Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/sgs2bgvwDJ1A3b34A3SoTurMUgI.roa
File: sgs2bgvwDJ1A3b34A3SoTurMUgI.roa (raw, json)
Hash identifier: 072LaNOhdQt1FRbVSC/mKL7b+uffCE3VqMjEhjv2Ovs=
Subject key identifier: B2:0B:36:6E:0B:F0:0C:9D:40:DD:BD:F8:03:74:A8:4E:EA:CC:52:02
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 018331D03044E5B730F0CB5D6DAA25B3BBF4
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/sgs2bgvwDJ1A3b34A3SoTurMUgI.roa
Signing time: Mon 12 Sep 2022 13:07:50 +0000
ROA not before: Mon 12 Sep 2022 13:07:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 149485
IP address blocks: 45.138.211.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:31:d0:30:44:e5:b7:30:f0:cb:5d:6d:aa:25:b3:bb:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Sep 12 13:07:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b20b366e0bf00c9d40ddbdf80374a84eeacc5202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:03:7c:11:13:f3:d8:5e:b8:48:24:2e:b9:cd:
3a:68:70:b4:df:a8:c9:ce:36:cc:c6:84:25:8b:64:
f0:d7:b0:d7:ab:4e:de:6d:13:58:36:49:62:a9:4f:
5e:2e:0e:92:74:cb:2c:89:03:2e:70:b1:02:9f:79:
0b:e8:50:c9:2c:b9:dd:0a:49:80:65:df:59:3b:cf:
aa:ef:17:98:ae:2b:50:b7:e3:84:a4:d4:4c:7f:1f:
31:c8:03:5e:4a:c6:79:68:4b:26:9f:d6:57:9c:49:
58:46:95:f4:20:44:a5:e4:bf:56:cd:a6:94:36:49:
7a:27:68:89:49:cc:e0:4c:b0:e9:10:55:db:ed:ff:
52:26:34:3c:19:57:ff:00:6a:f8:85:58:ff:ea:56:
9b:56:b5:c1:fd:5b:7b:66:22:2c:ce:a1:c9:00:7f:
00:c9:1f:4a:0b:30:f2:6d:13:5f:59:01:e8:e2:3e:
31:8d:70:8f:c9:d8:42:ce:cb:5b:aa:a9:fa:2e:71:
e6:81:e7:7a:77:85:6e:4f:74:37:2c:bf:f0:78:fa:
23:eb:50:0b:b7:40:6f:c3:8c:c7:1a:d4:cf:f3:2e:
a4:d9:38:0a:38:34:3b:1d:53:e4:10:7f:3d:85:e7:
8d:a1:46:67:44:98:7f:08:31:83:e3:b7:62:8f:68:
60:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0B:36:6E:0B:F0:0C:9D:40:DD:BD:F8:03:74:A8:4E:EA:CC:52:02
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/sgs2bgvwDJ1A3b34A3SoTurMUgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.211.0/24
Signature Algorithm: sha256WithRSAEncryption
57:78:15:f6:fc:0d:36:de:7b:c0:84:d9:72:e9:79:79:fd:9c:
a3:7c:5c:43:18:f1:2e:d1:28:d1:6b:31:cf:c3:b1:a6:a6:0a:
05:e5:6e:55:14:a2:95:74:3b:fd:1f:07:9e:12:83:bf:8d:41:
72:b3:ee:aa:9f:84:a3:af:e1:36:70:0e:ad:33:39:28:ac:99:
4f:73:cf:96:01:fe:b7:21:5b:68:90:a0:86:b5:2c:dd:a8:f2:
01:20:8b:05:23:5b:d2:cf:94:ff:78:25:6e:ea:df:a8:10:20:
19:51:09:9d:b6:b2:08:0b:2b:c0:8a:36:ec:d4:4a:db:a1:30:
c6:e5:5c:99:95:77:e0:8b:38:5e:e9:bc:12:2b:b0:90:bd:13:
d0:70:b3:48:51:34:9c:4e:e7:43:41:b1:f0:bf:84:82:57:01:
20:cf:5a:f8:3c:5c:0e:61:79:54:52:e0:44:14:3e:a4:b4:dd:
84:13:0d:99:5b:e0:1b:3a:0f:1d:8f:00:9f:7d:3b:bc:33:c6:
b2:ab:a9:57:c8:c3:3d:bd:e6:97:37:95:29:f5:fb:08:cb:4c:
79:56:dd:6a:57:fa:d3:89:51:62:c3:1e:a2:6a:0c:b3:3e:45:
65:4c:22:e1:da:a8:32:b3:eb:f9:10:99:a1:df:53:dc:91:ab:
df:03:4a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:18 2023 by rpki-client on console-fra.rpki-client.org