Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/X2SF4lEznUEykwkyNnm413OPn80.roa
File: X2SF4lEznUEykwkyNnm413OPn80.roa (raw, json)
Hash identifier: shz7sgGgs7F4Y1wkfbEYjOr+9pecjsbph0clB2Wg4jg=
Subject key identifier: 5F:64:85:E2:51:33:9D:41:32:93:09:32:36:79:B8:D7:73:8F:9F:CD
Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Certificate serial: 0183A70DFABDF89B5B4645ABD05CFE588BED
Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/X2SF4lEznUEykwkyNnm413OPn80.roa
Signing time: Wed 05 Oct 2022 07:30:54 +0000
ROA not before: Wed 05 Oct 2022 07:30:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 45.156.147.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a7:0d:fa:bd:f8:9b:5b:46:45:ab:d0:5c:fe:58:8b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf
Validity
Not Before: Oct 5 07:30:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f6485e251339d41329309323679b8d7738f9fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:eb:7f:ac:e6:cf:be:75:87:8f:02:1d:4b:ce:
0f:c5:8b:d5:81:05:71:53:3a:cc:8f:ba:95:5a:1f:
a5:3d:28:0b:5b:70:45:79:68:0c:59:62:80:4a:67:
40:37:06:c9:75:c0:eb:00:1a:55:b0:df:81:78:21:
d8:65:f0:db:60:67:b5:74:bd:59:85:fa:0a:74:39:
bb:b5:93:8f:6a:c9:6c:28:92:0e:0c:e3:df:5b:28:
e2:23:0e:7e:31:77:ad:e2:be:bd:5d:e7:50:31:31:
99:f7:fb:c0:d5:8c:f6:51:13:ad:ba:bc:fd:d6:7d:
83:7e:c5:df:7c:57:d4:47:db:39:d2:03:28:62:07:
34:19:d8:dd:3d:85:b7:c2:eb:b2:8c:a1:f7:84:74:
6d:8e:59:29:33:a4:8a:dc:9e:19:0d:13:61:6b:2b:
bf:ab:65:83:4f:96:68:e0:12:fe:6e:59:41:7a:40:
8b:9e:92:09:93:29:8a:ab:07:d1:08:0b:35:39:6e:
7d:1d:ff:7e:68:67:3e:8a:6e:89:e4:b5:84:6f:40:
d0:4d:06:0b:a4:d4:7b:1d:2a:fd:0f:2c:7e:21:bc:
bf:35:06:fb:7e:87:9b:b6:65:c1:4f:e1:8e:ef:8e:
b0:01:b4:20:45:f7:0b:d8:b7:f0:06:98:b9:7e:4c:
1e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:64:85:E2:51:33:9D:41:32:93:09:32:36:79:B8:D7:73:8F:9F:CD
X509v3 Authority Key Identifier:
keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/X2SF4lEznUEykwkyNnm413OPn80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.147.0/24
Signature Algorithm: sha256WithRSAEncryption
42:8e:1e:47:13:2e:84:b6:ac:85:9d:7c:fa:a2:dd:07:30:2f:
96:5e:d8:b3:fa:6b:53:ae:c8:8b:cc:cd:40:44:44:bd:60:36:
69:ca:51:5f:9d:4a:80:1f:14:30:91:3b:de:a0:1a:4e:38:a8:
9b:c2:d1:82:5c:77:c4:43:f1:b6:ae:86:89:7b:06:a6:e4:ad:
76:22:40:0d:3d:e0:12:9a:f5:1d:d8:ce:ed:e2:a6:99:25:1d:
49:d1:aa:5b:99:71:db:c0:ce:7c:16:b3:d3:c5:23:e6:5a:69:
c5:e8:51:db:65:48:56:40:8a:52:88:d1:8b:c8:70:14:b7:65:
16:b3:b3:02:a2:5b:ac:85:11:9c:58:1c:f9:fe:c7:10:bb:55:
98:f3:ad:70:82:92:10:51:17:3a:7c:0d:76:1f:d5:d3:c5:b9:
70:60:56:3d:19:43:5a:4c:5e:6e:a8:8f:f4:ae:2c:e8:a4:67:
b0:67:e8:2f:a2:31:be:be:fe:e8:ca:9e:a6:e8:e5:53:a9:04:
c2:18:8f:36:fd:2d:3a:c7:35:37:6d:32:c3:04:c0:6b:e7:77:
c4:57:5b:e1:34:ba:0b:22:97:33:64:74:0e:61:96:0d:c8:c2:
e8:9b:56:7c:01:d8:c0:d6:fb:ca:d3:29:e0:6f:ca:6d:70:1c:
4d:95:06:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:53 2023 by rpki-client on console-ams.rpki-client.org