Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/_Mr4WQhHGnDOj2P6s0Hnwq4oN4k.roa
File: _Mr4WQhHGnDOj2P6s0Hnwq4oN4k.roa (raw, json)
Hash identifier: j0wydRw/naeqY+Kt5KyO8X3sWZJqZWk1tXPHJ/pqcJs=
Subject key identifier: FC:CA:F8:59:08:47:1A:70:CE:8F:63:FA:B3:41:E7:C2:AE:28:37:89
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 0183EF0C6A91096A3C888671657ECF800546
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/_Mr4WQhHGnDOj2P6s0Hnwq4oN4k.roa
Signing time: Wed 19 Oct 2022 07:01:51 +0000
ROA not before: Wed 19 Oct 2022 07:01:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206065
IP address blocks: 45.140.228.0/22 maxlen: 22
85.198.48.0/20 maxlen: 20
45.156.192.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ef:0c:6a:91:09:6a:3c:88:86:71:65:7e:cf:80:05:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Oct 19 07:01:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fccaf85908471a70ce8f63fab341e7c2ae283789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:4b:3e:98:f8:e5:0a:7b:54:c6:51:cc:70:46:
7f:ba:f5:7f:a2:ab:45:15:af:e8:4b:7d:f0:1d:fa:
90:06:03:64:53:bd:b1:70:59:39:63:55:19:3c:0f:
7b:8e:1a:6e:b6:c0:3d:cb:bf:7c:1f:12:c8:6e:62:
f9:37:0c:27:0e:3d:58:a7:6d:c5:66:75:51:25:20:
68:36:4f:c4:d2:d0:07:db:2f:fa:a4:74:ab:47:db:
6f:47:ce:d2:1b:cf:97:1d:cb:8d:cb:72:7e:c8:83:
6c:f4:6f:65:d6:67:a8:42:81:c0:8d:36:0b:91:e4:
6b:26:0c:88:5e:11:d6:1f:92:c8:84:61:28:16:9b:
3d:7b:5c:1c:98:a6:7c:30:b5:38:44:54:83:79:df:
f0:4a:78:6b:b9:7d:8a:22:72:35:29:a4:1d:6b:21:
e4:c9:e0:c4:7e:90:1b:87:1e:c2:af:6a:dc:55:0f:
ee:55:51:bd:ca:0c:67:1e:b9:dd:62:17:5b:0b:da:
89:9e:7d:4d:31:fe:1a:58:53:91:87:fe:cb:24:c6:
02:f4:50:04:e7:1e:4a:7e:e9:bb:63:bc:98:c7:f1:
13:2d:a7:0f:5a:ae:2d:64:e2:e7:a7:f7:93:d1:23:
27:63:f7:f2:4c:6d:1d:96:3d:24:f8:93:f4:16:dc:
be:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CA:F8:59:08:47:1A:70:CE:8F:63:FA:B3:41:E7:C2:AE:28:37:89
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/_Mr4WQhHGnDOj2P6s0Hnwq4oN4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.228.0/22
45.156.192.0/22
85.198.48.0/20
Signature Algorithm: sha256WithRSAEncryption
89:32:d2:75:b0:07:1d:b2:8d:ea:92:ad:64:f3:61:31:da:55:
c8:a9:ca:12:04:03:fc:a3:07:fd:9f:eb:76:f2:ed:dc:39:40:
27:85:24:ab:2e:7e:31:41:f8:84:6f:f1:35:25:e0:35:e5:89:
f6:18:7e:34:67:5d:4d:38:db:7f:cc:7f:4b:4f:09:d6:16:75:
b9:38:10:17:59:90:36:e9:21:d2:64:02:7a:c9:ce:40:3a:e4:
f2:a2:46:b1:fc:2c:5e:2d:40:78:39:d3:e1:b9:5e:17:dd:4a:
d3:90:5e:36:5a:6d:a5:73:84:9a:83:45:77:3b:bc:fe:ed:8c:
21:a3:52:84:af:c2:fe:f7:25:ce:3b:f9:07:8b:b5:ac:ff:d3:
24:46:74:0b:22:6e:af:d8:55:9b:b8:15:9a:85:4b:32:7e:85:
12:eb:36:b8:1f:7c:a0:8a:64:b0:d5:2f:4f:aa:1b:77:ee:6c:
65:89:4d:26:4c:86:bc:ad:32:85:6b:f7:d1:b2:2d:16:c3:67:
8d:cd:17:ca:22:8d:98:fb:dd:99:f0:d6:63:9d:07:cb:ba:7d:
ee:3c:e8:22:a1:0f:f1:fd:32:1b:a5:0a:cd:64:cc:f8:3f:84:
12:c9:60:f6:25:e0:d9:96:09:bc:38:91:44:27:97:b1:35:3b:
00:ff:90:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:49 2023 by rpki-client on console-ams.rpki-client.org