Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/M2FleT1xw3IxkUvDjI166rNQ1zo.roa
File: M2FleT1xw3IxkUvDjI166rNQ1zo.roa (raw, json)
Hash identifier: +dznHUCC8Srplzufh07e2QTmpZ3DRf/TNgawv+237KE=
Subject key identifier: 33:61:65:79:3D:71:C3:72:31:91:4B:C3:8C:8D:7A:EA:B3:50:D7:3A
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 0182498F96C1A65F3B8AD17D1FA8A702735E
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/M2FleT1xw3IxkUvDjI166rNQ1zo.roa
Signing time: Fri 29 Jul 2022 10:45:23 +0000
ROA not before: Fri 29 Jul 2022 10:45:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47169
IP address blocks: 45.88.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:49:8f:96:c1:a6:5f:3b:8a:d1:7d:1f:a8:a7:02:73:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jul 29 10:45:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=336165793d71c37231914bc38c8d7aeab350d73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:77:a7:6e:36:8b:71:de:79:e8:24:24:fc:ce:
ad:7c:11:d2:14:12:7b:32:84:8d:74:d4:20:1b:c6:
78:50:26:fd:20:92:c4:08:3e:f5:d6:47:c5:5e:c4:
a9:22:cb:a8:7a:8c:70:07:77:7f:4c:1e:9a:5d:8b:
b4:05:4c:2c:b1:69:0e:68:dd:c7:6e:0f:ac:4a:ca:
07:77:87:40:43:55:b3:06:9d:cc:c8:a9:d5:2f:61:
51:b4:fe:89:1a:76:15:b9:ba:48:da:72:ff:cb:f1:
f5:4a:78:8f:ae:d5:50:86:93:ee:9b:e0:0d:be:c3:
ca:84:39:c8:e6:a8:6f:6a:04:60:2c:08:af:a1:94:
44:52:d7:6f:8a:f7:df:76:18:09:52:a7:3a:13:91:
dc:f1:a8:36:69:bf:cf:12:0f:5f:6b:f7:6e:4d:b6:
d6:d4:09:e9:c8:27:4a:23:49:f2:09:a9:31:00:e5:
74:5f:63:d8:c3:9f:75:82:82:fd:1f:4e:c9:17:6f:
a8:d3:9a:f5:09:7e:10:86:1d:b8:3c:97:04:40:d0:
3d:ce:13:19:e7:31:e8:1e:19:6c:4f:20:83:65:42:
c4:e0:93:49:a3:a1:96:ba:91:b3:f4:06:fa:95:9c:
78:6c:6f:38:a0:6e:a2:85:de:3e:54:48:a5:32:0f:
8d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:61:65:79:3D:71:C3:72:31:91:4B:C3:8C:8D:7A:EA:B3:50:D7:3A
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/M2FleT1xw3IxkUvDjI166rNQ1zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.92.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:b3:8a:c2:45:ce:a5:40:06:4f:98:44:26:40:6c:67:0b:d2:
b2:a3:9a:28:8a:70:3a:83:2b:71:c3:d1:d7:cc:0c:b4:c1:80:
0d:9c:38:97:ac:cd:99:dd:c2:47:a4:be:20:cb:47:8f:a3:ca:
54:ca:be:88:2e:c5:e7:5f:34:ca:41:6a:77:8e:05:3c:16:60:
f0:85:4a:2c:4f:78:41:07:8e:7c:ee:66:36:f9:73:bc:56:f4:
ec:91:8c:be:0b:89:62:b2:11:49:ac:6c:fe:a4:ee:ee:12:0c:
03:df:b6:2f:e8:56:4a:8a:a8:60:db:87:71:24:8d:01:a2:ba:
05:a4:63:13:75:73:a8:ba:15:51:72:12:f5:e6:a8:76:db:c2:
8f:46:ef:db:77:b2:a6:56:7a:8d:d6:f5:07:40:11:26:b3:12:
5d:71:57:79:ca:d7:bf:d0:8c:82:28:24:58:3a:5e:f7:83:28:
d6:de:76:85:18:4b:97:e9:92:0e:81:33:01:d5:ed:a6:6b:bc:
0e:08:d5:be:47:28:8a:45:0a:eb:a0:01:9d:8c:57:19:a2:cc:
55:ea:95:44:31:ab:95:1f:71:af:be:26:86:97:59:2f:f7:62:
89:b8:ba:d0:b4:df:48:b9:f3:99:28:d5:fd:bc:e0:27:6e:d9:
b4:ed:35:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:00 2023 by rpki-client on console-fra.rpki-client.org