Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/sDKP0hQ__JqShKi_yZkwqRIcJXw.roa
File: sDKP0hQ__JqShKi_yZkwqRIcJXw.roa (raw, json)
Hash identifier: LmjbRsV+0ZwP71HLasl/c207mPK2zKdUNvTqmB7gSpY=
Subject key identifier: B0:32:8F:D2:14:3F:FC:9A:92:84:A8:BF:C9:99:30:A9:12:1C:25:7C
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 01837995DF5010749DB32CEFC6374F99E859
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/sDKP0hQ__JqShKi_yZkwqRIcJXw.roa
Signing time: Mon 26 Sep 2022 11:36:48 +0000
ROA not before: Mon 26 Sep 2022 11:36:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23959
IP address blocks: 45.95.224.0/24 maxlen: 24
45.149.4.0/24 maxlen: 24
45.149.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:79:95:df:50:10:74:9d:b3:2c:ef:c6:37:4f:99:e8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Sep 26 11:36:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0328fd2143ffc9a9284a8bfc99930a9121c257c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ae:de:a8:5f:55:9c:fc:cf:24:ce:57:f5:c7:
c0:cd:2e:fd:4b:a8:fb:3f:21:12:a9:cc:e1:7f:b4:
e5:78:78:94:10:61:31:d1:e5:5c:78:3e:89:6a:3f:
b7:54:a2:8c:af:e6:94:33:fe:c6:58:dd:0a:28:8d:
62:3b:b8:7e:75:33:39:dd:05:85:54:91:ea:94:dc:
7c:ca:81:35:a9:68:2b:e6:26:99:7c:50:c7:03:be:
a8:75:bc:9b:98:02:20:15:c5:c9:dc:53:45:33:6e:
1a:f0:3a:05:fa:4f:ae:35:e4:59:6b:dc:e4:66:15:
c5:5c:64:81:7d:88:45:ab:13:25:d0:8a:55:c4:52:
b9:b1:4a:09:2e:26:7e:7e:8e:36:d5:09:3e:14:7c:
79:96:10:c5:c6:f2:c0:05:69:6a:76:bc:0a:51:e9:
aa:76:cf:ba:eb:87:8b:93:84:10:9d:d7:39:bf:3b:
b6:90:d8:b3:79:06:a3:e7:02:a3:e4:43:7f:98:d9:
d8:f8:bb:30:b8:fd:f6:76:f3:c2:50:3d:88:a2:ab:
19:4a:cb:3b:67:cb:34:f4:c0:16:ee:69:53:56:89:
2c:87:a8:71:ca:ee:98:e8:fc:86:34:57:e8:df:ed:
c7:4e:5a:0e:b9:02:b6:ab:ab:70:df:1c:60:7f:a1:
c6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:32:8F:D2:14:3F:FC:9A:92:84:A8:BF:C9:99:30:A9:12:1C:25:7C
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/sDKP0hQ__JqShKi_yZkwqRIcJXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.224.0/24
45.149.4.0/23
Signature Algorithm: sha256WithRSAEncryption
99:46:c4:11:ce:ba:94:c8:3a:0b:8c:d8:e6:73:a7:50:ab:83:
c5:04:86:ed:03:7e:b9:cc:e7:02:a5:98:75:d5:0b:4b:87:81:
95:90:1c:14:82:c2:ae:38:b1:62:cc:49:b8:9a:d5:86:5d:d2:
69:31:22:5a:01:73:0c:c6:ef:c7:30:e6:28:bf:58:89:c0:be:
8e:a2:b4:53:6f:4d:fd:30:e0:bf:05:df:52:3a:a0:7f:a7:9d:
61:a0:ed:bc:75:a1:03:5e:9b:f7:a5:69:f7:8e:ae:58:f5:2f:
41:7f:6b:da:c8:06:0e:c6:61:ed:58:0d:c6:a6:a6:fa:1c:09:
1f:eb:60:00:0e:7d:be:24:eb:7d:1d:f6:b7:25:ec:f7:ef:01:
d2:1e:1e:7b:80:e3:6d:86:04:ec:aa:5c:29:08:05:15:9f:d6:
4d:aa:9c:bb:e3:5b:0b:48:07:0f:df:9f:2b:0c:96:40:f1:ab:
12:f7:3b:1d:2d:bb:33:9a:f8:51:1c:2d:ad:1d:61:c3:70:c5:
39:0a:eb:e8:3a:59:71:55:58:d9:f1:57:bc:d6:ed:4c:31:8c:
5f:6b:73:81:f8:8e:8d:6c:ec:d6:2e:46:00:3f:3e:c5:23:17:
0c:92:bb:94:c4:cc:fa:56:a3:5d:17:bd:37:7f:cd:52:54:50:
80:64:7e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:56 2024 by rpki-client on console-ams.rpki-client.org