Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/44BoGJ_AptD6wwpvSMoMSUW8CqU.roa
File: 44BoGJ_AptD6wwpvSMoMSUW8CqU.roa (raw, json)
Hash identifier: H2QP292mvn/nEKojP/BGAD5oUuGqj7wDeb1A623IR44=
Subject key identifier: E3:80:68:18:9F:C0:A6:D0:FA:C3:0A:6F:48:CA:0C:49:45:BC:0A:A5
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0820DCAB
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/44BoGJ_AptD6wwpvSMoMSUW8CqU.roa
Signing time: Tue 05 Apr 2022 07:17:39 +0000
ROA not before: Tue 05 Apr 2022 07:17:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 45.132.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136371371 (0x820dcab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Apr 5 07:17:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e38068189fc0a6d0fac30a6f48ca0c4945bc0aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:3f:27:39:ff:74:c1:de:5c:19:39:da:01:
88:10:e5:89:75:40:88:ca:7a:63:1d:40:99:1f:21:
6c:f4:f8:34:7e:d2:ec:f4:34:fd:51:29:8f:19:01:
aa:38:28:1c:7a:35:42:dc:ba:bf:c6:cd:47:75:05:
e2:85:ef:e8:a9:f3:c1:21:b0:05:ba:15:d9:b2:aa:
87:07:ce:74:77:a3:96:1a:8f:23:af:ff:17:47:6f:
8e:11:80:97:19:41:ef:9e:51:bc:de:76:4d:73:f1:
57:ae:0a:1c:4a:15:29:0f:a2:8b:e8:6f:c5:de:2d:
aa:e8:a0:90:c9:52:8e:62:22:bd:52:53:cd:19:53:
3c:2a:4f:8d:70:34:4e:e5:11:23:46:46:e7:61:8c:
c3:50:35:bb:50:ab:9f:95:bf:eb:15:41:64:52:d2:
9e:d9:f5:c7:23:29:28:7e:a2:11:ab:1d:fe:97:06:
67:28:5d:c3:a5:b4:0d:2c:2f:ff:3d:b7:1a:4c:e5:
2a:fe:54:b1:d7:db:e2:e2:0c:9c:5a:c7:a8:17:08:
a0:1d:a7:f4:03:07:d8:93:9b:a5:ef:d6:88:c4:4f:
e6:23:66:14:f7:73:2a:64:ae:8d:26:9d:91:99:83:
68:93:2c:09:db:ce:88:b7:e7:46:89:51:dd:b1:ee:
ab:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:80:68:18:9F:C0:A6:D0:FA:C3:0A:6F:48:CA:0C:49:45:BC:0A:A5
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/44BoGJ_AptD6wwpvSMoMSUW8CqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.181.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:a3:ba:0d:a1:5e:75:fc:22:c5:f9:cd:18:97:4b:b7:08:02:
ba:5a:8b:b5:b7:d4:8a:59:82:cb:e1:c3:22:5f:f2:26:a0:8f:
21:d5:29:51:cf:3e:76:36:32:9a:ae:cc:95:5f:04:8d:c9:8e:
cb:49:62:5e:2a:68:c2:82:67:8d:d2:3f:d9:b4:f0:8b:2d:6c:
6f:76:77:15:64:c3:af:8f:9e:d0:db:d0:2c:53:7e:c3:b1:12:
7a:1e:cb:f2:4a:b0:22:9e:50:2f:8f:6e:0b:a1:bb:de:44:bc:
f9:61:f5:38:61:84:84:7b:4d:61:90:fc:5f:c6:19:9a:ff:2e:
e2:6f:c1:5e:3f:8b:c5:9d:69:f5:58:3e:91:de:25:f5:46:b6:
4c:1d:8a:a4:fb:be:3f:68:e9:4f:2d:07:3f:53:7e:32:70:99:
9f:d2:45:73:46:2a:5c:f9:41:04:88:d7:e2:ed:25:5b:13:00:
78:db:1c:d0:34:05:9d:78:4b:b8:92:cf:08:49:2a:33:7f:10:
3e:4c:d0:af:1b:b6:50:3b:a3:2a:02:50:d7:8b:5f:a7:2f:b4:
be:d8:89:b6:27:f7:81:08:5a:ad:e2:56:70:2f:77:e5:31:b3:
cb:5e:9e:07:ea:03:50:d9:80:89:95:f5:14:7c:e0:2a:ed:46:
b1:cf:2d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org