Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/1-E8Bin-WtXyiJfk9CrxjZlu-t4.roa
File: 1-E8Bin-WtXyiJfk9CrxjZlu-t4.roa (raw, json)
Hash identifier: haUl8sde4FFOCohEmBgjLSeXLj7Z9vGsER1AYUm9kI0=
Subject key identifier: D7:E1:3C:06:29:FE:5A:D5:F2:88:97:E4:F4:2A:F1:8D:99:6E:FA:DE
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 370AC3
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/1-E8Bin-WtXyiJfk9CrxjZlu-t4.roa
Signing time: Tue 22 Mar 2022 11:58:48 +0000
ROA not before: Tue 22 Mar 2022 11:58:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39458
IP address blocks: 45.88.144.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3607235 (0x370ac3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Mar 22 11:58:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7e13c0629fe5ad5f28897e4f42af18d996efade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:12:0c:c2:bf:a0:46:e9:81:2d:64:cc:2e:
61:80:be:1b:10:20:ed:ef:c4:04:33:1c:24:13:84:
f1:6c:7b:b6:26:bd:1b:85:e9:07:f8:e3:59:c8:42:
23:18:e9:a0:6f:2c:34:de:32:18:77:ed:7c:c2:2f:
1b:c7:ee:f2:dc:7d:3a:de:7c:fc:34:1a:b7:48:6d:
5c:b9:14:b5:97:1f:0f:b4:e4:fe:59:58:16:b2:2a:
1a:c3:25:a4:4b:94:aa:ef:ab:f7:d0:3a:df:33:a0:
61:eb:4f:5d:b8:55:de:24:30:85:98:48:93:7d:c6:
fa:87:4a:1e:e1:be:1f:c1:38:a5:64:f3:fa:61:61:
07:ca:59:29:71:4f:9e:95:5f:49:22:03:4d:20:d0:
ea:61:0c:db:b8:09:73:8b:df:0e:30:26:dc:67:b7:
04:c4:8e:10:47:db:c9:d1:fe:f0:fb:f0:78:91:fd:
fd:7f:04:69:49:d7:fe:22:48:18:cc:20:9b:5f:04:
d4:8d:c5:f0:60:0f:b4:8d:81:e9:85:cc:9f:c6:80:
b9:2b:d4:6f:a4:18:85:3c:90:78:e2:4c:3d:90:76:
62:a5:22:66:c4:88:34:1f:8f:ae:2e:81:41:b1:05:
18:a1:ff:12:00:f8:3f:a8:6f:42:65:d6:7c:a9:8f:
2f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E1:3C:06:29:FE:5A:D5:F2:88:97:E4:F4:2A:F1:8D:99:6E:FA:DE
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/1-E8Bin-WtXyiJfk9CrxjZlu-t4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.144.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:10:4b:b6:a3:f4:99:0a:73:ea:8b:b1:2d:e2:01:1d:29:b2:
f3:53:d4:9d:4a:a2:e6:a8:25:29:85:ae:eb:d7:30:2d:87:47:
da:d0:11:cb:4f:2b:52:63:ae:ba:e5:af:8f:a7:89:92:2f:0d:
a6:eb:e4:dc:84:2b:d4:58:cb:45:c8:8a:e5:98:ef:df:c5:b0:
cc:62:8b:56:d6:55:3c:8e:bc:a9:4d:42:7c:61:e2:54:29:4a:
f8:ae:62:c5:7e:78:2d:e2:29:ea:4b:57:b8:52:1c:90:ea:75:
e9:5f:7c:e1:9d:c3:fe:70:f8:86:41:54:de:fe:ed:d6:69:74:
4a:e0:b5:5f:d8:2f:fd:18:8f:5d:8b:0c:62:0e:00:54:0f:d5:
86:3c:0d:57:17:35:70:98:72:21:f3:72:4c:42:be:79:32:c4:
e8:50:6f:fe:b7:bf:7f:dc:89:12:a1:bf:43:60:7f:4c:e9:58:
08:c7:b2:be:07:c2:93:99:e5:96:66:86:58:c3:53:c4:46:d0:
38:f6:6a:51:bb:00:b2:cb:4a:37:c8:ab:8f:20:4b:88:1b:c3:
a0:84:d2:47:6b:82:48:a2:c2:3d:39:3b:05:91:c5:c4:8c:cc:
31:9e:fb:61:30:f8:6b:d9:3f:49:d3:da:1e:29:18:c9:c6:27:
12:6d:e8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:33 2023 by rpki-client on console.sobornost.net