Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/bcIY-fIx3mhrAna4fGVP0_8PtBc.roa
File: bcIY-fIx3mhrAna4fGVP0_8PtBc.roa (raw, json)
Hash identifier: YmnLDFQLYOqpqo9tW5ptQTBnBFyAvdq540YZPYvsI7A=
Subject key identifier: 6D:C2:18:F9:F2:31:DE:68:6B:02:76:B8:7C:65:4F:D3:FF:0F:B4:17
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 07483BF3
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/bcIY-fIx3mhrAna4fGVP0_8PtBc.roa
Signing time: Sat 01 Jan 2022 12:01:27 +0000
ROA not before: Sat 01 Jan 2022 12:01:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.85.14.0/23 maxlen: 24
45.85.13.0/24 maxlen: 24
45.85.12.0/23 maxlen: 24
193.43.142.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122174451 (0x7483bf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Jan 1 12:01:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6dc218f9f231de686b0276b87c654fd3ff0fb417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ed:71:57:37:8a:c9:e9:72:f1:42:39:78:3b:
12:84:1e:e3:5c:23:2e:ba:90:b3:07:04:e5:1d:82:
19:b7:fc:de:2a:6e:05:2e:67:f9:76:64:07:62:50:
16:2e:8c:00:6a:e9:72:b8:06:4d:93:17:6f:1c:a9:
66:7e:32:2a:97:46:54:61:51:dd:19:b1:9d:09:01:
4e:ab:08:ba:5b:24:45:93:64:9f:a9:ec:d2:9f:ef:
fd:45:1a:30:60:16:99:00:86:26:5b:e6:3a:d9:e8:
74:22:bc:48:a5:67:18:2f:2b:16:82:67:0a:d5:19:
6d:b8:4e:9d:8f:ed:7a:66:84:7d:96:9b:45:a0:7b:
3c:89:3a:ec:02:2f:76:4f:5f:c2:f5:e8:94:a5:bd:
6c:e6:ef:92:a1:be:1a:94:48:3f:2a:9b:32:47:a9:
87:11:ed:66:b8:14:c1:49:f4:05:ba:2b:c0:48:1f:
ae:ab:c8:fa:09:c4:c5:07:9f:2c:40:26:de:39:1b:
29:3d:68:e7:32:33:8b:ab:12:11:4c:bc:2c:95:85:
1a:1a:00:42:70:3a:0c:9c:0f:c4:1f:53:c6:a5:fe:
a7:b3:b5:0b:8d:44:a3:22:8f:6f:d9:88:b0:32:db:
4d:b4:59:56:04:ca:bd:fe:36:d8:ed:d4:74:40:f8:
57:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C2:18:F9:F2:31:DE:68:6B:02:76:B8:7C:65:4F:D3:FF:0F:B4:17
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/bcIY-fIx3mhrAna4fGVP0_8PtBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.12.0/22
193.43.142.0/23
Signature Algorithm: sha256WithRSAEncryption
93:81:11:1c:a3:c4:22:1f:8f:ed:d0:94:04:1d:45:b1:13:0c:
c4:fe:d8:31:72:4e:07:59:21:49:00:b5:2c:74:1c:70:4f:0d:
54:3f:c5:1c:70:12:12:46:97:6c:7a:1d:9d:83:e2:aa:d1:dc:
b7:11:71:d5:2d:1b:81:15:72:42:44:12:5b:e7:60:ee:72:b9:
e0:f1:4b:73:78:4a:7e:32:c9:b2:5c:ca:18:cc:dd:98:b0:03:
e3:d4:00:1d:9a:13:88:71:f2:6f:e4:6f:86:1c:fb:db:3b:69:
7c:e7:bc:13:85:22:02:34:e6:3d:7d:e3:e9:d0:4b:b3:a4:d1:
6b:2c:73:cf:14:c7:01:ab:e8:eb:cd:3e:5d:fe:6a:a5:b5:c9:
02:59:1f:75:c8:cd:65:97:50:35:71:19:4d:d5:3f:48:23:a6:
e3:8a:c6:7f:05:b4:ae:39:f4:76:93:e3:5f:07:eb:db:4f:94:
f5:92:7f:e9:fa:0f:6e:7d:5c:cd:b7:6f:4a:53:3f:18:07:87:
57:52:80:62:30:cf:2a:5e:d7:a8:9b:c0:92:3b:2b:fb:96:ba:
82:e6:55:00:14:0d:2e:5b:e8:9d:9e:8b:31:68:ff:7d:e2:aa:
ed:55:ae:e1:e5:6e:e4:d1:da:86:49:57:b0:e2:1c:3d:9f:a2:
d2:fe:ed:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:30 2023 by rpki-client on console-ams.rpki-client.org