Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/vA_QVSXfnfYgZ92RX_hBerrD54Y.roa
File: vA_QVSXfnfYgZ92RX_hBerrD54Y.roa (raw, json)
Hash identifier: g7Po2Js5iAlKj5rZ77Rx+ZZo83pVq+vssuTqka84ClQ=
Subject key identifier: BC:0F:D0:55:25:DF:9D:F6:20:67:DD:91:5F:F8:41:7A:BA:C3:E7:86
Certificate issuer: /CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Certificate serial: 06AB073C
Authority key identifier: 5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/vA_QVSXfnfYgZ92RX_hBerrD54Y.roa
Signing time: Wed 01 Jun 2022 12:18:35 +0000
ROA not before: Wed 01 Jun 2022 12:18:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8796
IP address blocks: 45.91.82.0/24 maxlen: 24
45.140.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111871804 (0x6ab073c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Validity
Not Before: Jun 1 12:18:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bc0fd05525df9df62067dd915ff8417abac3e786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8a:c3:19:60:3c:bb:72:76:c6:50:71:5f:84:
af:ae:a2:ee:6f:78:44:18:04:80:4b:9c:99:5d:9f:
ff:89:50:ac:df:b2:e5:45:0d:d5:be:fa:a9:5a:13:
81:c3:72:11:50:07:3b:c2:bb:51:cc:e1:cf:87:4d:
3b:00:8b:78:e4:cc:e8:c9:46:35:e2:86:75:e7:79:
fd:7a:08:38:2c:5c:f8:1e:52:8d:f1:37:e3:e6:64:
f3:51:da:ba:43:18:18:96:0c:de:0c:82:60:a5:30:
ca:92:98:e4:fc:0d:e1:12:c4:63:4b:88:24:3d:7f:
dc:95:cf:51:17:28:9a:4d:20:ef:df:c4:6c:8f:0a:
85:40:c3:e1:24:57:0e:24:50:78:d9:fe:da:1a:d5:
db:26:e0:cf:9a:49:91:05:fc:0e:07:3d:13:32:1b:
d4:a8:cd:02:75:17:be:2c:c7:49:eb:a5:66:80:db:
02:94:29:f7:23:8f:35:cc:f9:3a:dc:74:1e:d9:f5:
4a:0b:67:f6:97:28:93:12:74:65:9f:31:9c:76:22:
d0:2f:27:b4:c2:b9:c6:e3:6d:63:08:f8:7d:f6:79:
6b:f6:37:7a:b7:95:b2:f7:79:8a:22:34:4c:15:5f:
85:bc:10:85:ab:b4:de:05:40:f9:d2:d2:f4:9f:05:
38:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0F:D0:55:25:DF:9D:F6:20:67:DD:91:5F:F8:41:7A:BA:C3:E7:86
X509v3 Authority Key Identifier:
keyid:5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/vA_QVSXfnfYgZ92RX_hBerrD54Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.82.0/24
45.140.89.0/24
Signature Algorithm: sha256WithRSAEncryption
61:2e:0c:a3:bc:bb:f4:fd:7d:04:8a:20:07:f4:07:69:02:21:
ed:36:d3:0c:b8:fc:35:c4:c6:e0:6d:b8:6d:85:45:00:16:5d:
28:e5:52:6a:35:d6:37:31:19:23:e9:c0:bd:fb:d6:6c:fc:25:
f2:b4:87:02:8b:7e:88:46:9c:c9:f6:cd:c7:36:eb:22:a1:f9:
9d:63:f4:ff:36:1a:f6:6c:24:96:89:c9:18:dc:7d:f6:09:c8:
ab:ea:62:6d:47:fb:15:c9:b2:0c:c9:d7:27:82:4c:0c:cc:ad:
0d:79:c9:7f:ac:88:b2:90:1a:ec:51:d8:29:86:15:c5:b7:c8:
63:72:47:4d:bf:53:58:63:af:6e:c9:a7:6c:ba:15:c1:d7:cb:
9b:3a:6d:e7:08:9e:81:3a:a1:c9:6b:03:5b:62:15:6f:56:96:
5a:39:cd:8d:be:01:72:20:3a:67:1c:d1:89:a1:ea:d7:da:21:
cf:45:97:9d:36:2f:ab:4b:18:c1:54:cb:e6:6e:68:d2:92:0c:
48:b4:a3:a4:20:1e:79:78:a5:a3:86:38:e5:11:dd:48:53:18:
2f:47:7a:46:72:b4:f9:e9:3e:10:c9:e1:2b:dc:70:34:b3:60:
2f:cf:5a:29:0e:95:64:b0:31:ed:37:77:c4:e3:11:2d:2e:48:
dd:df:25:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:06 2023 by rpki-client on console-fra.rpki-client.org