Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8pcx61M7XNiNwWpnNOjMcVRaqN4.roa
File: 8pcx61M7XNiNwWpnNOjMcVRaqN4.roa (raw, json)
Hash identifier: LMZqEAy3koeNCzcCZ6mDRhCfy7bLzOgMAUKmcPhIZlQ=
Subject key identifier: F2:97:31:EB:53:3B:5C:D8:8D:C1:6A:67:34:E8:CC:71:54:5A:A8:DE
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 01834B3152645C399B97D0D585FB2BD4425D
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8pcx61M7XNiNwWpnNOjMcVRaqN4.roa
Signing time: Sat 17 Sep 2022 11:24:26 +0000
ROA not before: Sat 17 Sep 2022 11:24:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 46.175.130.0/24 maxlen: 24
45.129.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:4b:31:52:64:5c:39:9b:97:d0:d5:85:fb:2b:d4:42:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Sep 17 11:24:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f29731eb533b5cd88dc16a6734e8cc71545aa8de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:39:78:cd:87:c5:89:41:87:1c:3e:6c:7a:39:
3a:bb:ff:b3:b6:76:61:4d:75:a3:7e:b2:00:71:66:
96:27:83:04:8d:e0:c6:db:bc:b9:f9:46:80:95:c0:
7f:ad:ab:50:80:89:96:bf:69:3b:45:da:7b:43:46:
f9:b3:ab:29:df:c9:a5:7f:03:a1:4e:4d:84:23:02:
e0:59:ba:63:d1:ae:47:1f:00:8e:26:2f:8f:ba:a4:
d7:4a:8c:d8:7c:4a:16:c6:0f:95:ad:24:6a:6b:df:
bc:e2:7b:1c:a1:8d:30:69:7b:37:bf:5b:a1:b9:06:
c8:83:97:01:e6:83:3f:dd:07:26:a5:6d:04:7f:b9:
cd:4e:a6:9d:6b:d3:11:4a:a8:f0:21:f5:41:cc:f1:
27:4f:6e:9e:7c:91:c6:19:20:24:cb:b6:f5:3c:9c:
4e:81:18:3e:03:93:dd:7c:a6:9a:5d:7a:0d:dd:5d:
fd:c6:5a:98:c3:47:13:2a:e8:12:80:3c:7a:65:f2:
3c:a7:9f:12:6f:d2:53:a4:99:70:38:15:6d:b3:ad:
5a:32:cb:07:7c:3a:cb:d4:a7:8d:cc:97:ff:1e:fe:
a1:03:ab:a0:fd:15:98:4c:9f:eb:bf:2e:95:f0:a7:
90:a5:1f:1e:8c:06:18:12:71:88:2c:8d:50:83:ba:
8c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:97:31:EB:53:3B:5C:D8:8D:C1:6A:67:34:E8:CC:71:54:5A:A8:DE
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8pcx61M7XNiNwWpnNOjMcVRaqN4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.92.0/24
46.175.130.0/24
Signature Algorithm: sha256WithRSAEncryption
48:fc:79:1e:d7:eb:10:19:49:4e:ae:c6:c6:07:e2:d6:c4:8a:
d8:02:1e:ed:bc:de:f1:53:5a:93:9a:6c:b9:86:96:93:c1:b4:
85:cb:d3:2b:82:7a:ad:8a:b4:4a:6e:0a:88:43:77:94:4b:95:
d9:47:0d:b6:c6:f4:4a:5b:81:a5:30:b6:81:0a:92:73:19:7c:
c6:5c:ae:87:fe:20:e2:b3:ca:bc:7d:f7:03:f7:c9:15:2e:48:
84:dc:e4:e4:02:a2:b1:25:e7:24:00:15:9b:38:ec:67:a2:96:
83:85:e4:06:ec:d2:e6:4a:f8:77:3d:9e:2b:f7:75:83:d5:38:
8d:fd:b1:9d:68:f6:e8:ca:cb:90:4d:ea:44:c5:bd:d7:bc:7f:
8e:66:0e:ee:38:36:6d:d9:55:dd:ac:66:12:f6:14:55:71:ba:
6e:29:60:b2:e0:7a:79:60:a5:86:31:db:f5:a9:91:ab:37:7b:
90:68:9a:2c:3d:b6:bd:8e:8f:97:39:44:7d:07:a0:41:d8:08:
fc:9f:f5:cd:c2:78:c6:d5:ba:ae:ea:d7:f0:2a:0f:c7:af:a9:
84:a8:42:3f:56:93:6c:25:21:f4:6c:0c:41:b3:3e:1d:37:8a:
1e:dd:46:07:a8:1b:8a:70:88:75:97:4d:98:93:79:e3:02:da:
20:ea:35:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:32 2023 by rpki-client on console-ams.rpki-client.org