Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/F9KR6hgLLaM68GlnMpd8gQNCI3s.roa
File: F9KR6hgLLaM68GlnMpd8gQNCI3s.roa (raw, json)
Hash identifier: pJOOu0G5qPVCbwasYEWqrNYQeKLOhc7u5YHUvSrc/WQ=
Subject key identifier: 17:D2:91:EA:18:0B:2D:A3:3A:F0:69:67:32:97:7C:81:03:42:23:7B
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 02684C20
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/F9KR6hgLLaM68GlnMpd8gQNCI3s.roa
Signing time: Tue 14 Jun 2022 07:51:44 +0000
ROA not before: Tue 14 Jun 2022 07:51:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212512
IP address blocks: 45.156.30.0/24 maxlen: 24
45.94.4.0/24 maxlen: 24
45.94.7.0/24 maxlen: 24
45.94.6.0/24 maxlen: 24
194.29.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40389664 (0x2684c20)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Jun 14 07:51:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17d291ea180b2da33af0696732977c810342237b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:37:1f:b7:80:c2:93:8a:b6:75:33:1d:05:fa:
a1:e2:33:fd:4c:48:1a:a7:9e:12:b7:5c:c2:30:09:
b1:27:12:b2:0d:9a:a5:68:33:2a:74:f1:4f:c2:9a:
a4:a7:68:f5:fe:eb:5d:28:a9:bf:c2:c3:6a:93:63:
4b:b8:b8:41:5a:14:31:62:28:8a:bb:28:6f:6e:d0:
65:0a:d3:71:80:4d:9a:cf:60:7a:d5:36:cf:44:83:
c0:f5:95:4b:29:0b:f9:ad:f9:05:73:99:16:b1:6d:
f6:27:3a:d7:d1:bd:e6:b5:5d:b1:a5:96:db:21:9b:
c3:53:c1:7c:7c:23:d7:77:fe:0a:bb:fc:1e:43:6c:
77:42:57:44:c9:09:a0:f5:35:8d:41:92:b3:f9:1c:
4b:f1:c8:d8:97:c9:49:e0:0c:65:67:8d:17:8c:33:
4c:c3:0c:cd:8a:31:9c:1a:ad:fd:4f:d7:d8:55:f6:
dc:33:15:de:5d:d0:b4:d9:26:51:58:d0:cb:da:06:
7e:0e:e8:0e:a3:42:a0:11:a4:77:18:0e:ed:40:a8:
2d:38:82:9a:5c:94:56:f2:3b:38:c1:53:80:b7:f7:
b6:27:0d:b0:ff:2a:05:ff:93:c2:de:40:68:9c:08:
87:10:b1:99:f5:86:9c:98:48:2b:62:ca:99:03:fe:
69:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D2:91:EA:18:0B:2D:A3:3A:F0:69:67:32:97:7C:81:03:42:23:7B
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/F9KR6hgLLaM68GlnMpd8gQNCI3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.4.0/24
45.94.6.0/23
45.156.30.0/24
194.29.55.0/24
Signature Algorithm: sha256WithRSAEncryption
41:2f:8c:0b:67:fa:68:d2:7b:94:e6:b9:25:05:89:ba:29:83:
db:59:92:6c:2b:5a:1f:bc:6d:19:a6:be:d2:a3:1d:41:e8:9a:
7a:cc:4c:99:e2:71:6d:e8:26:86:4a:fa:5c:9f:eb:1f:78:60:
99:63:d2:a9:ba:43:50:0c:33:e6:dc:4f:33:76:c4:5a:21:fc:
58:8c:51:9c:b4:bc:c3:71:9b:1c:af:1e:e5:5d:85:34:98:df:
53:9b:e6:74:cf:9a:02:fa:5b:11:53:67:0d:e0:b8:5a:a5:0a:
a4:53:85:41:70:68:cb:33:45:cc:3d:22:7d:54:37:78:f9:da:
3d:de:eb:6b:5d:9c:59:a1:04:4a:58:aa:ab:a7:b8:a2:16:00:
af:85:99:7a:ab:ce:0a:dc:54:ce:0a:c1:e0:b1:50:c3:27:48:
0b:4d:83:9c:bd:43:9b:86:9b:fe:94:c3:22:ca:fd:ec:62:8d:
7c:d4:bc:de:cd:32:b5:d5:49:92:4a:54:b9:f7:c2:c9:39:0c:
d1:9d:25:03:16:b1:e7:33:7a:49:96:fe:5c:1d:04:87:67:d9:
17:21:a6:6c:e5:b0:46:d4:c7:2f:cb:67:e1:80:2e:e4:ab:88:
c7:7e:4d:d0:b1:36:69:d8:6f:fb:c6:2d:7c:12:25:c3:f1:24:
5b:75:3e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:36 2024 by rpki-client on console-ams.rpki-client.org