Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/VkGxM7ymZivSc17U_vfhLvmNXew.roa
File: VkGxM7ymZivSc17U_vfhLvmNXew.roa (raw, json)
Hash identifier: lWqe4TnR+HuXK4zKUqbUw2jB7C88M2z3DadTRRtV2c4=
Subject key identifier: 56:41:B1:33:BC:A6:66:2B:D2:73:5E:D4:FE:F7:E1:2E:F9:8D:5D:EC
Certificate issuer: /CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Certificate serial: 059AED75
Authority key identifier: F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/VkGxM7ymZivSc17U_vfhLvmNXew.roa
Signing time: Sat 01 Jan 2022 06:02:30 +0000
ROA not before: Sat 01 Jan 2022 06:02:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34309
IP address blocks: 45.82.172.0/24 maxlen: 24
45.82.174.0/24 maxlen: 24
45.82.173.0/24 maxlen: 24
45.82.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94039413 (0x59aed75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Validity
Not Before: Jan 1 06:02:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5641b133bca6662bd2735ed4fef7e12ef98d5dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:24:3a:be:b3:ee:25:6a:2f:dc:6c:2a:a9:03:
71:6a:18:67:d8:9e:c5:19:07:33:91:37:f6:00:45:
53:1a:5a:87:7f:39:8a:2f:db:69:ac:1c:64:00:76:
a8:4f:45:d8:f0:bc:8c:90:be:a8:fc:7d:2b:47:0e:
28:64:12:ba:56:a7:ab:9d:18:ce:ce:88:ba:cc:6b:
94:34:92:fe:e4:70:58:7f:13:29:2e:fb:cc:f6:01:
da:c1:d0:41:83:ea:05:e0:37:7f:0b:7d:25:e9:72:
7d:6c:cd:76:91:f7:4e:66:94:ce:81:b5:2f:f0:e4:
4f:98:2c:7e:5c:b1:d2:0a:fd:83:68:7f:b7:7e:ff:
c4:ea:c3:de:43:32:57:80:fd:21:61:49:c9:42:83:
60:0d:5c:18:b4:31:be:22:13:cb:cb:4d:3b:c3:09:
5e:dd:f2:87:ae:5a:88:da:af:39:9e:ae:18:9b:4e:
4e:1c:f3:7f:9a:7e:11:7c:6a:9f:46:a2:dc:61:1d:
76:35:f6:91:1d:da:b1:bd:ee:14:a1:78:0b:ce:36:
7a:07:a6:bb:65:c2:34:f1:5a:6a:2c:bb:1d:e7:37:
0e:be:21:49:51:8e:60:b8:37:56:b5:29:d0:97:cd:
25:65:62:10:68:5e:d0:f1:39:3b:38:93:0f:5d:10:
ca:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:41:B1:33:BC:A6:66:2B:D2:73:5E:D4:FE:F7:E1:2E:F9:8D:5D:EC
X509v3 Authority Key Identifier:
keyid:F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/VkGxM7ymZivSc17U_vfhLvmNXew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.172.0/22
Signature Algorithm: sha256WithRSAEncryption
82:73:c3:83:69:23:65:28:7e:49:24:fa:ed:e2:ec:8b:77:58:
57:c1:d8:0d:4e:a3:d2:1c:62:b0:a5:c5:dd:74:d6:c2:7d:9a:
68:e9:b0:39:5d:24:5d:61:8e:2c:6e:25:91:45:8c:99:e3:14:
87:c4:7c:74:72:74:f2:4a:51:87:81:cf:66:c8:91:a3:81:98:
42:4b:b0:c6:25:69:3f:59:87:76:df:6d:77:06:33:85:10:ed:
ca:21:88:3c:14:e1:42:f6:93:5e:6e:a7:2c:34:96:9e:76:45:
de:9b:f6:d7:45:7e:f0:24:75:1d:31:80:2a:f0:40:61:05:54:
98:b6:89:48:f8:3a:f7:e6:e2:18:03:68:04:a6:26:45:c0:48:
66:ff:a7:2e:4f:26:df:e9:3f:e2:77:bc:c7:ad:65:4b:b7:41:
f7:34:ff:00:8c:19:b0:1e:8e:95:c2:7b:f2:9c:1f:7a:63:d5:
e0:14:9f:2c:92:53:bd:39:1b:8b:75:08:ee:7d:a5:5c:0d:43:
9d:3e:d9:fe:ea:f7:18:f5:77:59:cf:4e:5c:06:9d:ad:7d:88:
69:44:a1:93:51:23:57:09:e2:64:5b:37:8d:31:a1:0e:b1:26:
b6:19:a0:77:71:34:77:14:86:6b:69:54:76:ce:4a:72:64:3f:
22:e9:12:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:39 2023 by rpki-client on console-ams.rpki-client.org