Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/idfG9LYjOCPf1eHHU1_yP5-xoXM.roa
File: idfG9LYjOCPf1eHHU1_yP5-xoXM.roa (raw, json)
Hash identifier: jxrlgadUrbyTyIT6F5/l//6y9HiPalO8pO4SSzyCPd4=
Subject key identifier: 89:D7:C6:F4:B6:23:38:23:DF:D5:E1:C7:53:5F:F2:3F:9F:B1:A1:73
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0350B25D
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/idfG9LYjOCPf1eHHU1_yP5-xoXM.roa
Signing time: Sat 01 Jan 2022 16:04:44 +0000
ROA not before: Sat 01 Jan 2022 16:04:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213220
IP address blocks: 45.8.209.0/24 maxlen: 24
45.9.74.0/24 maxlen: 24
45.9.74.0/23 maxlen: 23
213.108.196.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55620189 (0x350b25d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 16:04:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89d7c6f4b6233823dfd5e1c7535ff23f9fb1a173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:50:21:d4:ee:fb:c9:ad:36:af:7c:d8:b0:30:
a4:cd:19:e9:17:4c:46:a5:07:1b:a6:fe:cf:3b:07:
1f:16:0c:b8:1f:bf:da:f9:0e:d0:11:32:1c:82:6f:
3c:c3:cc:ed:b6:3e:4c:73:e3:0c:87:09:d8:c3:a6:
40:b7:f0:32:11:1d:f1:45:b9:df:be:48:3a:f2:cc:
e2:a8:b4:a2:6b:20:c3:65:fb:16:8d:8b:0e:6b:ee:
2a:7e:fa:87:05:8b:80:6d:92:9a:29:bd:5b:56:ca:
12:fb:b0:a7:7f:de:45:8d:fe:8c:a8:25:75:4a:a5:
5f:bc:6c:74:71:b7:1a:9c:94:3a:2f:f3:bf:98:60:
c9:fc:f9:cb:2b:57:7b:1e:48:9c:4e:01:f4:89:3e:
97:1b:3f:81:d2:16:4d:8d:db:bd:02:2f:db:84:8f:
1b:4d:04:44:67:8d:d6:71:91:57:dd:b0:e2:e0:89:
06:0f:24:f0:cc:65:06:8c:8d:64:10:42:28:dd:9e:
32:b5:56:93:01:22:a2:09:82:4b:fe:b3:15:9b:84:
ed:c9:ef:15:65:35:33:48:a2:3a:c5:10:f6:d8:7a:
3c:6a:40:3d:32:c3:07:2f:42:dc:88:4f:d3:68:9e:
09:9d:ba:5b:fc:b8:51:92:37:1e:c4:17:0d:f9:83:
c4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D7:C6:F4:B6:23:38:23:DF:D5:E1:C7:53:5F:F2:3F:9F:B1:A1:73
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/idfG9LYjOCPf1eHHU1_yP5-xoXM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.209.0/24
45.9.74.0/23
213.108.196.0/24
Signature Algorithm: sha256WithRSAEncryption
53:e3:c5:e9:ad:a9:df:88:e2:8a:58:90:3d:05:f4:e2:3a:e7:
09:4a:78:c1:6b:de:10:98:01:a9:22:81:3d:96:93:db:41:2a:
d1:93:3b:92:d5:d8:58:4b:d5:55:12:05:57:70:fb:0d:41:5a:
3c:61:b0:e6:3d:ba:f4:e8:c8:8c:41:b0:85:e9:a4:53:63:c3:
2c:e2:03:00:11:2e:48:db:75:da:33:6c:0f:f1:42:68:c5:7a:
e0:41:89:17:de:82:92:c0:20:d2:37:ff:61:27:7b:96:cc:c0:
10:82:14:77:5b:15:8f:14:2e:a5:ef:a1:33:93:fa:62:44:16:
a6:4c:cc:be:c7:e2:ab:98:e9:c1:27:fe:3e:f9:53:4f:17:9c:
76:e3:0f:43:b1:d5:79:3d:65:33:c7:a2:45:a1:ef:ad:ea:e7:
f9:ae:94:bf:1c:49:c5:8e:e7:47:84:db:8e:b2:82:d2:19:73:
dc:86:6f:04:69:85:24:37:71:c7:03:50:06:8d:3d:f8:76:bb:
04:63:6f:f4:3c:9b:3d:af:68:31:e2:a9:8a:e5:c3:ac:66:91:
6c:9a:3a:bb:c8:b6:3a:17:bd:97:aa:ea:80:8b:f1:d1:e6:91:
bf:88:60:b3:54:44:10:61:cd:ba:a3:b3:b3:53:ee:6b:63:80:
70:d2:2e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:37 2023 by rpki-client on console-fra.rpki-client.org