Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/yGqfNVqESRjH8iXZdpDkzRjVQT8.roa
File: yGqfNVqESRjH8iXZdpDkzRjVQT8.roa (raw, json)
Hash identifier: wIJfMw0dGdtokI+H4ZCrLE2awKsRjGCq5OzMr8u1QHk=
Subject key identifier: C8:6A:9F:35:5A:84:49:18:C7:F2:25:D9:76:90:E4:CD:18:D5:41:3F
Certificate issuer: /CN=179661a164d2d517ea7677fb229cafa19eba97f3
Certificate serial: 07D5D4E5
Authority key identifier: 17:96:61:A1:64:D2:D5:17:EA:76:77:FB:22:9C:AF:A1:9E:BA:97:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/yGqfNVqESRjH8iXZdpDkzRjVQT8.roa
Signing time: Sat 01 Jan 2022 12:56:22 +0000
ROA not before: Sat 01 Jan 2022 12:56:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206804
IP address blocks: 45.128.132.0/24 maxlen: 24
45.128.135.0/24 maxlen: 24
45.128.133.0/24 maxlen: 24
45.128.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131454181 (0x7d5d4e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179661a164d2d517ea7677fb229cafa19eba97f3
Validity
Not Before: Jan 1 12:56:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c86a9f355a844918c7f225d97690e4cd18d5413f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:18:49:a4:e9:54:7e:a6:fd:ee:89:a2:4a:
a5:6f:01:ff:47:95:4b:42:ea:a1:29:db:21:e4:f2:
68:96:88:83:29:ae:a2:bf:0a:23:be:fb:49:93:83:
a2:c6:35:bd:4e:6c:de:c9:1b:74:6e:aa:ce:50:c6:
28:c7:b9:fe:ef:25:6a:f5:0d:7b:4b:cb:76:34:30:
7c:1f:69:85:b6:d5:a9:4e:19:19:23:63:19:dd:b1:
9a:78:cc:91:ce:a8:20:06:ff:2c:b4:ba:65:a9:bc:
cc:01:43:45:6d:c2:b5:06:4e:e2:b3:cb:b9:22:d2:
ca:85:74:32:76:4c:b3:1d:37:6f:35:ac:50:04:cb:
27:ea:e4:a6:8f:07:23:86:27:70:dc:9c:ab:0e:7a:
c2:05:d3:be:bf:93:2c:b1:c9:8a:93:be:e5:1a:e4:
d4:bd:81:1f:42:8c:b2:5b:a1:a5:28:07:c9:56:68:
8f:cd:ef:aa:54:a1:c2:18:1f:13:ab:35:79:6f:27:
be:a7:34:07:50:cf:76:ac:74:dd:01:7c:61:1b:f5:
f9:3f:16:a8:f7:50:e4:d9:49:dd:70:e5:7e:42:f0:
f2:20:c2:4c:0d:4f:f4:f0:aa:c7:71:31:5c:0b:c2:
30:14:2d:70:6c:f7:8f:21:c3:4c:35:6f:56:2f:cb:
7f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:6A:9F:35:5A:84:49:18:C7:F2:25:D9:76:90:E4:CD:18:D5:41:3F
X509v3 Authority Key Identifier:
keyid:17:96:61:A1:64:D2:D5:17:EA:76:77:FB:22:9C:AF:A1:9E:BA:97:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/yGqfNVqESRjH8iXZdpDkzRjVQT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/f84001-664d-4998-8c35-e4f2e0b2350f/1/F5ZhoWTS1Rfqdnf7IpyvoZ66l_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.132.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:a4:42:50:3a:25:1e:1e:4d:0c:de:e9:93:05:e7:1b:4c:5a:
26:7e:cb:54:90:83:8e:32:f6:42:1f:e8:63:d5:21:bc:a1:94:
b2:63:2b:1d:74:11:87:8e:00:8c:71:10:d6:6b:82:88:91:fe:
89:f7:a8:ff:f6:d9:b9:02:be:e6:24:01:e5:89:17:a9:ae:9a:
c4:1c:57:e7:b8:e7:6c:b3:ff:01:8b:bc:4e:5a:a4:a0:0f:5e:
ca:dd:97:73:c0:42:0f:b1:07:f4:04:b3:a0:ac:59:96:be:bd:
e8:90:fb:41:ea:f6:9f:15:c5:da:67:db:bf:ba:bc:b6:28:29:
72:5a:4f:76:ab:1e:db:5b:5e:df:45:86:8c:e7:30:17:29:e2:
f5:be:eb:ae:f2:53:a4:0f:2b:1d:3b:47:a9:a6:1d:66:b7:4c:
b4:f3:63:92:44:79:33:8c:b1:03:61:40:0e:29:f8:90:79:4e:
93:8d:44:6f:12:c6:b7:01:8a:7c:ee:ab:8c:79:4b:8b:da:70:
ea:0f:23:96:00:01:53:72:7a:a9:96:48:36:c2:f9:60:ba:77:
9a:93:f1:81:25:d8:2e:3a:e8:6e:64:63:aa:ce:33:1c:21:67:
53:01:73:84:c8:fc:1d:b4:82:a2:1c:36:22:21:d0:cb:58:72:
b9:de:cf:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:02 2023 by rpki-client on console-fra.rpki-client.org