Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/45Nz_-us0RUP_yZvG_dJTbXISA0.roa
File: 45Nz_-us0RUP_yZvG_dJTbXISA0.roa (raw, json)
Hash identifier: yGGdviuaoZiAs1hKf599ohXqMM+JGqU9YnGOA2oXGTU=
Subject key identifier: E3:93:73:FF:EB:AC:D1:15:0F:FF:26:6F:1B:F7:49:4D:B5:C8:48:0D
Certificate issuer: /CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Certificate serial: 01839DB50A027528C2E2489E106257120649
Authority key identifier: AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/45Nz_-us0RUP_yZvG_dJTbXISA0.roa
Signing time: Mon 03 Oct 2022 11:57:10 +0000
ROA not before: Mon 03 Oct 2022 11:57:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41099
IP address blocks: 193.9.15.0/24 maxlen: 24
195.10.215.0/24 maxlen: 24
193.9.255.0/24 maxlen: 24
195.10.222.0/24 maxlen: 24
193.16.0.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9d:b5:0a:02:75:28:c2:e2:48:9e:10:62:57:12:06:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Validity
Not Before: Oct 3 11:57:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e39373ffebacd1150fff266f1bf7494db5c8480d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:43:2c:92:d4:5d:23:68:c6:2f:6e:61:2d:48:
99:e2:a0:96:8a:ac:d8:09:ef:26:00:68:7f:90:7b:
4c:44:c9:79:c5:c9:b8:71:62:84:97:df:13:11:04:
72:c2:65:95:2f:ba:b4:93:00:20:dc:37:e8:81:c6:
e5:77:9f:33:be:60:74:61:46:a3:74:60:ef:5d:7e:
40:13:38:5b:2d:33:5c:84:b4:cf:41:b5:65:11:6c:
78:4f:71:fb:84:06:7e:f5:b6:78:ac:15:91:73:73:
e9:2b:a4:4b:a2:42:6f:85:f4:43:e1:90:df:b8:19:
15:bf:f0:96:b3:f0:2b:3d:40:59:da:91:c0:e5:e7:
e2:b1:c6:83:30:8f:f1:43:72:9f:63:2f:2d:39:9e:
76:87:f4:95:49:6d:65:7a:ce:fb:74:a7:bf:4c:3f:
80:44:85:5c:a1:fe:af:13:13:23:fc:a2:3d:39:5d:
d6:95:e9:9c:0d:cd:04:8e:24:cc:33:90:4b:51:3d:
3c:12:bf:b3:e3:83:aa:6a:1a:3d:d3:96:fa:48:45:
01:3c:8f:95:84:ca:ce:a2:6a:fc:46:27:70:56:d6:
8c:75:ae:ac:57:b2:09:fd:6c:bb:13:74:a2:41:5b:
b8:b1:bf:8e:6e:14:9a:80:da:85:4f:47:e8:26:f5:
7d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:93:73:FF:EB:AC:D1:15:0F:FF:26:6F:1B:F7:49:4D:B5:C8:48:0D
X509v3 Authority Key Identifier:
keyid:AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/45Nz_-us0RUP_yZvG_dJTbXISA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.15.0/24
193.9.255.0/24
193.16.0.0/24
195.10.215.0/24
195.10.222.0/24
Signature Algorithm: sha256WithRSAEncryption
67:09:f1:c0:d9:b0:94:57:02:2a:86:13:ed:fe:85:86:9b:d6:
e3:44:22:7d:19:1f:13:3f:5a:bf:bd:4a:cf:83:3b:e9:8e:41:
ac:16:43:bb:8f:6c:94:36:d8:29:7e:65:99:b8:ec:a7:06:21:
10:55:79:fb:f1:bd:22:52:e9:54:63:77:80:47:79:cc:df:da:
27:68:01:12:b9:a6:80:9f:74:8b:07:83:19:57:9c:68:11:d6:
e6:f1:03:87:2e:ca:03:a0:04:e8:78:e5:12:d7:d6:35:5e:58:
cd:65:61:1d:54:37:b7:4d:96:7a:61:f4:3d:7f:3e:4b:a5:e1:
a9:fc:00:5a:33:5e:b4:9a:5a:e7:b3:ae:d6:92:a7:59:2e:78:
55:2a:14:7d:25:6f:78:17:93:8e:ff:57:07:c7:49:15:85:86:
05:84:8d:e0:84:aa:46:82:07:03:46:5d:18:45:7f:c8:15:52:
76:c4:41:e2:c2:a0:af:0a:01:8f:fe:8f:97:20:9c:b0:f7:8e:
1e:2b:bf:86:64:d3:e2:8e:31:f9:e8:63:18:ba:79:04:6d:f3:
30:c0:52:44:8e:69:4b:66:5d:a6:98:5d:ed:15:73:90:9c:d0:
eb:8a:7d:68:ba:02:94:d6:46:f9:70:2c:17:59:19:66:57:28:
e4:08:b6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:08 2024 by rpki-client on console-ams.rpki-client.org