Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/79au5FaEi3qDbmOzhYc1ilRm00k.roa
File: 79au5FaEi3qDbmOzhYc1ilRm00k.roa (raw, json)
Hash identifier: s8IE9P5ClF8OPzRDVppu0t5CJsw+682PhOONrHJ4ZVw=
Subject key identifier: EF:D6:AE:E4:56:84:8B:7A:83:6E:63:B3:85:87:35:8A:54:66:D3:49
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 1A04DB37
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/79au5FaEi3qDbmOzhYc1ilRm00k.roa
Signing time: Wed 04 May 2022 22:49:51 +0000
ROA not before: Wed 04 May 2022 22:49:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46261
IP address blocks: 193.187.153.0/24 maxlen: 32
45.138.210.0/23 maxlen: 24
213.232.104.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 436525879 (0x1a04db37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: May 4 22:49:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=efd6aee456848b7a836e63b38587358a5466d349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0f:3b:02:5a:ad:63:e4:12:88:93:10:3b:83:
29:25:16:6a:02:ac:96:ab:6f:13:bb:f5:62:7c:e4:
8c:fb:64:d6:20:0a:14:f1:56:95:16:cc:63:16:e0:
b1:55:c4:3f:e2:68:fe:ed:c7:b1:9d:72:6e:a6:bb:
b9:8e:c1:d9:ad:ac:3e:42:43:3c:97:08:00:85:c7:
08:06:fc:39:b7:d4:a1:03:00:6c:0f:ca:61:c9:c6:
b5:2c:70:ef:13:1c:48:c6:46:1c:7e:ba:4f:96:44:
2f:c1:19:d5:40:7b:28:ba:0d:f4:6b:fb:40:26:41:
cb:6c:b5:6a:39:b4:c5:ca:ad:45:f2:39:63:fb:7e:
36:5d:b2:f6:24:7f:c8:08:3e:46:ba:de:5c:de:a5:
93:f6:d8:a7:92:83:f4:2e:ef:15:27:dc:44:60:86:
c2:93:1c:4d:4c:5e:be:13:db:24:2b:82:3d:ac:6a:
27:e2:28:83:89:f8:e5:d5:0b:f7:90:ed:fb:72:99:
c5:d2:d0:4a:51:9a:50:32:0d:ae:49:52:41:e7:03:
5c:9b:ff:f6:74:77:cc:39:14:eb:8b:64:fa:82:7a:
5c:2e:82:c5:c7:6c:36:c9:45:a5:c7:eb:ff:3f:85:
d0:91:df:58:bf:67:e8:eb:ef:5d:54:c2:a6:cb:bc:
53:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D6:AE:E4:56:84:8B:7A:83:6E:63:B3:85:87:35:8A:54:66:D3:49
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/79au5FaEi3qDbmOzhYc1ilRm00k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.210.0/23
193.187.153.0/24
213.232.104.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:87:cd:9b:dd:ec:cb:88:19:76:db:5a:aa:f2:de:00:27:a4:
d2:22:ca:68:a1:05:69:6a:bc:0a:8a:be:78:aa:c6:6e:a6:f2:
af:88:ba:5d:4e:c8:b7:78:35:0f:0d:ef:82:5a:dd:5e:ed:0b:
30:80:7e:36:94:5c:c6:97:5f:35:7b:b2:9d:7f:80:1b:c4:8a:
ac:5b:a4:17:91:25:6f:12:22:6a:3d:d7:08:58:2b:78:c8:d9:
f8:4b:33:d4:43:aa:65:b1:36:38:46:57:03:72:be:be:a0:e4:
38:f5:d5:cc:f6:29:af:a7:7e:df:ae:1e:90:2d:55:98:50:55:
09:ec:cd:dd:b5:f7:cc:3e:43:83:cc:96:c5:6b:b5:46:40:94:
2f:f9:95:9b:48:7a:1b:a7:b5:35:a8:b4:a8:5b:4a:0d:f7:60:
b8:18:50:da:b3:42:48:0a:40:84:b7:86:20:a1:e9:6d:3f:83:
53:2a:5d:3a:75:c0:d6:7c:46:cb:9e:7d:84:d6:1d:82:93:b8:
d0:95:c0:95:fe:b6:f7:55:96:92:a7:79:3d:18:61:71:b6:f1:
95:64:16:25:2d:92:b1:bf:41:d0:bb:8e:51:bc:0e:b1:0a:5c:
fc:83:8f:48:68:8e:ca:12:48:f8:a0:df:56:f3:5d:91:63:17:
63:4d:d3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org