Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/lEdEJ7cWWd-IKoboVmkiq1I6ozo.roa
File: lEdEJ7cWWd-IKoboVmkiq1I6ozo.roa (raw, json)
Hash identifier: NSNfNlfaqkP/40XP0rHDN8DVYyKm6ahZGe6zVvZIr9w=
Subject key identifier: 94:47:44:27:B7:16:59:DF:88:2A:86:E8:56:69:22:AB:52:3A:A3:3A
Certificate issuer: /CN=a57f291818d8719738268d844994a2e10824d4c9
Certificate serial: 08119335
Authority key identifier: A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/lEdEJ7cWWd-IKoboVmkiq1I6ozo.roa
Signing time: Sat 01 Jan 2022 11:57:28 +0000
ROA not before: Sat 01 Jan 2022 11:57:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209993
IP address blocks: 45.90.192.0/22 maxlen: 22
2a0e:240::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135369525 (0x8119335)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a57f291818d8719738268d844994a2e10824d4c9
Validity
Not Before: Jan 1 11:57:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94474427b71659df882a86e8566922ab523aa33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:bc:89:43:ae:6a:69:8e:21:71:b2:a2:cc:
95:c9:59:c7:93:c8:39:5e:0e:b2:cd:34:b4:eb:f4:
bb:7b:be:86:db:dc:ce:a5:08:f2:a0:a8:4a:14:a2:
ea:21:aa:bf:0d:77:4b:61:a8:41:6f:8c:bc:99:4f:
c7:12:8e:ac:6c:0a:01:d4:e9:e4:35:56:8a:b3:35:
e1:fc:2d:46:a6:f2:cd:b0:e2:cd:20:f3:29:1a:ae:
37:a2:ca:c2:d7:2a:40:a2:4f:fc:1c:98:76:3f:82:
df:bb:56:99:93:81:c1:58:5d:77:1a:66:b5:ed:1d:
46:6f:33:eb:5c:51:a8:5c:1e:f0:6c:69:d7:15:ee:
38:49:1a:96:c9:88:00:bd:58:77:0e:58:d5:35:b6:
c0:55:d1:65:ba:98:14:ba:d2:6b:d2:ae:90:b5:61:
ea:b6:f0:f5:d3:df:1a:60:73:3b:29:63:31:de:e8:
57:2d:0c:03:12:ab:00:ca:45:e7:26:a3:27:3b:93:
74:ed:96:43:3e:2f:b7:b5:da:01:6c:f8:0e:b9:57:
9a:1d:12:8b:a0:f0:35:50:51:be:0e:20:ad:f4:04:
76:e2:5c:00:30:2d:0f:b3:4c:d1:90:85:65:82:8b:
1b:8b:6a:dc:76:e6:ba:5f:5b:90:59:49:18:34:cd:
2c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:47:44:27:B7:16:59:DF:88:2A:86:E8:56:69:22:AB:52:3A:A3:3A
X509v3 Authority Key Identifier:
keyid:A5:7F:29:18:18:D8:71:97:38:26:8D:84:49:94:A2:E1:08:24:D4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/lEdEJ7cWWd-IKoboVmkiq1I6ozo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/963a83-d2d1-464c-bdb0-b1a9793ee324/1/pX8pGBjYcZc4Jo2ESZSi4Qgk1Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.192.0/22
IPv6:
2a0e:240::/29
Signature Algorithm: sha256WithRSAEncryption
03:aa:c2:85:77:cb:1c:d3:19:13:03:82:c9:c1:7d:b5:eb:c9:
ab:cb:a8:0d:a5:49:24:45:2b:ec:6a:2c:3c:a5:df:30:f7:18:
22:2e:fc:fd:21:c0:21:11:76:3a:d8:93:86:fc:f7:51:9e:59:
5c:fd:f9:67:3b:42:70:7a:ad:01:9e:43:a7:7b:c1:e3:fc:e2:
8f:c5:c7:db:53:66:65:d4:c7:32:46:1d:b6:d0:33:a8:b4:f2:
c9:ee:c2:20:67:0a:7e:4e:7c:01:8d:96:70:17:3d:19:a0:ab:
64:5a:59:68:1b:03:51:70:4e:fd:42:f0:40:03:1c:ab:f7:bb:
a7:db:a5:84:c3:48:38:f8:61:70:d0:d4:99:4c:1f:65:d1:4a:
63:f6:d5:36:7e:c0:a6:11:80:81:99:af:46:e3:39:16:bf:50:
2f:cf:59:7f:6b:0d:c3:b3:cf:4d:c6:3b:e9:1e:76:20:dc:43:
0f:08:4d:68:ef:c1:2d:9e:38:12:e7:b6:bd:a5:3f:3b:34:9b:
78:20:47:13:80:8f:a9:a6:52:49:7a:12:12:ea:db:aa:52:d4:
c3:ab:75:29:60:fa:8e:44:0f:f5:49:dc:3f:96:52:4f:d6:84:
68:63:81:3b:a0:52:a3:fe:78:b3:6d:e7:34:f9:2b:87:65:29:
57:ca:77:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:32 2024 by rpki-client on console-ams.rpki-client.org