Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/vUXWAeix1rxCHFwEkHxdqPtIH-M.roa
File: vUXWAeix1rxCHFwEkHxdqPtIH-M.roa (raw, json)
Hash identifier: MVStP0RD2xbfhNCNDAfSK7CzFpJ79ydKPIjUj4N7/7g=
Subject key identifier: BD:45:D6:01:E8:B1:D6:BC:42:1C:5C:04:90:7C:5D:A8:FB:48:1F:E3
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 17CA2440
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/vUXWAeix1rxCHFwEkHxdqPtIH-M.roa
Signing time: Sat 01 Jan 2022 04:54:27 +0000
ROA not before: Sat 01 Jan 2022 04:54:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 132335
IP address blocks: 45.132.15.0/24 maxlen: 24
92.119.149.0/24 maxlen: 32
2a06:7a02::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399123520 (0x17ca2440)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:54:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd45d601e8b1d6bc421c5c04907c5da8fb481fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:77:0a:52:06:12:31:6f:f5:24:45:ba:81:d6:
58:e3:7a:f8:54:94:fa:9d:52:46:6e:62:67:5d:0a:
42:2c:04:7e:14:64:a8:e8:ba:86:94:fd:a6:fc:5a:
e1:73:6d:d3:9b:68:82:95:40:89:71:85:91:88:69:
71:9e:cd:76:94:48:48:6c:bd:07:e9:1c:8d:7a:aa:
89:37:ec:6a:ef:cb:47:e1:6b:e8:13:29:be:df:4c:
38:fd:91:19:55:3f:a7:08:4c:07:d0:92:aa:a0:ae:
b3:33:fe:7e:74:6b:ca:9d:07:82:b0:2a:b2:25:6a:
62:1e:0f:49:5d:cf:fd:ed:df:f2:24:5c:56:e4:5f:
df:d3:36:f6:8c:05:08:8e:b0:b1:e7:13:c3:78:26:
35:73:68:76:da:30:ba:08:b9:e7:fe:7e:38:4f:b9:
ee:05:3c:b7:07:b8:65:1b:a0:78:d8:10:b1:a9:5e:
78:9a:a7:7b:6e:0b:7a:38:64:6f:1e:c6:79:e6:21:
99:57:c8:1c:1d:4c:88:e5:25:17:16:c8:d6:00:38:
c3:51:f0:35:fc:88:49:e2:c0:b4:3c:e8:9c:45:38:
02:ff:ab:e8:5c:f2:7a:db:e3:22:cc:1d:36:2b:04:
cb:02:24:bf:66:3c:20:46:45:b4:2f:6c:a3:07:bd:
4f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:45:D6:01:E8:B1:D6:BC:42:1C:5C:04:90:7C:5D:A8:FB:48:1F:E3
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/vUXWAeix1rxCHFwEkHxdqPtIH-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.15.0/24
92.119.149.0/24
IPv6:
2a06:7a02::/48
Signature Algorithm: sha256WithRSAEncryption
4c:c1:93:77:2d:38:32:81:02:3a:06:e4:f9:43:ab:33:55:37:
31:eb:1b:16:9c:5b:73:dd:6b:3d:50:91:48:21:4c:a5:66:53:
14:50:9c:a8:cb:a0:8e:30:2a:64:ba:37:37:f0:9b:bc:0f:25:
da:db:e1:b7:8f:86:de:9c:ce:f9:d1:94:34:f3:7d:4d:8b:3f:
d1:47:9d:2b:7c:1b:5d:1f:90:82:5f:da:1b:95:86:f8:22:57:
0f:9e:1d:af:27:53:27:83:ed:a5:57:91:8b:6f:a0:ae:76:b7:
f2:a1:97:25:76:8e:44:5f:c8:c0:0a:9f:d3:0f:4f:57:99:f0:
ae:bb:69:1b:ae:1b:c8:65:95:9f:ec:85:c1:d0:4a:de:21:eb:
bf:eb:a5:cc:fa:c8:82:0d:4c:e5:80:20:60:89:43:5c:f6:df:
4f:ab:07:6f:89:dc:40:93:fb:9c:bf:85:76:27:19:f3:3c:49:
af:f2:9e:da:04:50:66:57:07:78:ba:fd:97:0e:a0:11:73:33:
23:15:16:cb:62:cb:47:f4:f7:e2:50:0e:f1:85:8e:88:2f:fc:
34:79:b8:65:06:0c:ab:ee:28:c9:ba:60:fb:82:e9:af:2d:0c:
0e:43:2b:1a:4d:45:08:60:7a:21:0f:ec:e3:0d:78:2a:43:b5:
e2:e2:15:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org