Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/g3MJHB0Lt-Z6lGZnww29sZ_pM-c.roa
File: g3MJHB0Lt-Z6lGZnww29sZ_pM-c.roa (raw, json)
Hash identifier: 2zi+hDtUfEPfR9l8xiuLKNUyKSuEKYh/2zNtK/nzWDc=
Subject key identifier: 83:73:09:1C:1D:0B:B7:E6:7A:94:66:67:C3:0D:BD:B1:9F:E9:33:E7
Certificate issuer: /CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Certificate serial: 03806343
Authority key identifier: 33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/g3MJHB0Lt-Z6lGZnww29sZ_pM-c.roa
Signing time: Sat 01 Jan 2022 15:58:03 +0000
ROA not before: Sat 01 Jan 2022 15:58:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 21859
IP address blocks: 45.134.80.0/24 maxlen: 24
45.134.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58745667 (0x3806343)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Validity
Not Before: Jan 1 15:58:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8373091c1d0bb7e67a946667c30dbdb19fe933e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:85:37:0c:c3:06:47:08:72:3d:80:ab:cd:6e:
5a:09:ad:ee:db:82:86:48:be:4e:2e:d5:52:f4:71:
97:de:e3:f5:77:41:50:5e:52:3b:c8:78:4c:f7:28:
e8:67:0f:9b:37:51:6b:3d:47:f7:72:f8:3e:65:80:
1f:bd:07:30:d5:81:1e:b2:fc:7e:c6:7f:9e:6c:64:
04:75:cf:38:92:c0:f4:4b:46:6a:0d:4d:ad:6e:33:
74:7c:3c:9f:18:4d:4e:eb:23:1e:79:91:af:8c:02:
c0:24:54:23:e5:97:df:42:85:43:56:61:b4:c9:35:
30:b0:f1:39:5d:85:6d:f3:57:5d:bf:6a:03:36:b8:
e6:de:be:6c:5b:42:27:88:c9:5c:cf:54:c5:6c:03:
9c:3f:99:a7:0c:78:c0:80:36:b8:26:98:6c:90:71:
60:0f:93:e8:6e:4d:67:0b:6e:3c:10:1f:32:45:6e:
ef:27:50:ed:63:3c:bc:c4:67:90:93:92:06:bd:fb:
1f:22:a2:a7:e2:ea:04:7a:b4:cd:b4:b4:97:9c:8c:
0c:c1:bd:ae:e1:36:a4:db:5b:26:e9:f3:4a:86:f7:
8f:1d:da:b9:05:ea:59:06:b1:a5:77:5b:3c:ea:f4:
f0:5b:72:db:ee:52:b3:50:8a:7c:79:6e:1f:73:28:
a0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:73:09:1C:1D:0B:B7:E6:7A:94:66:67:C3:0D:BD:B1:9F:E9:33:E7
X509v3 Authority Key Identifier:
keyid:33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/g3MJHB0Lt-Z6lGZnww29sZ_pM-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.80.0/23
Signature Algorithm: sha256WithRSAEncryption
a6:47:93:30:97:e4:42:97:2e:a1:5a:74:68:54:a2:f7:fa:7e:
05:f1:8b:23:b3:58:d3:bd:de:7a:41:93:24:fd:3f:a1:de:9e:
13:4b:83:8e:c0:f7:26:9d:59:3e:cf:c6:1b:31:c0:92:36:ca:
c0:98:3e:8d:72:9c:e0:85:ac:7d:26:68:8b:af:e9:4f:a6:f9:
e8:b8:fa:bd:3a:d6:e8:ec:75:9d:f1:14:fa:9a:f8:b0:e6:2f:
f4:65:17:be:64:81:45:4f:41:55:5c:f7:56:c5:b8:fa:a1:8b:
2a:2a:10:bc:09:6a:75:15:41:d6:aa:9e:c9:3b:4b:6d:90:de:
e4:15:5d:1c:da:a6:a4:13:c1:b0:3a:c2:b0:c7:b7:0c:5e:12:
6c:cc:dc:a1:c1:3e:6b:86:e7:53:f4:10:43:63:bc:88:74:3e:
1d:69:50:69:38:fe:d6:49:07:11:e3:c7:af:1c:1b:3f:3b:3e:
77:52:a3:ba:35:fa:a9:5e:83:cf:b1:d7:d5:21:72:fd:74:5b:
f9:c0:dc:c2:05:f8:3d:7c:d2:7a:13:1e:2c:39:62:f9:71:f5:
d4:f2:5b:9b:91:0c:72:ab:73:4c:05:33:33:d7:05:c4:19:c3:
d0:d4:3d:af:6d:13:62:1e:e9:a5:33:60:2d:d7:14:7b:12:b5:
17:91:82:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:59 2023 by rpki-client on console-ams.rpki-client.org