Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/pJpzcOWMynQ1LnQLgGuL2GRlujQ.roa
File: pJpzcOWMynQ1LnQLgGuL2GRlujQ.roa (raw, json)
Hash identifier: yHP9Ep7qZe7FDA9KgmW9lkNrQ+5zEPBz+9OSg1V+2Ao=
Subject key identifier: A4:9A:73:70:E5:8C:CA:74:35:2E:74:0B:80:6B:8B:D8:64:65:BA:34
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 0184994D61951CA4970F27832C8B29F2A3F3
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/pJpzcOWMynQ1LnQLgGuL2GRlujQ.roa
Signing time: Mon 21 Nov 2022 08:28:16 +0000
ROA not before: Mon 21 Nov 2022 08:28:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15731
IP address blocks: 45.129.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:99:4d:61:95:1c:a4:97:0f:27:83:2c:8b:29:f2:a3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Nov 21 08:28:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a49a7370e58cca74352e740b806b8bd86465ba34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:88:98:da:47:ad:6f:35:bf:b5:af:6f:dd:74:
22:d2:d2:25:46:62:eb:46:da:8a:0f:18:36:5f:ae:
c8:ca:a5:38:2a:27:de:ab:00:c4:0d:72:f3:c5:4e:
d2:41:e9:30:a4:9d:c7:ff:d3:8d:4b:7d:2c:b3:b7:
cf:43:81:76:4e:72:27:e8:31:dc:e7:3b:e7:b2:cc:
ee:67:99:39:68:87:26:1c:bd:d1:4a:de:58:02:fe:
02:73:36:4c:68:de:a7:30:d7:fb:03:eb:34:9d:bc:
a8:41:0c:5f:e4:db:35:7c:a2:0e:d5:a8:5a:5c:47:
24:31:74:11:e9:5d:3d:84:88:da:48:01:f0:a2:ec:
d5:0d:5b:09:01:c5:0d:af:90:2b:b0:1a:60:6a:14:
3e:49:21:a6:25:35:cc:35:d6:a6:63:b2:fb:5a:54:
04:11:40:a0:e8:fa:e2:c3:78:1a:05:7b:f8:be:c0:
33:bb:83:7c:42:5d:af:a1:d7:df:36:7a:d3:76:c3:
82:16:70:e5:64:b8:34:c0:aa:0d:fe:65:f9:d0:17:
0c:37:a6:33:d5:91:be:d4:47:d3:33:97:c3:66:27:
8e:63:04:8b:00:b0:c9:65:b0:84:fa:b1:00:7b:66:
92:27:bc:ad:00:ec:a8:4d:41:88:08:a4:06:26:20:
0f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:9A:73:70:E5:8C:CA:74:35:2E:74:0B:80:6B:8B:D8:64:65:BA:34
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/pJpzcOWMynQ1LnQLgGuL2GRlujQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.92.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:f3:06:22:c6:ec:a3:f6:14:83:af:e8:11:cf:a6:e7:1e:30:
6d:e5:6e:0b:f4:c6:fa:39:4e:9f:2c:00:8b:6b:05:73:1f:ad:
1c:55:e0:8b:f6:ba:fa:a5:64:f1:a5:07:cc:a1:c8:41:a0:af:
b0:e9:81:42:51:7a:73:81:a5:09:a6:8a:33:ca:64:2f:4c:10:
a5:49:6c:60:5c:dc:b6:b5:fb:e8:90:89:79:95:57:33:00:d2:
3e:eb:d7:a0:b7:e9:4a:7b:00:bb:1d:35:01:72:20:a5:73:06:
2f:cc:50:c8:e8:50:8d:f2:95:58:4b:55:93:e2:95:5d:13:d9:
92:bc:88:11:dc:77:41:22:e3:e3:5f:c5:ef:30:a4:54:6d:74:
13:be:cf:12:b3:35:8a:b5:75:08:98:50:23:3c:9e:df:3e:7c:
30:e7:e1:61:07:5b:ec:4c:1e:14:98:37:9c:07:ea:9d:24:18:
b9:18:80:4a:93:d0:71:78:35:0b:aa:07:96:32:19:23:87:f1:
97:0d:69:99:bf:28:f1:7e:66:5b:b5:10:ab:98:d2:74:f4:0e:
b6:dd:f9:87:7b:84:21:78:85:66:31:0b:93:91:41:6f:da:71:
dc:6e:ef:f5:5c:e3:35:85:88:7c:55:26:dc:75:29:7d:18:8f:
d6:f6:1d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:32 2023 by rpki-client on console-ams.rpki-client.org