Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yZQ4gdyI4qRLxdjVVsBewbjk0R4.roa
File: yZQ4gdyI4qRLxdjVVsBewbjk0R4.roa (raw, json)
Hash identifier: uIeK9cy48fHflrHzexNVTr721ETmOz3JlDTTQ5W6gIU=
Subject key identifier: C9:94:38:81:DC:88:E2:A4:4B:C5:D8:D5:56:C0:5E:C1:B8:E4:D1:1E
Certificate issuer: /CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Certificate serial: 0797A52F
Authority key identifier: CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yZQ4gdyI4qRLxdjVVsBewbjk0R4.roa
Signing time: Sat 01 Jan 2022 02:58:45 +0000
ROA not before: Sat 01 Jan 2022 02:58:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208408
IP address blocks: 45.138.8.0/24 maxlen: 24
45.138.11.0/24 maxlen: 24
45.138.10.0/24 maxlen: 24
45.138.9.0/24 maxlen: 24
2a0e:aa40:2::/48 maxlen: 48
2a0e:aa40:a::/48 maxlen: 48
2a0e:aa40::/48 maxlen: 48
2a0e:aa40:3::/48 maxlen: 48
2a0e:aa40:1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127378735 (0x797a52f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1cc5c7b1217ccbb155dddae826ce6f9fdbacba
Validity
Not Before: Jan 1 02:58:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c9943881dc88e2a44bc5d8d556c05ec1b8e4d11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:87:47:d5:dd:18:4d:c7:b6:8e:a3:90:af:f2:
b3:58:69:f4:21:09:e8:26:0e:ec:c3:19:6f:12:38:
f0:5a:ad:14:32:43:c7:70:b8:ff:df:2a:3b:25:cd:
9b:81:22:54:20:5f:22:dd:64:19:cb:7d:bf:25:2c:
cd:8a:d4:26:5d:00:bc:a4:f6:57:36:a3:f9:a0:1a:
18:3b:fd:ac:e6:8e:ff:30:f3:e9:26:69:73:70:d4:
4b:ee:73:e0:62:9d:50:64:c5:06:98:7d:13:02:4b:
35:6f:42:6f:7d:1c:12:2d:7e:86:16:3a:da:7c:61:
14:13:db:5c:48:28:89:f4:b8:e9:11:61:5b:c1:23:
d7:05:b2:8e:a1:6d:87:20:19:13:98:a9:91:51:8f:
4b:e9:9b:12:65:a3:8c:8c:dd:1a:37:81:e4:f8:7f:
f4:a4:06:1e:43:ea:74:2d:7f:c0:cc:80:48:ea:f4:
16:75:d8:ba:0f:1b:a6:fa:b7:03:28:ac:92:8d:e4:
34:78:a5:9b:b2:3e:c7:0d:df:7f:1d:ac:db:10:cf:
6b:8d:5c:b3:25:60:7b:20:0d:0a:fe:d6:8c:0c:16:
3c:10:78:4a:3d:2a:a0:b9:fc:cf:50:5f:79:90:fd:
35:ee:c9:73:28:66:db:1e:54:7c:7e:8b:61:ed:e8:
e4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:94:38:81:DC:88:E2:A4:4B:C5:D8:D5:56:C0:5E:C1:B8:E4:D1:1E
X509v3 Authority Key Identifier:
keyid:CA:1C:C5:C7:B1:21:7C:CB:B1:55:DD:DA:E8:26:CE:6F:9F:DB:AC:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhzFx7EhfMuxVd3a6CbOb5_brLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yZQ4gdyI4qRLxdjVVsBewbjk0R4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aa06f5-0650-4c1e-b8a7-2b623232ff22/1/yhzFx7EhfMuxVd3a6CbOb5_brLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.8.0/22
IPv6:
2a0e:aa40::/46
2a0e:aa40:a::/48
Signature Algorithm: sha256WithRSAEncryption
d3:33:b0:57:e2:84:2c:62:e5:ab:13:42:77:ea:08:85:4b:0e:
74:62:f8:73:88:49:bd:33:49:27:78:c5:88:90:7a:a0:8e:f6:
f1:e6:93:c4:00:1f:75:ae:71:59:22:3a:d3:8f:90:12:b0:df:
2d:c6:7c:30:b9:1b:56:95:3f:66:c0:aa:32:31:12:70:20:d5:
57:f7:11:06:b5:5a:db:6e:1e:8f:21:6d:67:4b:73:0a:a1:da:
e1:ca:c4:0a:00:c7:80:94:d3:be:e0:de:a4:5a:15:80:ae:a7:
38:ac:0c:96:c1:60:6c:b8:e3:e6:23:9d:93:90:b7:5d:d9:c1:
b1:c1:b9:5d:1a:60:ad:75:b9:f4:42:53:bd:33:77:b7:40:89:
bf:84:b1:6f:47:78:67:fe:82:04:34:50:2a:bf:b0:81:3d:dc:
7f:4f:d2:b1:73:e5:f6:ed:ec:07:42:9c:1f:7b:f9:bd:8c:c5:
ca:6b:3b:f9:a4:9e:7c:4f:cb:5f:8e:79:f4:3f:1e:20:fb:2b:
1c:48:3d:73:9b:04:40:4c:04:3e:2c:8e:7b:b1:88:0b:91:23:
eb:a7:2e:14:5a:b1:30:b8:d1:1d:c6:14:bb:d7:82:c5:fb:12:
51:d5:c8:29:4d:5d:0f:a6:2f:05:62:f4:f3:1e:0b:d9:48:56:
99:82:1f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:52 2023 by rpki-client on console-ams.rpki-client.org