Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/9YisNN70enxS5XcgY-maid6o-wk.roa
File: 9YisNN70enxS5XcgY-maid6o-wk.roa (raw, json)
Hash identifier: 6f/6tkL8uuDKJsgAr8GhPm0TgTFQjccgTaAXwsqRafs=
Subject key identifier: F5:88:AC:34:DE:F4:7A:7C:52:E5:77:20:63:E9:9A:89:DE:A8:FB:09
Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial: 0817FCB6
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/9YisNN70enxS5XcgY-maid6o-wk.roa
Signing time: Sun 30 Jan 2022 22:45:15 +0000
ROA not before: Sun 30 Jan 2022 22:45:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42898
IP address blocks: 185.73.243.0/24 maxlen: 24
45.155.79.0/24 maxlen: 24
45.141.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135789750 (0x817fcb6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Validity
Not Before: Jan 30 22:45:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f588ac34def47a7c52e5772063e99a89dea8fb09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c8:46:39:9a:f6:d0:fe:bb:bf:d1:6f:6f:8f:
1f:86:3d:aa:c6:91:93:be:49:ba:32:9c:8f:08:dc:
ec:55:ae:7f:2d:68:e1:8f:4a:a9:31:bf:59:16:b8:
1a:cd:68:07:25:06:2c:9d:58:77:e9:75:1d:c6:84:
64:0b:3f:87:32:c2:1a:9c:98:64:9a:9b:b8:a4:80:
d6:8f:9e:95:f1:e3:df:4a:65:bf:e5:b9:08:74:13:
1d:5e:72:8c:98:33:aa:89:50:01:02:0b:87:62:94:
c6:56:bd:f8:f0:a8:e3:2c:20:af:51:c6:19:b8:41:
d4:bb:31:f4:69:15:4c:09:75:51:b3:7c:54:0f:db:
34:a0:5d:a3:97:84:82:b5:41:8d:6e:0b:c3:fe:5f:
cc:dc:b8:c7:48:03:81:72:61:91:02:0a:c2:df:e6:
1f:21:ca:7e:b0:dc:2e:cf:0c:b0:36:01:65:08:7f:
4e:7b:21:dc:0a:75:2c:0a:f0:b2:ad:95:30:85:2b:
15:f0:ab:2c:2e:a1:8a:df:a4:b6:0f:6c:fa:72:52:
88:22:02:1e:a9:1a:97:45:61:bb:aa:a4:20:28:da:
e8:87:be:b5:d3:80:ce:f7:81:69:c0:57:af:00:e7:
c5:9a:fb:20:81:73:d5:0c:b9:28:82:c4:73:d3:80:
d7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:88:AC:34:DE:F4:7A:7C:52:E5:77:20:63:E9:9A:89:DE:A8:FB:09
X509v3 Authority Key Identifier:
keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/9YisNN70enxS5XcgY-maid6o-wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.54.0/24
45.155.79.0/24
185.73.243.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:7f:39:58:5b:f3:bc:c5:7b:c8:fc:98:59:94:70:b5:55:ad:
79:eb:5b:cc:35:18:43:58:ae:8a:aa:19:d1:5c:40:f9:63:f0:
bb:7a:15:a4:42:a2:7a:8e:08:d7:19:a5:0d:29:c4:83:d1:a3:
a5:2d:51:4a:a2:69:5b:8b:c2:47:de:02:82:74:c6:67:d2:58:
95:d0:a6:43:46:8b:a4:a5:b2:48:4d:b4:b6:a6:eb:ca:18:65:
f9:e9:15:0e:5c:62:18:95:3f:6d:5f:83:82:7d:3f:63:35:25:
29:5c:25:5c:2c:14:7d:f0:03:29:65:28:7f:60:b8:e3:6f:64:
c4:ed:7c:bb:0b:fc:3b:87:6b:e8:4c:49:80:70:fd:50:d7:0d:
44:d6:50:35:be:c1:22:f2:70:c8:4a:77:91:54:a1:2e:50:76:
3e:27:84:d9:ac:b9:f3:87:47:af:01:05:14:b5:36:96:b2:05:
a8:6a:10:53:0b:d5:66:ea:86:31:7b:96:5b:4d:50:68:7b:b2:
b0:71:90:52:c3:34:7b:f4:f2:e1:b4:1e:3d:d8:b8:6f:72:8a:
39:1e:86:93:a9:1c:17:71:5e:9e:57:a7:ea:d1:f4:26:af:ea:
3c:db:93:1d:28:30:21:1e:cd:4c:68:73:81:66:ad:c6:c2:c2:
20:e8:30:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:06 2023 by rpki-client on console-fra.rpki-client.org