Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/vGJch7ZKXLg-v2ddQWTwFNDFYSw.roa
File: vGJch7ZKXLg-v2ddQWTwFNDFYSw.roa (raw, json)
Hash identifier: +Bm+yQVxDr2qn13RForHWke0kKxGCIrJC6hVXv1Czho=
Subject key identifier: BC:62:5C:87:B6:4A:5C:B8:3E:BF:67:5D:41:64:F0:14:D0:C5:61:2C
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 0183F51982DFCCE960AE81E87C5C009A1109
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/vGJch7ZKXLg-v2ddQWTwFNDFYSw.roa
Signing time: Thu 20 Oct 2022 11:13:53 +0000
ROA not before: Thu 20 Oct 2022 11:13:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202351
IP address blocks: 45.129.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f5:19:82:df:cc:e9:60:ae:81:e8:7c:5c:00:9a:11:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Oct 20 11:13:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc625c87b64a5cb83ebf675d4164f014d0c5612c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e4:83:42:96:05:00:b1:3c:d0:0f:f3:de:6e:
22:12:01:c1:65:7d:81:2c:15:60:97:1a:57:91:ea:
f3:d8:63:07:9d:ad:e8:9d:d6:d7:3e:66:e4:3c:e6:
0f:66:fc:db:92:2f:a4:0d:51:d3:8f:54:7a:68:f1:
9b:f7:8c:66:74:17:78:43:da:c3:e8:74:b9:31:01:
31:5e:eb:95:46:d5:c1:92:10:98:85:b4:54:df:09:
21:2c:b5:9a:f7:37:1a:fe:23:a9:36:61:5d:87:47:
68:4b:7a:5f:b6:db:80:81:64:62:5b:88:95:1f:32:
a8:3e:6a:fe:6b:3a:12:55:54:f7:45:85:9e:66:78:
d8:8c:02:25:08:b5:ef:30:f7:32:bb:1d:99:cf:49:
04:ba:7a:0a:76:bd:25:3e:0c:9e:f5:3b:81:f9:09:
c8:d8:41:05:91:28:f3:b8:3c:ad:96:6e:9a:c0:22:
29:c8:f9:7e:21:40:4c:49:06:2c:71:bf:4e:c4:2a:
6a:ae:ce:44:fe:28:a1:b4:de:24:04:27:83:1b:6c:
a0:64:4d:f9:d1:b5:69:0d:24:c0:b4:31:3a:db:77:
d1:b2:9a:ce:a5:25:91:f6:50:2d:2e:0f:43:8b:88:
78:7b:a5:ab:ff:5d:c5:e6:87:44:3b:a7:79:01:e0:
a7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:62:5C:87:B6:4A:5C:B8:3E:BF:67:5D:41:64:F0:14:D0:C5:61:2C
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/vGJch7ZKXLg-v2ddQWTwFNDFYSw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.92.0/24
Signature Algorithm: sha256WithRSAEncryption
41:26:44:d4:01:48:76:c1:2a:e5:70:a2:d5:b6:6e:23:3f:c6:
d1:97:8b:91:89:07:24:97:f3:d7:14:26:7f:57:fb:1a:fc:bf:
31:24:1e:9b:f4:d4:1c:3d:69:d0:0f:a6:9a:0b:27:3e:40:75:
5b:fb:a7:80:d7:46:3a:0d:6b:fb:b7:b7:7e:0c:24:b8:f2:6d:
a1:96:4f:52:9f:25:23:93:97:73:88:36:be:76:fa:2b:70:c5:
81:0e:c8:b4:48:8b:16:82:0e:04:9d:93:44:f6:5b:05:69:7d:
16:9e:3f:59:fe:0e:8b:99:80:b6:c8:06:b9:d1:81:af:c1:83:
8a:08:93:27:1b:ed:d4:f0:7b:5c:44:5c:84:d7:c6:6f:be:66:
77:cd:31:52:25:03:ce:1a:fd:98:8a:5a:e0:56:4b:f4:65:08:
67:ce:df:f3:01:70:ab:82:03:0d:d0:b5:a7:c3:2c:cd:a8:75:
c0:9f:37:96:67:33:6d:92:3b:ce:44:1a:f4:ee:44:02:6f:04:
ef:89:53:ec:f3:ca:53:0e:63:db:e3:32:88:a4:c6:74:18:35:
3d:96:6b:fa:47:97:8e:8d:80:c4:fd:d1:04:97:65:66:e6:6d:
5b:c6:d3:4a:a3:47:88:51:96:01:39:7b:d5:c2:18:a6:74:b4:
47:42:75:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:38 2023 by rpki-client on console-fra.rpki-client.org