Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/Q7_unktdy90tvxVlYoA00ANuPUs.roa
File: Q7_unktdy90tvxVlYoA00ANuPUs.roa (raw, json)
Hash identifier: RNXav9GczZnScTkbuqeEKYYF3FwBNPKAY86hxchnKIk=
Subject key identifier: 43:BF:EE:9E:4B:5D:CB:DD:2D:BF:15:65:62:80:34:D0:03:6E:3D:4B
Certificate issuer: /CN=ed4cd386ab33787fcd4002622b83876406fff190
Certificate serial: 07EE3ED5
Authority key identifier: ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/Q7_unktdy90tvxVlYoA00ANuPUs.roa
Signing time: Sat 01 Jan 2022 14:08:46 +0000
ROA not before: Sat 01 Jan 2022 14:08:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35048
IP address blocks: 45.89.16.0/22 maxlen: 22
2a0a:5687::/32 maxlen: 32
2a0a:5680::/32 maxlen: 32
2a0a:5686::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133054165 (0x7ee3ed5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed4cd386ab33787fcd4002622b83876406fff190
Validity
Not Before: Jan 1 14:08:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43bfee9e4b5dcbdd2dbf1565628034d0036e3d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:aa:a3:90:94:bc:26:59:57:0a:f4:04:bd:2c:
2a:7a:22:9b:33:e9:11:28:79:6f:85:e7:8e:de:0f:
31:18:94:88:2e:7e:8f:7a:a4:a9:a1:a6:8c:60:e8:
6f:cd:b0:a7:da:0e:92:a9:87:20:d8:a3:af:d3:8a:
bc:90:0f:18:af:2c:8f:e8:78:41:38:b6:44:a6:d2:
b8:fd:d4:04:b4:2c:d0:52:74:aa:1d:2e:a9:23:b9:
2c:cd:b4:de:e1:de:ae:d2:1d:02:e3:07:ce:96:e1:
fb:df:6e:f7:3c:d3:15:ee:d3:65:15:41:ff:88:4f:
2a:14:29:83:5e:a7:e5:34:f7:64:66:82:b4:74:48:
25:fb:64:62:96:c9:9a:62:cf:43:39:e5:85:6f:25:
2f:04:93:d9:12:dd:e4:91:45:6d:6a:fa:a9:62:58:
00:af:fa:78:7a:2a:8a:eb:1a:5c:fd:b3:87:06:8d:
82:ce:58:d0:17:e6:31:34:33:55:a9:a8:be:dc:87:
5e:11:b2:7b:60:7d:23:cb:1a:8c:e3:55:6f:78:2d:
94:28:f1:56:46:bb:36:83:be:b9:b3:91:6f:20:dc:
e7:7f:37:d5:c7:d6:70:d8:78:cc:aa:1a:e7:94:6e:
98:4f:04:51:9b:89:a2:63:d9:a7:4b:1c:a1:dc:a5:
dc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BF:EE:9E:4B:5D:CB:DD:2D:BF:15:65:62:80:34:D0:03:6E:3D:4B
X509v3 Authority Key Identifier:
keyid:ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/Q7_unktdy90tvxVlYoA00ANuPUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.16.0/22
IPv6:
2a0a:5680::/32
2a0a:5686::/31
Signature Algorithm: sha256WithRSAEncryption
83:b7:4d:f3:10:0d:62:d4:69:09:3e:54:93:f3:f7:af:7d:18:
ea:ab:4a:72:30:fc:ba:d7:b7:f3:6b:e9:10:95:36:a5:36:9c:
e6:72:3f:b8:cc:f0:67:66:69:c4:bf:e4:d2:57:0c:31:f3:ad:
c4:18:b7:5d:72:5e:6a:5e:a2:32:ec:5b:de:ff:6f:31:eb:00:
70:ab:c1:1e:53:7f:b1:5a:90:db:c0:86:ba:58:89:45:98:2a:
12:6c:e3:2e:a3:04:b2:44:89:d4:de:25:90:e8:df:fc:84:6c:
ac:e6:85:93:c8:e6:dc:eb:89:cb:32:81:08:0e:2b:e0:06:85:
89:fa:ed:f9:ca:f0:aa:6f:75:0e:ea:ce:b1:93:f8:2a:7e:4f:
1c:42:99:36:d0:09:78:f5:bb:ed:7a:ba:89:0e:be:2f:13:b2:
23:2e:e2:18:4b:a1:a3:42:5e:98:9f:a6:0b:2d:f9:4e:4f:e6:
6e:ff:57:37:32:45:7b:6d:1d:12:b3:34:e0:51:2d:46:c9:c1:
31:48:14:6b:58:38:b6:cc:06:5f:3b:17:f7:4e:6b:7a:39:64:
8d:d9:12:e0:11:0e:d5:bc:dc:28:72:b2:18:31:63:04:cd:9b:
ea:fc:62:aa:2f:de:b9:8d:99:61:90:db:8b:fe:76:bf:c8:26:
50:7b:a9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:35 2024 by rpki-client on console-fra.rpki-client.org