Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/T3iy3-pWJ_ar-mbsyKNAlOx9K2c.roa
File: T3iy3-pWJ_ar-mbsyKNAlOx9K2c.roa (raw, json)
Hash identifier: wavy9JyZp4sEu26q4jbFTiOGLj9gtp0xdnMgOequJ90=
Subject key identifier: 4F:78:B2:DF:EA:56:27:F6:AB:FA:66:EC:C8:A3:40:94:EC:7D:2B:67
Certificate issuer: /CN=ded7239db81d61f98d586383ccc125d66106cb30
Certificate serial: 070C8D17
Authority key identifier: DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/T3iy3-pWJ_ar-mbsyKNAlOx9K2c.roa
Signing time: Sat 01 Jan 2022 10:01:39 +0000
ROA not before: Sat 01 Jan 2022 10:01:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47277
IP address blocks: 45.151.240.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118263063 (0x70c8d17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded7239db81d61f98d586383ccc125d66106cb30
Validity
Not Before: Jan 1 10:01:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4f78b2dfea5627f6abfa66ecc8a34094ec7d2b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:80:c6:6c:01:a4:11:7e:69:cb:ae:d3:0f:f4:
61:6f:15:2b:66:b4:f1:16:8d:96:fe:9b:27:70:de:
00:95:e6:b1:43:73:76:6e:69:0f:d3:99:4e:af:e3:
f6:93:c1:ba:c9:4f:ae:c9:a3:19:64:ce:38:85:48:
4f:06:5f:58:6b:d5:75:3a:e1:ed:07:b8:69:4e:a2:
cb:82:e4:20:6a:ea:df:1d:13:41:0c:06:9f:6b:17:
d9:f9:cf:07:48:66:3d:59:5e:27:6d:7e:4f:a4:aa:
80:da:e4:6c:6c:70:74:bb:61:08:ff:3e:62:54:21:
3c:f9:8d:4c:1b:08:2b:0a:9a:bd:ea:f2:6a:8c:f5:
90:75:2b:36:9f:55:ff:d2:0d:07:5a:03:26:62:0c:
a6:44:5d:02:fc:02:cf:2a:8a:c8:93:e3:67:f6:27:
59:15:18:07:7b:ab:cc:d8:a6:96:57:0f:b4:dc:ca:
46:2c:28:03:35:1a:dc:4d:61:32:23:97:9b:c3:05:
ef:36:56:27:8d:67:81:b9:23:ee:45:d1:70:69:c0:
82:4e:0f:76:d0:21:f4:70:65:03:9e:18:fd:a6:5e:
8f:70:d6:b3:81:b6:26:ba:6f:96:30:84:bf:c8:e7:
79:3f:0f:45:c2:28:7a:1f:49:7a:1a:9f:86:e5:0b:
55:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:78:B2:DF:EA:56:27:F6:AB:FA:66:EC:C8:A3:40:94:EC:7D:2B:67
X509v3 Authority Key Identifier:
keyid:DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/T3iy3-pWJ_ar-mbsyKNAlOx9K2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.240.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:b9:46:4d:b7:13:e4:ed:b9:c9:5e:8d:4f:58:1f:d9:3e:a4:
a8:c4:e0:e9:ac:53:62:d8:c0:2c:9f:33:bb:10:52:96:f9:11:
6a:c4:f7:ea:4a:2e:04:ad:81:07:02:75:87:b8:37:b6:9b:17:
01:9a:23:02:e0:d9:d9:4d:70:67:65:0b:26:74:e9:b9:9e:5c:
c9:c4:63:22:e0:ef:70:22:17:e0:ea:5f:d0:88:d0:fb:ea:0d:
99:ac:26:e3:4d:e2:ad:d5:c0:3c:a8:5b:e0:3c:4c:93:50:8f:
11:90:c0:86:4c:49:76:9d:f4:fb:75:02:9d:e2:a3:41:c8:58:
fd:77:01:6c:b5:de:c7:fb:4c:3d:a5:27:79:c5:9f:85:10:f9:
db:bf:d1:0f:5e:88:e7:53:96:5b:ac:3b:62:e3:bb:9d:8d:60:
3c:22:56:93:b1:9b:dc:80:9f:64:fc:0c:14:2a:c8:5e:a5:fa:
30:f2:99:35:ca:bc:fa:fe:30:1a:90:b3:a2:51:52:d9:31:dc:
3f:94:06:76:d5:5b:3a:1c:e0:f8:1c:a2:9b:bf:ef:34:5f:6a:
37:97:27:f5:f7:bf:ee:8f:78:e0:05:75:ac:bc:47:63:85:33:
a4:4f:f9:4a:bf:67:6f:35:cc:67:ba:81:e1:ce:a7:e8:87:c9:
20:fd:0f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:48 2023 by rpki-client on console-ams.rpki-client.org