Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2cc16e-74e4-41ea-abee-05aa5ed47741/1/lrAFVboTrnBinaqLDCsX_3BgN7E.roa
File: lrAFVboTrnBinaqLDCsX_3BgN7E.roa (raw, json)
Hash identifier: DERtmWwjsbC0m22GOw32Vz1mqDxsK99XllvlkD7xTr8=
Subject key identifier: 96:B0:05:55:BA:13:AE:70:62:9D:AA:8B:0C:2B:17:FF:70:60:37:B1
Certificate issuer: /CN=51c3324c0d7886f5fb17cc8d2672cd247aad2264
Certificate serial: 05FBBAEA
Authority key identifier: 51:C3:32:4C:0D:78:86:F5:FB:17:CC:8D:26:72:CD:24:7A:AD:22:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UcMyTA14hvX7F8yNJnLNJHqtImQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2cc16e-74e4-41ea-abee-05aa5ed47741/1/lrAFVboTrnBinaqLDCsX_3BgN7E.roa
Signing time: Sat 01 Jan 2022 04:59:55 +0000
ROA not before: Sat 01 Jan 2022 04:59:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43915
IP address blocks: 45.143.112.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100383466 (0x5fbbaea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51c3324c0d7886f5fb17cc8d2672cd247aad2264
Validity
Not Before: Jan 1 04:59:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=96b00555ba13ae70629daa8b0c2b17ff706037b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e7:0f:a3:95:0c:7b:81:04:0b:ba:16:db:7d:
dc:3a:fb:9e:f7:dc:5e:38:1f:a9:02:25:b1:24:4a:
f9:b5:3b:ef:99:02:af:ab:0d:eb:36:a7:22:50:f8:
51:22:a3:19:84:60:c0:ff:d5:2c:29:47:58:97:42:
3f:ea:ba:9e:74:47:25:01:89:6e:bf:8a:18:e4:8e:
86:51:62:e1:f8:bb:09:7b:dd:b1:10:98:11:43:61:
47:74:34:21:88:4e:c8:2b:c5:72:95:b0:df:0e:a5:
d1:5c:c7:8c:e4:bb:98:e3:a3:6d:86:b3:cf:1c:42:
47:73:74:f8:78:11:54:46:73:7f:78:b2:1f:cc:1d:
a2:52:fe:c2:93:ba:34:26:03:01:f2:12:f1:ee:e7:
ae:df:19:6c:47:be:fb:d6:05:d3:36:73:0f:8e:b2:
87:55:16:ea:3e:5b:bc:f6:ab:99:b9:5f:a6:82:5d:
89:91:74:d9:63:bc:95:e2:72:e5:e2:6d:b8:d1:ef:
99:72:09:25:1e:d3:92:05:b9:e0:06:26:af:8f:63:
3c:73:c4:f9:42:d2:61:c8:54:84:c2:07:fe:e8:f3:
9e:d3:ce:93:c3:b9:bb:d3:56:1e:71:80:f4:56:ba:
c5:dc:3f:e4:34:0e:56:2d:a4:25:92:23:64:b6:cb:
5d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B0:05:55:BA:13:AE:70:62:9D:AA:8B:0C:2B:17:FF:70:60:37:B1
X509v3 Authority Key Identifier:
keyid:51:C3:32:4C:0D:78:86:F5:FB:17:CC:8D:26:72:CD:24:7A:AD:22:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UcMyTA14hvX7F8yNJnLNJHqtImQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2cc16e-74e4-41ea-abee-05aa5ed47741/1/lrAFVboTrnBinaqLDCsX_3BgN7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2cc16e-74e4-41ea-abee-05aa5ed47741/1/UcMyTA14hvX7F8yNJnLNJHqtImQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.112.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:0d:ca:73:0d:c8:84:ca:fd:35:3d:4e:20:50:bc:9e:b1:a1:
b9:8b:0e:2d:e2:60:b2:8a:22:76:b6:55:d3:d2:5f:b6:a7:43:
cb:24:bf:18:b0:e5:a2:9d:54:34:56:ce:1e:98:ca:70:8a:11:
54:cb:c6:a5:6f:9b:f6:73:a5:d5:62:fc:e5:07:c5:1d:20:59:
0e:73:d8:3b:42:38:ab:f3:44:c4:a7:88:db:e9:50:fd:eb:c5:
f6:3d:83:47:db:2e:b1:23:4d:ee:ea:c3:eb:0b:b1:d8:df:7d:
51:82:48:d6:2b:9e:c0:e9:21:01:3b:10:d1:93:65:cd:55:c5:
34:e0:43:37:d2:1f:e6:3b:97:29:91:53:4c:67:78:9e:d3:42:
66:5f:3d:29:ea:ba:b3:24:50:f0:97:df:38:bf:ca:d3:01:6d:
b6:03:f0:81:7a:44:ec:17:84:2e:e0:f4:a0:61:6e:5e:c9:02:
07:61:76:bd:17:59:db:d6:12:c7:30:03:1f:86:63:a6:fa:c0:
94:4b:f7:6c:53:c5:45:b7:a7:49:89:37:c5:3d:19:25:48:ff:
83:41:8d:bc:50:fa:85:a0:5c:51:86:1d:0e:64:7d:d2:19:3d:
11:52:51:fb:77:aa:ef:34:37:ae:d6:4f:d0:7e:ae:a1:ed:16:
61:e1:9c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:19 2024 by rpki-client on console-fra.rpki-client.org