Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/rdHUabqVn5WC-dkbyCBYbY3uUio.roa
File: rdHUabqVn5WC-dkbyCBYbY3uUio.roa (raw, json)
Hash identifier: FvjdzXQfvJbO1iepC+D830R8JT3o9QzyKYb3pdohyA0=
Subject key identifier: AD:D1:D4:69:BA:95:9F:95:82:F9:D9:1B:C8:20:58:6D:8D:EE:52:2A
Certificate issuer: /CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Certificate serial: 0746089A
Authority key identifier: 07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/rdHUabqVn5WC-dkbyCBYbY3uUio.roa
Signing time: Sat 01 Jan 2022 07:55:30 +0000
ROA not before: Sat 01 Jan 2022 07:55:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15510
IP address blocks: 45.158.164.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122030234 (0x746089a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Validity
Not Before: Jan 1 07:55:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=add1d469ba959f9582f9d91bc820586d8dee522a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:48:30:dd:fa:bd:4d:78:7c:41:48:d7:06:
d5:b8:4c:22:ea:39:be:0c:05:1f:0a:9b:65:f3:b4:
12:14:4a:13:ef:f6:c4:71:a3:f6:1b:e9:a2:b8:1a:
5e:0c:08:e3:cc:ff:79:04:e9:2f:6e:b3:bc:c9:e8:
4d:52:da:a4:2a:79:d0:f5:47:6b:11:b6:dd:b3:76:
4f:da:2a:91:9d:b2:06:a6:fa:87:7f:f7:e4:fe:5c:
f0:11:d1:4b:be:01:95:da:e8:5e:ba:b5:b0:51:fa:
1a:02:53:b6:a5:2b:b2:59:df:8b:94:35:32:ac:eb:
b4:aa:ea:7d:04:c7:d6:71:54:eb:80:1a:30:9a:e3:
b5:d1:cd:b9:26:72:00:16:d8:af:df:42:7b:88:ff:
e2:a7:40:ec:6d:8b:66:90:19:c3:ef:cb:4b:6c:d6:
07:3f:56:44:e6:22:2e:ce:53:21:07:7c:0e:68:f9:
0c:0e:7c:d7:3d:99:76:44:33:44:5b:ee:88:14:ba:
aa:99:43:15:b0:ec:da:bd:61:34:ed:8a:35:68:39:
98:88:b3:3b:e8:fe:36:86:a3:98:02:27:25:d2:25:
ff:fd:40:a1:9d:f2:9b:6d:a0:a8:31:79:18:82:2f:
63:bd:9d:db:a4:93:e4:8e:b7:2a:21:d9:06:b9:2e:
c9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D1:D4:69:BA:95:9F:95:82:F9:D9:1B:C8:20:58:6D:8D:EE:52:2A
X509v3 Authority Key Identifier:
keyid:07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/rdHUabqVn5WC-dkbyCBYbY3uUio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.164.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:c2:09:3b:bd:85:2b:5c:86:19:fa:e7:30:10:56:50:ce:2c:
48:83:5c:b4:28:8e:4c:c7:22:5e:e2:ff:8f:5a:d1:8a:ed:1b:
85:fc:e6:83:85:32:da:17:8e:cb:93:64:47:de:ca:6e:dd:45:
25:17:d3:fc:e6:cc:b4:45:d1:54:18:ad:ea:73:4f:03:8c:c6:
26:72:06:17:be:66:b1:7c:46:47:6c:9c:1a:ba:c0:13:da:06:
75:ba:e6:fe:4a:ed:35:7c:1c:16:4a:26:ee:47:db:13:6d:9c:
08:ca:ae:8f:1a:6d:20:3b:f8:54:4f:22:cc:64:4d:91:ab:19:
3e:9e:50:db:fa:41:5c:6d:83:57:bd:4e:38:8f:cc:1e:4e:3a:
cc:0e:3d:31:5e:da:d6:f6:01:34:86:b6:48:3f:f9:67:13:14:
34:be:6a:a6:74:67:0a:5c:88:18:c5:62:8b:2a:33:d1:f2:39:
68:78:93:d7:28:09:d8:a7:81:4d:63:bf:67:93:63:64:87:09:
6e:92:e3:e8:2b:c6:e9:a5:57:fc:52:98:94:57:d5:83:45:3c:
83:1b:4e:2b:0f:09:1a:59:08:d7:ab:29:fd:a3:bd:58:cb:5b:
63:72:35:a4:9b:c2:46:7e:af:a1:07:c7:88:a2:d1:66:07:ab:
05:20:2e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:29 2023 by rpki-client on console-fra.rpki-client.org