Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/jGz1OVXZSz00OBSZrtLl73N0tm4.roa
File: jGz1OVXZSz00OBSZrtLl73N0tm4.roa (raw, json)
Hash identifier: aOinqyBXt6Wi4jHEGwIk5PYcgGcPWJ5Gvu+ZJVFJNTA=
Subject key identifier: 8C:6C:F5:39:55:D9:4B:3D:34:38:14:99:AE:D2:E5:EF:73:74:B6:6E
Certificate issuer: /CN=9eec34baf922028c3432f8f8f22bda6af86b77b2
Certificate serial: 077AC14C
Authority key identifier: 9E:EC:34:BA:F9:22:02:8C:34:32:F8:F8:F2:2B:DA:6A:F8:6B:77:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nuw0uvkiAow0Mvj48ivaavhrd7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/jGz1OVXZSz00OBSZrtLl73N0tm4.roa
Signing time: Sat 01 Jan 2022 04:01:34 +0000
ROA not before: Sat 01 Jan 2022 04:01:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3356
IP address blocks: 45.150.212.0/23 maxlen: 23
45.150.214.0/23 maxlen: 23
2a0f:100::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125485388 (0x77ac14c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eec34baf922028c3432f8f8f22bda6af86b77b2
Validity
Not Before: Jan 1 04:01:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8c6cf53955d94b3d34381499aed2e5ef7374b66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9c:b7:90:02:e5:37:2f:cd:ad:96:99:a8:9d:
11:30:a7:4b:ed:2e:c5:49:84:3c:cd:31:4c:79:86:
3b:52:e8:fe:06:ba:d0:71:a7:23:d7:42:00:f9:ca:
20:74:74:39:0a:2a:48:34:4a:ba:cc:74:5b:36:7e:
b0:cf:3a:4e:35:5e:25:4f:36:40:43:6a:d7:0f:07:
09:fe:92:44:98:db:81:56:f8:02:48:e6:40:bc:63:
45:1c:30:58:bf:44:6a:4d:6b:e0:6d:9d:81:df:a0:
44:5f:48:d5:a7:74:1b:de:80:c2:13:aa:95:db:37:
8e:cd:ff:cd:63:f6:ef:e9:cb:45:7d:af:fa:ab:b7:
11:99:ee:25:28:72:ed:bb:d8:ee:5e:e7:84:0b:32:
58:cd:57:31:e6:2b:e8:1b:05:b0:a4:3f:06:0f:e7:
79:ff:b5:d7:ef:1f:cd:e6:a7:57:6c:e8:18:71:05:
13:50:29:50:fe:74:f8:49:63:24:0a:eb:e5:e7:6c:
bc:b5:d4:a7:a4:85:31:04:68:eb:b4:22:12:1b:30:
91:12:81:f6:25:30:4a:a0:2c:a9:c1:a4:8a:89:ac:
8f:e0:87:ef:85:80:09:4d:83:c7:1f:aa:24:3c:d1:
75:b3:64:27:94:83:84:dd:29:26:e5:78:47:5f:e8:
ab:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:6C:F5:39:55:D9:4B:3D:34:38:14:99:AE:D2:E5:EF:73:74:B6:6E
X509v3 Authority Key Identifier:
keyid:9E:EC:34:BA:F9:22:02:8C:34:32:F8:F8:F2:2B:DA:6A:F8:6B:77:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuw0uvkiAow0Mvj48ivaavhrd7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/jGz1OVXZSz00OBSZrtLl73N0tm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6ea8f7-cb4a-4e4e-ad79-ac87171f4e5c/1/nuw0uvkiAow0Mvj48ivaavhrd7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.212.0/22
IPv6:
2a0f:100::/29
Signature Algorithm: sha256WithRSAEncryption
4e:69:03:93:d3:e0:4e:87:14:da:b8:d7:e8:07:28:dc:39:43:
f0:a9:43:f0:ad:04:d2:dc:7c:4d:f5:23:f3:ac:85:a0:4f:78:
19:b3:20:e3:d8:86:de:b4:64:4e:5c:7c:91:7a:e2:ab:5d:b3:
7a:c9:6d:e4:a7:b8:e1:79:18:3c:3e:62:e8:7b:51:06:09:96:
96:88:da:de:9e:b7:36:69:a8:15:3f:41:45:95:cb:ed:8f:3c:
63:83:0b:8f:9d:f3:3f:67:5a:b5:5c:f0:48:63:32:89:0e:4f:
81:63:48:7b:d4:75:03:f0:27:c7:19:1b:a7:5b:68:cd:af:4e:
cd:72:c8:da:bc:3d:04:f6:37:3c:3c:b8:62:a8:ed:d0:54:de:
31:15:a3:67:ad:b0:78:f6:0e:16:3e:3a:a7:a0:6a:6a:b6:d0:
b7:e8:dc:f4:61:31:cd:5e:18:7d:c6:de:09:40:06:5d:68:17:
f7:ed:dc:a8:96:46:46:8d:c8:78:7f:6a:8b:41:25:16:69:04:
16:b1:e6:c3:75:94:f3:38:79:6a:6e:97:9c:99:aa:f8:51:98:
4b:2f:b9:68:0e:08:f5:fb:cd:57:68:c4:af:8f:f7:46:37:31:
7c:ba:91:bf:2e:d0:9c:b5:42:ce:52:16:ea:c8:8d:18:68:e1:
24:13:cd:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:33 2023 by rpki-client on console-fra.rpki-client.org