Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/5151c5-faa4-45ef-b238-b69cdb4efd82/1/JxPkzYurFW0VoRvjZ6m_1ETwbLM.roa
File: JxPkzYurFW0VoRvjZ6m_1ETwbLM.roa (raw, json)
Hash identifier: 0N10vocP8I249oXsNq+RHgYTpfyaMGxY1k1ImMadFSg=
Subject key identifier: 27:13:E4:CD:8B:AB:15:6D:15:A1:1B:E3:67:A9:BF:D4:44:F0:6C:B3
Certificate issuer: /CN=c8d02a9a3a3338ae63d484ef3006b8ad6eafaa1a
Certificate serial: 04B598AE
Authority key identifier: C8:D0:2A:9A:3A:33:38:AE:63:D4:84:EF:30:06:B8:AD:6E:AF:AA:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNAqmjozOK5j1ITvMAa4rW6vqho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/5151c5-faa4-45ef-b238-b69cdb4efd82/1/JxPkzYurFW0VoRvjZ6m_1ETwbLM.roa
Signing time: Sat 01 Jan 2022 05:54:56 +0000
ROA not before: Sat 01 Jan 2022 05:54:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202754
IP address blocks: 45.84.48.0/22 maxlen: 22
45.84.49.0/24 maxlen: 24
45.84.50.0/24 maxlen: 24
45.84.51.0/24 maxlen: 24
45.84.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79009966 (0x4b598ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d02a9a3a3338ae63d484ef3006b8ad6eafaa1a
Validity
Not Before: Jan 1 05:54:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2713e4cd8bab156d15a11be367a9bfd444f06cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f6:c6:d3:ea:da:49:e2:db:b4:9e:ca:93:8d:
59:47:f5:ab:c0:fe:ee:95:72:ea:88:9f:7d:0a:77:
61:ca:52:a3:46:1c:78:0c:df:51:10:4b:17:34:c9:
be:8d:8f:4a:16:7e:9e:b7:19:b7:54:55:a1:cc:4e:
6f:05:ec:2c:de:8e:5d:5d:69:55:34:e9:b2:dc:28:
00:6d:40:86:f0:5f:15:d5:08:a8:75:f0:6e:f2:1f:
66:eb:51:7c:2e:83:16:e3:46:99:9c:72:e4:a9:8b:
a2:2c:32:7f:29:a9:08:3d:3f:48:fd:47:40:b9:b8:
93:da:7b:52:b3:82:72:d5:e7:1f:5b:03:4a:3e:12:
cb:a4:bf:17:db:ae:5e:9f:10:f3:38:9e:62:2b:b7:
bf:99:59:21:fe:e6:dd:fb:22:31:81:9c:2d:6a:a0:
f4:a8:c5:31:bf:34:cf:4c:8b:d9:ba:96:91:20:13:
12:4b:6e:e7:c4:79:1c:7b:30:fb:fe:7b:e6:20:85:
74:e9:01:0e:2b:eb:3a:a7:73:0b:50:c5:ed:8a:04:
2c:81:78:eb:38:0c:df:7c:7c:86:29:f0:cc:dd:4c:
95:bb:fe:25:2f:2f:6a:18:55:58:fa:9f:f0:8c:9d:
1c:0c:6e:ae:e8:55:74:72:37:66:28:4c:ed:40:a2:
b3:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:13:E4:CD:8B:AB:15:6D:15:A1:1B:E3:67:A9:BF:D4:44:F0:6C:B3
X509v3 Authority Key Identifier:
keyid:C8:D0:2A:9A:3A:33:38:AE:63:D4:84:EF:30:06:B8:AD:6E:AF:AA:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNAqmjozOK5j1ITvMAa4rW6vqho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5151c5-faa4-45ef-b238-b69cdb4efd82/1/JxPkzYurFW0VoRvjZ6m_1ETwbLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/5151c5-faa4-45ef-b238-b69cdb4efd82/1/yNAqmjozOK5j1ITvMAa4rW6vqho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.48.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:39:e7:fc:c5:08:26:ac:4f:90:f0:b6:ad:86:e3:e8:6c:0d:
01:15:90:7d:51:80:20:24:9f:7b:26:ad:5d:87:4c:c7:52:38:
5f:01:e8:a3:d5:ce:2a:3f:7c:45:37:bb:ad:94:85:1b:e1:09:
92:bb:2c:e6:cd:2b:9c:01:26:17:a1:7b:34:92:eb:91:3e:45:
0b:df:9e:e0:11:d5:e6:08:3e:07:37:d6:d1:7d:6a:15:b0:fd:
50:6d:10:e6:fa:bb:be:31:32:5a:df:ce:45:ec:8e:20:dc:8e:
8f:8a:7c:5c:a3:41:28:02:03:fa:45:41:09:44:2d:fe:77:93:
42:2a:f8:89:5a:2b:58:ce:b1:3f:65:93:1c:0b:e3:fe:74:db:
6d:54:6c:2c:5a:7d:f0:ba:ec:48:9b:a6:c9:f0:9a:e4:c9:ea:
c3:04:e7:02:86:eb:23:63:be:5e:98:20:30:d3:bc:2e:a5:72:
ae:b1:7e:f9:4a:17:ef:08:01:05:24:8d:78:d0:e9:38:17:64:
25:2d:a5:37:c5:ff:94:53:07:9d:5f:2b:fc:39:d8:48:a8:e4:
5a:ec:a4:31:40:e7:8a:d9:94:a5:e4:ff:c4:fe:47:0f:66:d1:
ad:aa:eb:fb:33:c3:c7:57:3e:58:ec:e1:a4:8e:bd:cd:b4:64:
4b:f2:d0:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:03 2023 by rpki-client on console-fra.rpki-client.org