Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/_iSFx7SgjElgoI-h7PP2G5GBQs8.roa
File: _iSFx7SgjElgoI-h7PP2G5GBQs8.roa (raw, json)
Hash identifier: XykDg9BrpgfjW4oow3cQSy7NCAofmve/FU3G75/saEY=
Subject key identifier: FE:24:85:C7:B4:A0:8C:49:60:A0:8F:A1:EC:F3:F6:1B:91:81:42:CF
Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Certificate serial: 044526E2
Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/_iSFx7SgjElgoI-h7PP2G5GBQs8.roa
Signing time: Wed 01 Jun 2022 03:03:13 +0000
ROA not before: Wed 01 Jun 2022 03:03:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44446
IP address blocks: 45.143.203.0/24 maxlen: 24
185.156.73.0/24 maxlen: 24
92.63.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71640802 (0x44526e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed
Validity
Not Before: Jun 1 03:03:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe2485c7b4a08c4960a08fa1ecf3f61b918142cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fc:37:d2:89:77:a5:d7:c5:22:3c:40:33:40:
5e:9d:b7:d6:6d:80:ce:e7:ed:83:f1:57:90:77:56:
40:46:02:de:92:35:01:7c:8a:2f:e4:be:8a:cb:54:
0e:77:22:3b:ed:60:00:76:7f:ba:eb:62:c8:13:a6:
14:1b:5c:04:f5:26:94:96:0b:78:4d:90:e6:4f:d6:
d5:0e:a2:81:ff:eb:84:12:39:88:fb:ee:87:53:ce:
ee:ce:82:0f:2e:ab:74:3d:a9:3d:53:6e:bf:73:3b:
61:fc:61:95:22:23:a6:00:99:f6:5d:9d:0c:1a:b6:
24:fb:6d:cb:1d:6b:5b:3a:8b:99:38:4d:69:4d:e0:
a1:3b:cf:78:9e:08:b9:c9:12:1c:24:fb:42:2f:73:
ef:80:db:8d:49:c7:46:c3:a5:c0:77:13:2e:f9:3c:
96:c0:b3:45:3c:c8:19:26:20:1f:68:61:fe:5f:c0:
0d:2a:09:0e:82:0c:69:89:d7:f5:10:a2:22:92:1b:
d7:09:05:99:37:94:8e:28:ac:02:30:4e:03:71:d6:
71:54:14:7a:1f:dc:68:4c:b0:1a:12:12:0c:cd:60:
c0:fe:33:ab:40:83:db:06:c8:b8:42:29:4b:db:0b:
96:bb:90:81:2d:3c:fe:a5:f2:29:ca:c2:74:3f:d1:
d6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:24:85:C7:B4:A0:8C:49:60:A0:8F:A1:EC:F3:F6:1B:91:81:42:CF
X509v3 Authority Key Identifier:
keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/_iSFx7SgjElgoI-h7PP2G5GBQs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.203.0/24
92.63.197.0/24
185.156.73.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:b4:89:b6:8f:bd:70:1d:3e:cf:99:2e:93:d0:c7:c2:b9:3b:
6c:66:3c:4f:e3:dc:00:10:bb:9a:62:ea:79:1e:ba:20:f4:d9:
95:6e:a2:07:c6:58:36:3f:fc:19:c2:54:25:51:66:a5:d8:68:
23:31:c2:7e:73:52:0b:b8:7f:34:d4:88:08:e5:3a:14:53:14:
58:7b:76:80:5f:c1:70:fa:a0:70:a3:43:ce:01:e6:25:59:12:
b0:0b:48:1e:12:45:75:2b:1a:ef:c8:f3:07:fd:38:15:47:c8:
ff:77:11:82:ed:6b:0e:01:4f:cb:d2:a5:00:f0:5e:66:6d:0b:
34:c5:4a:b4:09:d3:51:23:e8:4b:a8:5f:fd:d0:e2:48:ef:03:
be:c6:9a:68:4b:7b:36:83:bc:8c:b3:96:35:c8:6c:f9:4c:13:
00:e6:62:d6:b3:ce:a3:9b:3c:ee:ac:6d:0b:d3:d9:b2:cb:6b:
04:55:38:d5:02:73:b4:d3:84:0c:08:fa:94:07:b1:db:8e:f6:
5e:95:42:84:7b:81:a2:f0:fd:d8:c3:46:35:6b:6e:18:8c:14:
bb:23:3d:fb:86:d0:6a:d0:f7:53:62:7a:d4:6c:c6:62:f1:0a:
79:92:10:ea:18:dc:ec:01:d6:d1:bc:ed:32:7f:e1:c4:61:82:
70:33:10:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:09 2023 by rpki-client on console-fra.rpki-client.org