:
18:71:6e:ea:d7:60:f7:a2:49:89:2f:80:37:92:6f:
a1:a6:73:e7:b8:c2:52:73:9a:48:74:3f:ed:58:d7:
a2:7a:70:0b:01:15:8b:bd:5b:2b:a3:9d:6c:55:c6:
53:16:39:9b:c0:f9:de:03:55:b3:9c:f1:2b:5d:53:
5a:4d:bb:0d:94:7f:4f:09:ac:82:c1:bf:97:dc:7c:
6b:36:5b:38:91:fd:19:2b:57:13:eb:82:36:71:80:
8e:2b:92:1c:33:05:11:50:42:02:13:60:e5:4e:b3:
14:22:9f:17:11:8d:c3:c2:eb:09:36:5f:0d:07:44:
9d:a3:65:42:8a:cb:41:39:e7:71:a7:5e:c2:83:52:
18:26:7a:27:1d:a9:b3:e8:20:10:47:1c:fa:67:35:
5e:89:17:85:04:1b:1b:fe:40:3e:91:58:44:b6:7f:
ad:e8:cc:4a:9d:e7:d0:58:f0:76:ac:ad:89:57:5d:
a7:5b:36:6a:4b:f5:8a:e4:cd:0d:e2:8d:7b:52:35:
fe:98:89:77:38:32:72:1b:8c:95:fd:ad:20:81:17:
2f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:76:54:A0:53:2E:25:F2:7B:6C:C6:E9:16:7D:A3:01:64:2F:C7:DB
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/kXZUoFMuJfJ7bMbpFn2jAWQvx9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.225.0/24
Signature Algorithm: sha256WithRSAEncryption
29:51:cd:63:03:07:90:0f:57:08:85:73:39:eb:f6:d8:3f:95:
22:4d:92:98:9a:72:fa:6a:a1:d2:c8:77:81:da:3d:f2:ea:7a:
90:ac:29:07:c9:37:70:6d:df:3c:af:7b:cc:55:0d:0f:fb:d4:
0d:75:4d:53:50:69:52:8f:93:cc:5e:d8:e0:25:94:5d:90:05:
f2:f4:fd:26:61:c9:3f:5f:ea:82:e2:20:87:de:e7:69:e4:c2:
1a:97:94:3d:b8:a8:d9:37:5a:70:7f:ee:72:d8:30:c9:49:50:
44:7c:f0:32:7f:a8:de:1b:10:9c:76:41:57:20:9b:7b:d0:c4:
28:7a:4f:2e:4d:08:39:cf:53:53:4d:8a:6d:c6:b4:0a:ef:53:
ce:1e:4b:d1:74:91:5a:9e:03:31:6f:cf:7e:00:31:a6:5e:02:
f8:e7:ca:48:f1:94:ea:d1:fc:3e:3c:2c:c7:79:49:aa:60:48:
4a:2b:79:c7:97:fb:fc:66:51:45:8e:10:33:89:f9:06:09:7e:
53:ae:ed:3b:57:e6:da:08:f6:c2:26:e6:64:07:00:98:53:3c:
7f:e1:79:b6:1c:f3:b8:e1:55:36:d8:a3:35:68:09:34:81:6e:
0e:1e:54:af:7c:d9:f4:82:18:02:f4:8e:4d:8e:93:84:83:8a:
87:b2:7c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:56 2023 by rpki-client on console-ams.rpki-client.org