Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/EvClIbisQz6IEn580CW1xhsjQks.roa
File: EvClIbisQz6IEn580CW1xhsjQks.roa (raw, json)
Hash identifier: nN4E+qQ/5fuPfwFt/qOXVsp0sUa7MwTs28rq9ywr/qg=
Subject key identifier: 12:F0:A5:21:B8:AC:43:3E:88:12:7E:7C:D0:25:B5:C6:1B:23:42:4B
Certificate issuer: /CN=1c33fb3b72520b8169a2928d5382e49d675ad060
Certificate serial: 04286642
Authority key identifier: 1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/EvClIbisQz6IEn580CW1xhsjQks.roa
Signing time: Sat 01 Jan 2022 05:04:22 +0000
ROA not before: Sat 01 Jan 2022 05:04:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25465
IP address blocks: 45.83.96.0/24 maxlen: 24
45.83.98.0/24 maxlen: 32
45.83.97.0/24 maxlen: 24
45.83.99.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69756482 (0x4286642)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c33fb3b72520b8169a2928d5382e49d675ad060
Validity
Not Before: Jan 1 05:04:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12f0a521b8ac433e88127e7cd025b5c61b23424b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:05:d7:d3:ca:26:30:be:6e:97:85:d6:b0:3d:
c2:d5:58:44:c4:a1:49:4d:09:4d:8b:22:d3:2e:d1:
66:aa:f6:b6:97:5d:7d:20:26:5f:37:23:db:2e:16:
6e:90:57:f5:d5:bd:ef:9f:09:c5:cb:fe:30:9b:05:
90:f2:78:28:45:c1:d8:36:62:a9:08:1b:0d:2e:92:
09:2a:09:db:47:0d:5e:1a:b1:ac:c6:e5:75:22:7d:
2d:b1:d9:de:ea:9f:9c:ee:49:4d:6d:04:6c:94:ea:
d7:07:78:ef:d5:73:00:68:78:c1:e5:83:b2:3f:0a:
1a:61:56:8e:c2:ba:ba:4a:d4:0d:24:46:1a:05:8b:
b4:45:40:91:48:24:a4:ac:50:9c:d2:6c:2a:b4:ff:
2b:f8:68:88:db:f1:4e:e7:ab:fa:b4:2c:2a:68:9b:
ca:31:ff:83:a7:f8:08:49:5b:f1:1c:e7:f0:64:93:
8f:ac:00:29:d8:63:0f:1b:8b:8c:ac:73:89:71:c2:
e9:c3:fe:96:83:16:d6:49:e2:c8:73:91:f2:25:87:
62:f2:83:02:df:cd:9e:0f:1a:d9:db:c0:77:22:71:
bc:94:6e:4a:a9:6a:e2:95:df:12:4e:b6:88:ca:15:
65:37:b1:bd:20:81:3a:fa:a6:59:52:8e:a5:dc:c3:
ab:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:F0:A5:21:B8:AC:43:3E:88:12:7E:7C:D0:25:B5:C6:1B:23:42:4B
X509v3 Authority Key Identifier:
keyid:1C:33:FB:3B:72:52:0B:81:69:A2:92:8D:53:82:E4:9D:67:5A:D0:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HDP7O3JSC4FpopKNU4LknWda0GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/EvClIbisQz6IEn580CW1xhsjQks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/421e9e-5243-4d20-b447-95045586802e/1/HDP7O3JSC4FpopKNU4LknWda0GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.96.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:66:82:b7:2b:e2:c5:0e:3f:80:29:9c:fb:71:b5:98:22:2f:
50:23:a1:95:5f:fe:2e:88:c7:fb:34:ba:76:85:61:ff:f8:75:
ef:3c:6a:46:dc:0c:15:33:8f:c8:fb:58:1c:f8:88:6e:fb:55:
0d:04:a9:a1:e9:d6:21:9f:d4:59:65:28:96:25:d1:07:a3:8b:
a5:61:7d:26:9a:fe:8c:78:c5:41:0c:f8:6b:cc:b1:ac:83:18:
05:45:79:29:64:f5:49:c0:c0:8c:aa:20:b6:46:e4:3a:e8:92:
69:34:7d:c8:55:a5:1d:86:51:c3:90:ed:a0:31:cb:9b:db:7d:
30:ea:04:3a:99:65:ee:f0:f6:3d:16:63:e2:5d:9b:2a:c9:44:
e1:70:e2:26:29:96:76:2e:66:96:14:69:5c:3e:f4:bc:62:47:
fd:ae:56:1b:24:b2:84:dc:74:7d:fb:14:15:d7:2c:a9:99:01:
21:7d:bc:0e:99:ab:fd:04:72:95:8f:18:5b:28:3d:20:3b:bb:
d8:66:0c:ee:8f:f5:63:75:42:fb:96:13:ef:6d:ef:49:93:1f:
e4:42:93:72:47:79:fc:f2:c3:16:5e:f0:17:dc:36:dd:c3:1a:
4e:b0:34:a7:7e:4a:12:1d:97:b5:98:c2:2b:64:a5:87:68:fd:
fb:c1:5d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:19 2024 by rpki-client on console-fra.rpki-client.org