Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/BOB8e7qCFUAanyLImIzopI-5Tow.roa
File: BOB8e7qCFUAanyLImIzopI-5Tow.roa (raw, json)
Hash identifier: lUJPC0LjGbOWX7iZSnuoN6l1MoqBXrjYZzXPDDXg8cY=
Subject key identifier: 04:E0:7C:7B:BA:82:15:40:1A:9F:22:C8:98:8C:E8:A4:8F:B9:4E:8C
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 018462F12A344B73EC1F81BC74067C9A1BDE
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/BOB8e7qCFUAanyLImIzopI-5Tow.roa
Signing time: Thu 10 Nov 2022 19:08:02 +0000
ROA not before: Thu 10 Nov 2022 19:08:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 45.129.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:62:f1:2a:34:4b:73:ec:1f:81:bc:74:06:7c:9a:1b:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Nov 10 19:08:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=04e07c7bba8215401a9f22c8988ce8a48fb94e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a3:3a:0c:d0:8a:f9:b9:c5:6a:5c:91:7c:cf:
41:67:a0:14:ce:e2:1b:dc:4a:70:67:84:15:b0:3d:
47:87:26:6b:58:53:9b:f5:6e:cd:a0:3f:9b:df:52:
8d:39:11:5a:0d:1e:48:45:ee:c7:64:58:c8:81:5d:
28:b9:c1:00:2b:3a:3c:ab:7e:82:bc:03:57:f8:a9:
2f:cf:6b:a0:29:6a:01:66:cd:28:5f:2b:a1:15:d1:
7c:70:07:da:fc:81:23:a6:0a:b7:cd:ce:60:ee:fe:
00:d8:88:f2:c6:e4:7f:c6:31:96:13:2f:f2:18:51:
74:17:92:b7:35:45:2f:c4:31:74:82:cc:3a:2e:7c:
d1:ac:26:0b:7a:26:7e:41:60:a6:99:11:86:f4:87:
21:86:7b:43:5d:af:20:ae:b8:28:65:6e:a2:10:41:
ff:30:d2:5d:70:c1:3e:02:74:cd:20:2a:05:be:75:
40:f3:a2:d5:bb:70:06:d7:5b:92:ef:e9:02:98:2d:
c1:93:93:92:de:24:c4:c5:8f:bb:fa:64:48:9f:d4:
f4:e9:a9:9d:e5:48:19:aa:a5:d4:61:a3:5c:31:99:
8d:9e:84:7f:45:38:f7:cb:d9:f6:17:23:91:80:7b:
42:37:6a:c6:3e:01:3f:fe:07:91:d1:d4:4b:39:89:
ca:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:E0:7C:7B:BA:82:15:40:1A:9F:22:C8:98:8C:E8:A4:8F:B9:4E:8C
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/BOB8e7qCFUAanyLImIzopI-5Tow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.92.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:de:e4:a2:fc:fe:ad:65:24:eb:f5:58:98:54:b0:b5:83:9a:
45:19:0c:05:ef:42:0d:d2:d5:9e:0f:b0:44:c3:bf:b7:e3:2d:
10:75:9c:66:6a:79:de:98:91:90:e8:7a:b3:e1:5a:7b:9b:81:
d0:bb:ff:ab:68:72:d7:82:43:2b:45:08:b8:f1:3a:99:ce:5a:
01:fb:c7:17:ca:0e:a5:e6:0d:f3:e3:ec:60:b1:ff:0c:5a:ad:
9b:8d:a5:74:4f:17:fe:a8:8e:45:d9:a3:f3:e9:b1:eb:5e:6b:
aa:29:13:28:1b:94:d9:70:ff:45:38:c4:5d:2a:5d:97:7c:6e:
86:e6:33:b5:52:4b:25:80:61:bc:7d:45:3e:3a:1a:1c:59:3d:
75:a1:d6:9b:44:86:20:e7:64:1f:45:40:4b:84:f6:eb:ff:8c:
e1:c7:22:98:ab:9f:d7:98:8c:52:94:47:f3:7d:ff:7b:8b:4b:
1d:1d:29:49:38:41:48:4c:8d:43:19:36:99:8b:7a:43:23:a6:
3e:cd:e0:a2:11:64:dc:4a:ae:a6:66:ad:a4:cc:21:45:93:2c:
a1:d8:af:68:6b:7e:96:1e:a6:7b:0d:16:8c:1e:57:81:9d:25:
1b:3a:99:55:2e:66:22:f3:80:e2:06:b5:d5:64:0d:d7:6e:1c:
77:50:97:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:38 2023 by rpki-client on console-fra.rpki-client.org