Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/SajTKww-Cw0mdyi1OygHTi05uH4.roa
File: SajTKww-Cw0mdyi1OygHTi05uH4.roa (raw, json)
Hash identifier: VsTKbzLvhoQtfbFIR1ekdNhAQAps4XuwGRndj8rZEUc=
Subject key identifier: 49:A8:D3:2B:0C:3E:0B:0D:26:77:28:B5:3B:28:07:4E:2D:39:B8:7E
Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Certificate serial: 06B4BEA5
Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/SajTKww-Cw0mdyi1OygHTi05uH4.roa
Signing time: Sat 01 Jan 2022 01:56:41 +0000
ROA not before: Sat 01 Jan 2022 01:56:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49250
IP address blocks: 45.149.248.0/23 maxlen: 23
45.149.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112508581 (0x6b4bea5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1
Validity
Not Before: Jan 1 01:56:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=49a8d32b0c3e0b0d267728b53b28074e2d39b87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:57:ea:cc:8c:c4:63:47:71:ca:98:d0:bd:4e:
ca:22:7f:90:c8:0e:c8:1e:12:44:f5:57:a3:e8:ea:
28:77:5e:5b:06:a0:98:b8:e5:87:fa:4d:a7:3f:4d:
6f:29:da:d9:97:02:27:f6:3e:74:7d:5d:1c:8f:dc:
12:a1:72:fe:45:8a:c5:4f:2c:87:47:d0:af:27:5a:
6f:ba:0c:a0:3e:26:af:e0:a5:8b:55:56:fb:78:67:
c5:eb:8b:f6:f8:9f:7c:e1:f1:15:ff:2d:89:68:ba:
e7:96:95:10:fe:1a:6c:2b:0e:7b:29:e5:3b:9a:fb:
a6:e4:e5:f1:d8:23:86:ec:91:42:c8:1f:bd:dc:29:
03:b4:fa:0d:ec:15:3a:0e:d8:c4:b9:ec:74:59:3a:
49:09:79:6f:43:39:c2:c0:51:74:7e:02:e4:37:58:
25:28:b5:64:76:90:2f:22:1b:cb:0a:41:cf:ef:db:
0a:ee:bd:db:7e:25:d7:fe:0d:48:36:6c:95:8d:aa:
95:82:df:9a:b7:f0:9a:de:c3:eb:73:a7:59:77:9a:
48:32:48:c2:d5:f7:52:4d:c0:51:e1:60:a9:be:4e:
11:56:c5:2b:4b:1e:1b:e9:ef:64:e9:23:5a:0e:3b:
4d:76:31:02:eb:25:2f:1d:85:77:9e:5a:9a:02:82:
46:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A8:D3:2B:0C:3E:0B:0D:26:77:28:B5:3B:28:07:4E:2D:39:B8:7E
X509v3 Authority Key Identifier:
keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/SajTKww-Cw0mdyi1OygHTi05uH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.248.0-45.149.250.255
Signature Algorithm: sha256WithRSAEncryption
a2:be:a6:61:78:3a:ea:5e:f7:65:95:c3:e1:1f:d5:2b:05:3a:
be:5e:04:21:30:36:ea:54:d1:b3:09:46:59:5f:5b:65:26:85:
d7:d1:23:1b:23:8c:2d:89:0a:27:bf:2e:d7:1a:68:1a:30:53:
f5:86:dc:14:4b:c9:93:ac:1f:03:c8:a3:71:a9:33:bf:96:9a:
3f:fd:8e:78:b7:af:ce:df:ea:3b:b0:8e:ba:14:83:ea:4e:95:
ea:d0:06:2a:87:e6:94:80:ac:37:ef:1b:44:d5:ec:0b:5a:ec:
c1:bb:02:d7:85:c6:1e:20:0f:0a:c2:0e:a8:55:b5:62:77:e1:
64:8c:55:fe:d1:8c:2a:74:a4:a0:6c:3f:02:85:be:b8:cd:e5:
7f:6d:60:ab:df:d6:f9:a5:61:a1:de:87:61:ab:88:a5:83:d8:
be:99:5a:ab:c2:e1:61:ea:f8:37:d3:4c:5a:6c:b7:fc:e3:cf:
c3:cf:bf:c0:56:5d:81:57:93:03:b6:96:82:94:27:03:a4:9a:
02:ae:93:76:fc:82:99:05:4e:ed:75:76:64:af:5e:e9:6b:c9:
69:f5:4a:bb:a0:7d:f1:82:8e:e3:aa:1c:28:5f:c4:db:87:83:
14:a9:3b:95:7d:19:6f:b6:f5:d0:e5:68:e0:20:94:e2:2b:a5:
4d:56:19:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:34 2023 by rpki-client on console-fra.rpki-client.org