Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/L48f7DjBErvt6QorcwhS4T2Z19E.roa
File: L48f7DjBErvt6QorcwhS4T2Z19E.roa (raw, json)
Hash identifier: /2noAgnE3p92uWFETmKhpXqToFXRjJcImaBy7l/SeAU=
Subject key identifier: 2F:8F:1F:EC:38:C1:12:BB:ED:E9:0A:2B:73:08:52:E1:3D:99:D7:D1
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 1A4F9113
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/L48f7DjBErvt6QorcwhS4T2Z19E.roa
Signing time: Tue 31 May 2022 22:10:15 +0000
ROA not before: Tue 31 May 2022 22:10:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46261
IP address blocks: 45.138.210.0/23 maxlen: 24
213.232.104.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 441422099 (0x1a4f9113)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: May 31 22:10:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f8f1fec38c112bbede90a2b730852e13d99d7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6a:ad:37:6e:ee:e9:19:68:9b:62:7a:05:25:
e9:96:48:d8:2e:cc:b5:1d:74:be:cd:9d:c4:9d:46:
8a:cf:61:19:95:3b:a0:c6:aa:a3:d4:d7:dd:f8:39:
10:75:f5:ed:75:dd:68:6c:f5:7c:c0:06:37:8a:70:
6e:b8:2b:2a:f1:0c:5f:da:44:ff:97:4f:41:1e:02:
b8:d8:f4:44:76:1b:c9:2a:8d:4f:6b:67:fe:9b:e4:
8a:84:e4:99:fa:16:16:92:02:47:2e:94:a7:c9:35:
d2:81:28:ac:ca:4b:48:f2:62:84:1c:ac:47:7a:89:
b6:44:73:43:ef:9d:b2:bf:f9:7b:0d:45:1d:b5:95:
49:40:c2:68:b9:75:dc:f2:e6:e8:13:9b:fd:41:bc:
88:cf:6b:78:4a:1e:e0:0e:22:4c:ac:76:70:1b:c2:
6b:21:59:dd:11:f1:c3:64:95:7c:32:3a:ca:18:be:
72:3b:78:8a:5d:6e:60:73:3a:a3:5f:53:f5:83:cb:
93:00:74:c8:47:ea:50:8f:d3:bf:05:a0:9e:bc:76:
f5:7a:a3:21:2b:9c:03:e1:0a:b6:56:3d:b2:68:57:
6f:f8:9d:7d:dc:a4:34:7c:e1:63:76:6c:9e:1a:ed:
cf:fa:dd:56:11:f4:d8:b2:4c:99:d5:1f:b9:51:47:
56:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8F:1F:EC:38:C1:12:BB:ED:E9:0A:2B:73:08:52:E1:3D:99:D7:D1
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/L48f7DjBErvt6QorcwhS4T2Z19E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.210.0/23
213.232.104.0/24
Signature Algorithm: sha256WithRSAEncryption
52:7a:53:6e:b6:45:40:55:d6:8a:06:54:0f:60:3e:09:15:cb:
b3:3b:1f:bb:71:7c:6d:2a:08:29:71:73:09:66:3b:f3:13:b0:
ea:39:9d:7f:65:19:dc:74:92:f1:c0:f8:46:4f:a7:bc:ac:10:
9c:24:ee:a8:0e:66:a0:a2:59:e5:d4:55:10:a9:83:1c:53:ec:
f1:f8:01:a8:5d:ba:b9:2b:77:cc:b1:1a:6c:f2:3b:2e:6c:20:
21:89:d0:1c:4c:19:4a:81:af:19:78:b4:bc:b9:1f:da:e2:1f:
19:ef:53:9e:0e:1b:53:13:0b:cb:b6:15:3c:a0:52:e5:a9:69:
eb:f9:b1:de:90:a2:43:d5:01:8c:5f:d7:4a:36:3a:77:25:fa:
75:39:58:9e:9f:ef:ef:35:97:27:b1:f7:f4:33:56:d5:bc:e4:
34:e2:95:2a:e3:c8:3b:02:bc:7a:20:d3:6f:f8:30:e4:14:24:
0b:de:bc:87:46:bc:bf:13:36:82:bd:1b:9c:83:e0:cb:ce:77:
1d:08:eb:2c:b5:ec:45:d6:07:d6:26:75:aa:cd:78:a2:84:60:
0b:c6:44:08:c1:e9:a1:c6:41:3c:24:f4:37:7f:98:02:59:23:
f9:16:3c:7b:ee:d0:5a:90:33:14:68:0f:6d:12:be:00:53:16:
d0:3b:6a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:17 2023 by rpki-client on console-fra.rpki-client.org