Route Origin Authorization
$ rpki-client -vvf chloe.sobornost.net/rpki/RIPE-nljobsnijders/Z6e4n5J5rk4vJZ5Q0nDTLHddmd8.roa
File: Z6e4n5J5rk4vJZ5Q0nDTLHddmd8.roa (raw, json)
Hash identifier: ew9B3MLBsGDXVNvja4aTXj0dvegvupOOhL2UwviQo80=
Subject key identifier: 67:A7:B8:9F:92:79:AE:4E:2F:25:9E:50:D2:70:D3:2C:77:5D:99:DF
Certificate issuer: /CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Certificate serial: C667
Authority key identifier: CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
Subject info access: rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/Z6e4n5J5rk4vJZ5Q0nDTLHddmd8.roa
Signing time: Fri 02 Dec 2022 12:04:42 +0000
ROA not before: Fri 02 Dec 2022 12:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206238
IP address blocks: 45.138.228.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50791 (0xc667)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=caa805dbac364749b9b115590ab6ef0f970cdbd8
Validity
Not Before: Dec 2 12:04:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67A7B89F9279AE4E2F259E50D270D32C775D99DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ee:00:28:49:88:87:ae:34:62:df:57:04:f5:
48:40:56:ac:fd:0e:af:e9:a1:68:64:4c:f2:95:45:
8a:84:fa:2a:82:9c:d5:08:c5:6b:e8:46:9d:d8:c0:
71:dd:a7:4d:ab:6a:11:f8:e3:06:e3:8d:75:7e:f2:
71:35:01:be:6a:e0:31:c5:cf:89:43:46:b7:5e:77:
a0:60:b0:d9:1f:cb:79:36:3f:fc:d7:15:c2:8e:10:
92:96:71:5b:8a:61:5d:1d:7d:45:a4:1a:e8:09:5e:
41:f4:29:d3:8f:fe:0b:e5:25:04:3d:6d:41:a2:9e:
46:b7:dd:0e:43:0d:36:08:58:9f:b8:04:e5:ee:18:
29:f3:5d:97:4f:ce:e2:e2:0a:b7:3b:31:ff:65:a0:
dd:3e:51:b5:3c:91:2a:04:00:96:90:da:a2:49:ee:
20:7f:75:6d:19:1a:80:02:df:79:86:81:b5:63:db:
a8:f9:41:0b:03:ef:8f:56:f1:1e:83:dd:8c:66:5c:
e8:c4:d7:59:93:63:f5:94:ea:e3:21:08:9e:6a:b2:
cd:e7:0c:dd:f0:71:98:09:86:1b:ec:2f:c2:b9:a5:
6a:a8:77:74:84:8d:a8:8f:39:f9:1e:e4:5c:5b:24:
f4:00:34:a2:22:96:bd:39:9d:ae:06:2c:93:2f:df:
8b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A7:B8:9F:92:79:AE:4E:2F:25:9E:50:D2:70:D3:2C:77:5D:99:DF
X509v3 Authority Key Identifier:
keyid:CA:A8:05:DB:AC:36:47:49:B9:B1:15:59:0A:B6:EF:0F:97:0C:DB:D8
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/yqgF26w2R0m5sRVZCrbvD5cM29g.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yqgF26w2R0m5sRVZCrbvD5cM29g.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://chloe.sobornost.net/rpki/RIPE-nljobsnijders/Z6e4n5J5rk4vJZ5Q0nDTLHddmd8.roa
sbgp-ipAddrBlock: critical
IPv4:
45.138.228.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:a5:54:f8:01:79:32:59:dc:16:a5:60:76:16:6e:4a:9f:31:
a3:08:60:d5:17:68:aa:0b:c1:7f:6c:f8:a1:23:ad:9e:50:d6:
58:a6:9f:cd:c4:a2:c3:65:46:51:c2:39:d1:46:da:f5:a0:df:
8d:ec:9f:ac:d9:55:4d:4d:b7:bc:49:c8:72:a3:36:f1:a6:8d:
7e:51:2f:ee:13:c6:43:0d:56:0a:16:e3:6d:06:17:b8:68:5f:
78:dd:e9:42:ac:e7:44:e5:62:74:bc:98:52:90:7d:93:fa:64:
84:00:7d:43:8f:ba:ca:5c:41:55:2c:2d:f5:f4:8e:34:28:b8:
db:7a:b1:73:e2:c1:b0:86:df:0c:ac:ea:38:0e:40:4a:d3:d4:
0c:86:ef:31:c3:da:d2:b8:a5:c2:9d:f5:79:ab:97:4c:2c:7b:
d8:3f:50:aa:37:d4:55:dd:a8:4e:49:de:46:4c:6f:29:55:96:
52:f5:84:db:9a:d6:5b:8f:24:4b:cb:3d:00:a3:ef:79:28:37:
8f:af:88:8f:92:ee:d3:72:c1:44:09:a7:d5:fa:e1:a1:7c:20:
ff:95:4f:03:b7:20:53:f6:9a:e7:2f:67:86:5c:71:57:db:08:
ba:e0:30:ba:13:94:7d:ca:e3:60:8e:97:c7:d8:64:fa:84:e8:
c7:54:8a:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:36:54 2024 by rpki-client on console-fra.rpki-client.org