Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/PQVpW6t1qyDNMOtpdscFADemuF4.roa
File: PQVpW6t1qyDNMOtpdscFADemuF4.roa (raw, json)
Hash identifier: 8TIdYlI0FINE/UrjOSvFSjEdut+MYf2zW15hiEvPeMo=
Subject key identifier: 3D:05:69:5B:AB:75:AB:20:CD:30:EB:69:76:C7:05:00:37:A6:B8:5E
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: DCCFF2
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/PQVpW6t1qyDNMOtpdscFADemuF4.roa
Signing time: Sat 01 Jan 2022 07:00:31 +0000
ROA not before: Sat 01 Jan 2022 07:00:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15924
IP address blocks: 45.156.28.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14471154 (0xdccff2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Jan 1 07:00:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d05695bab75ab20cd30eb6976c7050037a6b85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:55:4b:15:60:cb:97:d5:56:e7:4b:86:73:61:
09:85:a0:b7:08:00:24:58:40:93:bd:6f:02:03:64:
ef:a7:a8:ac:9f:51:b0:2a:ec:a3:4f:fb:a2:5b:82:
eb:4c:e0:1b:e1:d0:c6:e5:e3:9c:20:b3:86:59:cb:
3f:73:46:cc:d2:59:14:04:c2:00:7c:ac:bc:f8:57:
3f:7e:5e:59:a9:c7:1a:c0:3c:b2:f6:22:5e:b4:28:
58:bd:d5:df:66:92:c6:49:66:80:81:76:fc:42:15:
26:b6:be:3d:60:9d:c3:9f:84:a7:71:3a:52:38:fb:
6b:9e:5f:3f:cf:73:c9:46:96:67:20:f8:17:b3:67:
b7:61:ed:2a:3f:0b:b4:f7:36:83:57:2a:73:61:eb:
94:05:96:c5:01:87:d5:58:51:80:b6:4f:b0:aa:8f:
2d:a3:1f:15:ff:04:b8:67:94:22:27:57:60:6a:84:
46:a5:c9:88:98:72:92:00:fb:2f:a8:43:e6:7c:d5:
a0:87:53:cb:f4:21:92:ab:52:46:5e:47:9e:6d:71:
0c:1e:cb:54:94:aa:9b:18:db:f8:64:9b:a7:12:d9:
99:8e:4a:09:73:49:58:56:d2:3b:ea:02:60:71:5c:
04:e3:bc:7b:be:1b:d7:8f:f7:59:fb:94:bd:1e:93:
e1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:05:69:5B:AB:75:AB:20:CD:30:EB:69:76:C7:05:00:37:A6:B8:5E
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/PQVpW6t1qyDNMOtpdscFADemuF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.28.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:29:9d:a4:e7:7f:a3:65:be:c0:b6:88:21:95:01:63:70:a4:
9f:63:23:ea:c5:bc:96:8f:14:90:01:0c:2c:2c:da:53:4c:e2:
3c:07:30:28:a7:65:a7:36:11:ea:8f:15:7d:19:50:84:44:de:
0e:20:7e:71:93:3f:98:f2:d6:e8:a8:91:3e:11:fe:42:31:b9:
bf:05:93:97:4e:6c:3e:7d:c9:ac:9f:30:30:5c:6e:fc:ef:45:
c0:ee:c6:11:09:c2:75:a5:aa:82:70:3c:79:2e:95:07:38:e0:
ea:0d:38:d1:70:1e:a5:aa:ae:71:de:f8:22:d4:b5:88:fa:35:
38:d0:bb:ee:03:6f:98:c0:25:26:67:f3:3b:b8:55:53:ca:e3:
1b:21:a2:09:e8:4e:3e:53:ed:cb:ff:97:2f:21:ae:8c:a7:3c:
ff:5b:67:77:0f:b9:f2:c9:e9:19:72:91:a7:56:0d:38:cf:8f:
26:93:79:30:1b:20:a9:0c:4c:f0:3d:09:1f:a2:18:ee:6c:70:
79:22:d5:22:ef:2d:16:fd:d3:0f:3b:56:70:e0:09:ea:e2:22:
47:61:0a:c3:a1:9b:fe:11:f0:1b:00:3e:a8:62:de:0d:65:2d:
39:39:40:89:a5:9a:07:57:39:bb:b8:17:bf:90:bc:37:44:1b:
a8:a7:22:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:36 2024 by rpki-client on console-ams.rpki-client.org