Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/U5UoJsDV1HjyIxqi6MT0WyJavaQ.roa
File: U5UoJsDV1HjyIxqi6MT0WyJavaQ.roa (raw, json)
Hash identifier: c0U9X9jfMuCMFAYiv/Oqc94XYP/lBRRKBK8iVkvwsYU=
Subject key identifier: 53:95:28:26:C0:D5:D4:78:F2:23:1A:A2:E8:C4:F4:5B:22:5A:BD:A4
Certificate issuer: /CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f
Certificate serial: 0542B36D
Authority key identifier: 6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/U5UoJsDV1HjyIxqi6MT0WyJavaQ.roa
Signing time: Sat 01 Jan 2022 03:57:18 +0000
ROA not before: Sat 01 Jan 2022 03:57:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39452
IP address blocks: 45.13.40.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88257389 (0x542b36d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f
Validity
Not Before: Jan 1 03:57:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53952826c0d5d478f2231aa2e8c4f45b225abda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:57:1d:d4:78:12:b0:78:73:e7:74:73:f1:de:
56:96:84:fe:1e:56:6c:4b:54:93:2b:c0:5a:42:b8:
63:b9:ab:92:1d:22:f2:fa:38:f3:1b:56:32:63:93:
2f:24:e6:42:b4:25:f1:84:e2:d3:f4:79:71:98:54:
5a:01:30:76:81:c9:44:ee:01:cd:a3:88:7a:b8:fa:
02:9d:64:17:c0:65:66:1c:93:84:09:2a:1b:2e:b9:
7b:81:d3:4e:20:26:76:a3:5b:63:22:52:e2:4e:fb:
3a:85:93:f1:4f:db:6d:39:d2:b8:98:ed:9e:65:c7:
c7:3f:cb:de:0d:99:4b:5e:7a:b0:bf:4e:29:53:c2:
00:0a:6f:3f:bd:95:b9:a2:99:4a:18:d5:ba:49:b4:
c1:5a:ad:e1:b0:e5:67:12:d9:d9:1a:fd:63:b4:5e:
2d:1c:78:24:69:79:d4:1f:b5:ce:56:a7:d4:14:85:
49:c9:57:df:db:1f:eb:bf:48:4b:e8:95:9b:8a:0d:
ac:b0:e0:d2:42:aa:f9:08:c5:aa:65:ca:59:1a:7a:
52:b0:18:39:32:86:ae:84:05:61:61:c2:8b:3f:fc:
8d:05:08:96:09:c3:17:39:b4:c6:08:68:5e:a0:2f:
c3:3f:5e:f6:94:f9:f5:e4:a5:4c:39:1e:09:b2:5c:
11:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:95:28:26:C0:D5:D4:78:F2:23:1A:A2:E8:C4:F4:5B:22:5A:BD:A4
X509v3 Authority Key Identifier:
keyid:6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/U5UoJsDV1HjyIxqi6MT0WyJavaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.40.0/22
Signature Algorithm: sha256WithRSAEncryption
8e:91:55:ab:43:fa:46:76:07:1e:c3:5f:a0:45:89:d8:ec:1a:
14:06:83:c2:2e:a0:54:e4:f3:97:5c:d5:07:d1:66:4d:a7:d5:
b6:16:5b:4d:94:9e:f0:ec:ad:c9:6b:10:61:d8:c4:8b:85:3e:
36:da:71:b7:53:6d:e6:6f:72:72:0c:7f:35:be:56:48:2c:d3:
bc:2d:89:d6:d5:ec:6b:b7:a0:74:9f:59:3e:52:b6:de:9c:30:
d9:c4:04:5a:82:5d:5f:4f:c1:29:f7:7d:09:f7:64:b8:27:37:
11:53:6b:2c:e8:71:88:7e:9f:00:ac:5d:21:4d:d4:82:de:75:
5b:f8:9e:bd:83:a6:36:44:7a:74:bf:59:44:af:2c:40:a3:77:
ea:b8:6d:13:de:a5:74:dd:7e:29:8d:f6:4b:8d:ec:87:62:cb:
91:ba:2c:ed:14:1d:1d:b1:7e:b6:65:9c:75:34:ae:79:47:55:
1b:b1:08:96:44:05:f7:25:42:38:7d:fa:bf:56:75:d9:d9:88:
31:ce:ce:86:3e:9a:ec:5d:1f:ec:0e:d3:0e:8b:97:fb:64:e4:
e3:dc:a7:d8:9e:6c:3f:b4:bd:33:d9:5c:b8:9d:d0:e5:4f:6f:
1d:e5:d1:d7:65:0a:80:48:3a:8d:87:d5:4f:79:cd:d4:e4:30:
ec:95:54:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:09 2024 by rpki-client on console-ams.rpki-client.org