Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/IvfMpjkViQ3s4uCymYwDaSRwdjU.roa
File: IvfMpjkViQ3s4uCymYwDaSRwdjU.roa (raw, json)
Hash identifier: DkcC2ozWI3mVu3Y121P9023+OJ7Z8yjMajNcgjNNAq0=
Subject key identifier: 22:F7:CC:A6:39:15:89:0D:EC:E2:E0:B2:99:8C:03:69:24:70:76:35
Certificate issuer: /CN=8251e7fb6b960d406b2236d25e4e20e245359db2
Certificate serial: 08478B43
Authority key identifier: 82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/IvfMpjkViQ3s4uCymYwDaSRwdjU.roa
Signing time: Sat 01 Jan 2022 01:57:47 +0000
ROA not before: Sat 01 Jan 2022 01:57:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208804
IP address blocks: 45.13.152.0/24 maxlen: 24
45.13.153.0/24 maxlen: 24
45.13.154.0/24 maxlen: 24
45.13.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138906435 (0x8478b43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8251e7fb6b960d406b2236d25e4e20e245359db2
Validity
Not Before: Jan 1 01:57:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22f7cca63915890dece2e0b2998c036924707635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d2:4f:fe:65:48:18:bb:fa:6d:20:d1:9a:5b:
f6:25:aa:8c:c3:e1:f6:66:3f:fc:8d:72:73:da:d4:
c5:a8:a2:46:58:61:f4:22:10:77:ea:29:26:15:55:
22:70:8a:5b:c5:ef:2e:d6:6e:7f:65:7b:14:ea:70:
05:b5:3e:8f:43:65:06:49:2a:13:11:8f:3c:7b:64:
ff:80:d1:d0:6d:02:41:8a:83:a5:d2:2d:7e:27:13:
01:97:32:4e:f7:6c:62:19:78:84:9e:85:90:59:48:
bc:b6:e7:b4:a7:b4:72:43:fc:05:f6:98:84:cf:ac:
d0:15:3a:f2:e0:04:1b:b8:87:02:86:a6:a2:a9:c5:
82:de:d2:5a:03:f9:2a:a7:07:4b:85:c5:5c:02:fa:
8b:59:41:70:ba:3e:d6:97:d5:d9:4d:05:03:94:e6:
df:35:22:4a:e5:10:91:1f:d2:35:11:bc:7a:ba:09:
93:a3:6f:ca:be:ae:c3:96:2e:8f:7d:cd:5a:46:7e:
e3:1d:1e:01:51:9b:32:42:34:58:cb:47:a9:5e:1a:
1d:7a:99:e0:0b:13:58:b5:1e:8f:06:51:5e:17:be:
86:f1:f3:d3:e6:b4:71:0e:54:fa:86:44:cf:ac:a6:
43:73:ff:ef:68:54:61:ad:02:15:c1:2b:3e:ac:24:
c7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F7:CC:A6:39:15:89:0D:EC:E2:E0:B2:99:8C:03:69:24:70:76:35
X509v3 Authority Key Identifier:
keyid:82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/IvfMpjkViQ3s4uCymYwDaSRwdjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.152.0/22
Signature Algorithm: sha256WithRSAEncryption
10:74:82:89:5a:45:5b:4d:20:d4:be:64:f2:24:90:28:c5:d1:
a8:35:6d:49:25:d1:88:e5:10:d5:5d:2d:42:7e:a5:0c:a6:e9:
f6:b8:c1:a9:30:bb:c2:14:0f:d3:7a:81:65:7d:69:2e:33:72:
75:28:04:b7:59:9c:4d:b1:4c:d4:3d:c2:85:c3:d2:b8:d2:b8:
39:e1:7d:84:91:f3:49:e9:57:1d:a9:35:08:45:dc:8c:72:e6:
de:7e:a8:48:15:04:b0:f7:41:17:0a:fd:0c:6d:99:5b:a3:dc:
8d:f1:26:f4:e1:de:c0:a9:5c:62:5c:ff:51:72:b0:04:57:bb:
ff:1b:be:65:54:a9:a4:4f:8b:fc:f3:f9:db:51:a4:25:61:67:
06:72:0e:93:49:97:a2:70:6d:c2:bf:f6:02:bb:07:a9:21:bd:
17:64:f5:70:92:cf:c1:6c:2c:f4:72:00:e9:ea:5f:80:68:4d:
20:db:bf:8d:9f:e5:f1:6d:69:65:2f:13:d5:f4:a8:81:16:b9:
f2:65:0b:55:af:55:4a:bf:4d:52:a9:7b:35:72:27:95:59:6a:
1a:83:13:d0:02:b0:26:7c:7a:a5:c4:87:c3:00:8d:3a:9d:4c:
0a:6e:20:bc:cc:b3:c1:f0:05:95:c4:5a:e7:07:a8:13:a2:10:
4b:8e:46:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:43 2024 by rpki-client on console-fra.rpki-client.org