Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/xvHlsoX2l4tDQivOiUDTf4QC0Gs.roa
File: xvHlsoX2l4tDQivOiUDTf4QC0Gs.roa (raw, json)
Hash identifier: 1lBs8Opr/qJFHqQbxAMds+5vtS73tHFJEuDnMiWZnfs=
Subject key identifier: C6:F1:E5:B2:85:F6:97:8B:43:42:2B:CE:89:40:D3:7F:84:02:D0:6B
Certificate issuer: /CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Certificate serial: 05532E4F
Authority key identifier: 5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/xvHlsoX2l4tDQivOiUDTf4QC0Gs.roa
Signing time: Sat 01 Jan 2022 06:56:04 +0000
ROA not before: Sat 01 Jan 2022 06:56:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.152.179.0/24 maxlen: 24
45.152.178.0/24 maxlen: 24
45.152.176.0/22 maxlen: 24
45.157.92.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89337423 (0x5532e4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Validity
Not Before: Jan 1 06:56:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c6f1e5b285f6978b43422bce8940d37f8402d06b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0b:e0:77:64:f6:fd:3c:86:06:82:b1:62:00:
47:41:dd:71:ed:89:13:3b:8d:85:61:88:14:35:e0:
a3:03:25:33:cc:80:df:b5:00:e3:00:05:d9:23:c6:
b2:28:3a:73:27:51:1c:c3:aa:1d:f0:90:c4:89:9d:
1e:94:a9:7c:31:fb:c0:5c:82:f8:65:1c:e4:fa:52:
9d:27:a9:bd:b8:35:df:70:82:7b:bc:08:b0:57:64:
29:db:1a:02:81:01:ef:e7:f6:a0:f0:a0:3c:07:ae:
65:92:fa:7b:3e:37:73:80:ae:66:28:26:a9:36:4f:
f7:fc:e5:23:7e:63:25:07:ea:42:df:a3:be:34:5e:
45:af:4a:48:5d:5f:98:73:eb:a1:8c:43:bf:bc:1c:
7b:e6:45:cd:ee:26:a1:d9:7a:dd:fd:61:b0:45:08:
0e:ef:61:8d:17:85:b7:1f:08:82:38:5d:b8:e1:e0:
f9:f5:63:17:36:95:d4:74:71:4d:53:f2:06:41:e1:
51:68:72:12:6f:b7:69:1a:c1:58:53:62:7a:9d:58:
f4:6a:b9:28:50:8c:b8:44:04:c1:a7:88:f0:e7:01:
de:e6:25:c4:34:c8:0e:17:51:60:95:e0:7c:a6:64:
b4:03:f0:43:99:b1:ab:52:6a:eb:67:0d:13:b4:40:
17:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F1:E5:B2:85:F6:97:8B:43:42:2B:CE:89:40:D3:7F:84:02:D0:6B
X509v3 Authority Key Identifier:
keyid:5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/xvHlsoX2l4tDQivOiUDTf4QC0Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.176.0/22
45.157.92.0/22
Signature Algorithm: sha256WithRSAEncryption
51:3a:dc:a5:76:93:01:4e:a9:d0:ab:72:b1:83:21:7a:ed:65:
72:7e:f2:c4:a2:f2:84:a4:86:d8:85:1f:08:89:66:85:23:b9:
75:9a:99:09:33:8e:6b:58:0a:07:1e:4a:7b:8b:4d:92:0b:6e:
b5:78:df:70:00:2a:04:ad:f0:25:3e:b4:71:03:9a:99:c3:54:
c4:a0:c2:d5:2f:7d:00:0f:a5:55:05:24:41:30:09:8e:e4:55:
7d:4d:91:74:c4:47:4e:99:b5:42:c3:b3:2c:c5:4f:81:af:ac:
cd:f4:f1:aa:5b:5e:7a:9f:53:6c:d7:dc:a5:d1:9d:e7:f0:18:
79:ca:af:57:f1:0a:9a:b1:b7:64:a4:b3:51:ac:93:68:e4:59:
65:6e:96:92:82:2c:99:18:7c:80:f7:23:23:9f:2e:dd:fb:db:
bd:8d:a6:e5:87:c0:7c:ae:25:8e:1d:95:c9:07:29:73:bf:e6:
41:89:e0:2d:97:28:f8:ed:91:03:39:a8:0d:e4:4a:84:3d:8c:
75:61:a2:89:d3:a7:7d:9f:94:59:5a:bd:37:e9:0e:26:b2:13:
5d:74:eb:dd:a7:f4:4c:19:f6:ab:92:0e:bf:d3:94:f5:bc:b7:
ca:83:ba:5d:33:da:ed:a8:f6:fe:41:3b:34:cb:43:d9:62:3d:
90:5c:d3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:06 2023 by rpki-client on console-fra.rpki-client.org