Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/W-P9eTL0Cgq91oo09BlCBmDzhxk.roa
File: W-P9eTL0Cgq91oo09BlCBmDzhxk.roa (raw, json)
Hash identifier: /iPgvA5xtGHRRmsMDYSHZXXFGNj93Jpa5QX7jU+BU7U=
Subject key identifier: 5B:E3:FD:79:32:F4:0A:0A:BD:D6:8A:34:F4:19:42:06:60:F3:87:19
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 018434B8B0CB5B76C6B2EBB2CE305EEED7D9
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/W-P9eTL0Cgq91oo09BlCBmDzhxk.roa
Signing time: Tue 01 Nov 2022 19:43:49 +0000
ROA not before: Tue 01 Nov 2022 19:43:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205320
IP address blocks: 45.10.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:34:b8:b0:cb:5b:76:c6:b2:eb:b2:ce:30:5e:ee:d7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Nov 1 19:43:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5be3fd7932f40a0abdd68a34f419420660f38719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cc:fa:23:03:8f:02:9c:81:ab:72:18:25:27:
8a:19:8c:93:c3:a2:57:3c:1d:38:7b:f6:24:ef:a3:
bc:61:3f:66:69:2e:59:c4:db:b6:88:42:88:2e:b1:
d4:45:62:cf:de:cd:52:b7:7b:cf:d8:d1:ee:a7:6d:
56:54:fa:1e:ce:3d:5f:78:d5:a9:74:1c:fa:86:ae:
cf:b4:0e:12:26:dd:08:11:ac:86:1d:0c:c4:eb:56:
b8:89:3b:b4:88:58:19:66:25:be:a5:e1:a9:f3:8d:
05:8b:af:73:a5:f9:93:64:d1:78:e0:d8:12:d2:02:
fb:08:b8:fd:78:ff:03:8b:76:29:7c:84:86:42:4a:
89:8d:d8:58:5f:9e:33:cf:85:c5:bf:42:09:b3:37:
d6:6a:af:98:ca:2b:4e:61:38:cc:28:6f:32:e8:ba:
ac:4b:69:57:ae:70:38:66:57:d6:c6:38:f8:13:a5:
ea:76:81:c6:00:2f:4e:be:63:47:5b:9a:ee:5c:9b:
47:67:82:93:f7:eb:b1:cc:7b:e2:e5:a2:66:14:f5:
2f:7b:38:df:e1:4b:48:98:b2:83:af:f5:52:60:e5:
84:74:27:88:89:bf:6f:e9:63:87:3b:a4:7b:71:b5:
ed:ac:aa:e9:e4:a1:3a:8d:6d:de:31:82:49:50:fe:
00:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E3:FD:79:32:F4:0A:0A:BD:D6:8A:34:F4:19:42:06:60:F3:87:19
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/W-P9eTL0Cgq91oo09BlCBmDzhxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.235.0/24
Signature Algorithm: sha256WithRSAEncryption
41:c8:70:66:15:fa:6b:2d:35:a4:ab:98:4f:01:b3:76:c3:fe:
3e:6d:40:44:09:f2:27:e1:b8:d4:9a:11:6b:67:0c:91:e4:f9:
25:08:7b:dd:ac:32:19:62:d7:b3:a7:e0:ad:d1:9b:a2:7c:6c:
18:48:9f:f6:b6:bb:d0:ce:b9:b8:fc:36:80:d5:5b:12:ad:87:
06:9b:6d:cf:d7:24:f8:f6:5e:af:cf:af:8b:50:07:93:dc:07:
83:bf:75:24:e5:e4:ee:b7:ee:6d:50:34:c7:0a:b2:2f:db:c0:
43:3e:dc:dd:09:8c:67:f2:35:fe:44:e1:59:b5:87:e9:5c:bc:
03:ee:8d:88:8c:4a:ad:62:ca:18:16:4f:01:61:6a:48:0e:fe:
76:cf:0e:14:f1:1f:02:2a:77:b3:24:0f:b5:4b:7b:f6:a6:34:
da:6d:c9:a2:27:ae:2c:61:61:db:f6:fa:c5:45:d9:ff:46:98:
60:d0:b9:fc:33:cf:63:ee:ca:33:20:44:ef:c4:01:ff:78:51:
36:2f:2e:3a:b5:4a:2e:52:f7:47:e1:f2:eb:73:be:6d:59:94:
7a:2e:d1:77:d0:2c:e6:17:cf:f7:b1:08:dd:8c:61:dc:b3:2b:
34:33:07:81:66:3d:99:fb:21:fd:26:de:4a:bd:b9:58:95:5c:
52:1e:b4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:19 2023 by rpki-client on console-fra.rpki-client.org