Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/7yWRd7zM8wGgH4hEwZexpw828n4.roa
File: 7yWRd7zM8wGgH4hEwZexpw828n4.roa (raw, json)
Hash identifier: MLdPpcIuHE3D5xYBfXQi2ACwvdwYgn0oD4NRAUwFhC4=
Subject key identifier: EF:25:91:77:BC:CC:F3:01:A0:1F:88:44:C1:97:B1:A7:0F:36:F2:7E
Certificate issuer: /CN=d485b6e9d89fb010369971ed88857205985d4918
Certificate serial: 083310C2
Authority key identifier: D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/7yWRd7zM8wGgH4hEwZexpw828n4.roa
Signing time: Sat 01 Jan 2022 07:53:28 +0000
ROA not before: Sat 01 Jan 2022 07:53:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208725
IP address blocks: 45.87.76.0/22 maxlen: 22
2a0e:f780::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137564354 (0x83310c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d485b6e9d89fb010369971ed88857205985d4918
Validity
Not Before: Jan 1 07:53:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef259177bcccf301a01f8844c197b1a70f36f27e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d3:8e:ce:fe:b7:79:10:45:99:29:71:0f:a3:
de:d2:81:fd:0f:64:b5:7c:f8:36:f9:58:0a:09:b8:
68:df:1f:13:9f:48:f6:2f:ea:ee:b0:70:52:8d:26:
66:1c:12:4e:63:59:be:0c:3e:f3:1d:b3:18:4f:a3:
90:1b:09:c8:b6:e6:d1:44:2d:ed:a4:13:e4:10:80:
7e:63:6d:9c:95:c8:ba:31:03:86:95:55:35:5b:34:
4c:3e:66:d7:33:44:2a:b1:9b:97:aa:e5:04:4e:27:
43:7d:07:0d:39:28:5b:0d:6d:f7:73:96:b8:39:15:
5a:b9:23:92:44:6f:0e:fb:ad:62:eb:ea:37:8b:b5:
37:7a:90:86:be:6f:e3:9c:95:55:60:a2:c4:09:81:
93:c4:64:0d:bf:30:53:6a:8b:05:9b:4f:88:8b:97:
9d:f2:9f:29:de:74:82:3c:7f:c8:ff:12:57:6a:2f:
67:81:34:1c:33:b5:a4:9d:36:f6:f0:a7:e7:8f:50:
0c:7e:06:1b:ce:e0:f6:fb:2e:40:3c:cb:77:69:cc:
42:bf:18:77:59:2b:27:30:2e:46:f3:19:41:90:73:
6b:9a:cf:d8:79:2d:0a:22:00:0d:d2:52:43:23:2f:
54:5b:3f:40:7b:e9:88:20:b2:d6:43:24:56:da:d4:
ba:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:25:91:77:BC:CC:F3:01:A0:1F:88:44:C1:97:B1:A7:0F:36:F2:7E
X509v3 Authority Key Identifier:
keyid:D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/7yWRd7zM8wGgH4hEwZexpw828n4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.76.0/22
IPv6:
2a0e:f780::/29
Signature Algorithm: sha256WithRSAEncryption
59:b3:98:21:93:13:7f:66:1e:7f:c6:fc:6f:3e:79:55:75:93:
44:8c:a7:ee:a1:b5:2d:1b:dd:70:75:ee:64:99:c9:7d:80:ae:
6a:6f:82:7e:42:89:62:d8:73:d6:6f:8a:c9:94:99:c7:47:5f:
71:e4:1f:8f:60:8a:ff:e6:8a:f7:fb:c1:a3:a3:62:f4:71:78:
cb:26:36:b5:73:5b:e3:d2:b9:bc:dc:b6:ff:fb:13:98:e7:b7:
41:44:9d:13:2c:40:0c:e3:38:0f:e8:f4:ea:0d:15:0d:35:ff:
a5:2a:e5:a2:f9:68:42:a1:8b:d3:3f:79:0f:ad:89:fa:71:c3:
8c:31:a6:82:45:9c:7b:7a:3a:1d:31:8f:cc:b7:5b:d4:9c:90:
a0:c5:b1:f5:62:95:55:a7:7e:36:9f:db:24:6a:53:9f:e1:af:
cf:fc:0d:eb:bb:91:b4:35:39:8a:96:b2:42:ee:8e:57:d0:e5:
43:aa:89:6a:46:09:ee:72:e2:9e:4d:f6:8c:3b:73:52:2f:9f:
d3:0e:e0:28:61:3e:4b:d7:c4:c3:34:0e:8e:2f:1e:0b:50:0c:
3f:f2:b7:21:6a:c1:b9:0c:09:a3:86:f8:c1:aa:bd:6c:f7:06:
79:5d:fb:91:b9:83:ee:19:3d:d7:11:a7:21:a8:85:e9:7c:8b:
22:79:e7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:02 2024 by rpki-client on console-ams.rpki-client.org