Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_CnxW5kxFUcVrHKo9AUOVAWDcqc.roa
File: _CnxW5kxFUcVrHKo9AUOVAWDcqc.roa (raw, json)
Hash identifier: Dw4lU4mhROdqvzd42ZKNlCA2k8ab56DdRnwRngKA9Jw=
Subject key identifier: FC:29:F1:5B:99:31:15:47:15:AC:72:A8:F4:05:0E:54:05:83:72:A7
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01842F28234412CD364D7DA484D4ABB2BD4B
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_CnxW5kxFUcVrHKo9AUOVAWDcqc.roa
Signing time: Mon 31 Oct 2022 17:47:50 +0000
ROA not before: Mon 31 Oct 2022 17:47:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 45.144.213.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2f:28:23:44:12:cd:36:4d:7d:a4:84:d4:ab:b2:bd:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 31 17:47:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc29f15b9931154715ac72a8f4050e54058372a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:a3:59:cf:fb:d9:31:7d:f9:88:48:ea:03:
4b:b7:5f:50:67:f2:63:8e:e7:36:54:63:1a:31:62:
79:b4:a2:ce:78:a8:64:c2:17:e1:12:00:44:a1:3a:
8e:f7:8d:9b:de:84:52:bd:ae:a5:58:9f:2a:a7:89:
99:26:6c:8c:51:4f:ad:53:93:22:77:20:07:eb:62:
19:d3:e2:eb:08:86:a5:dd:3b:74:a8:ac:0a:13:8a:
0c:1b:fa:81:ba:c7:1f:65:04:c3:b8:5e:ee:13:bf:
7a:48:45:23:75:73:52:f0:8c:fe:a0:16:00:10:af:
11:09:23:a2:f9:91:56:1b:f1:cc:5b:bc:9e:c9:98:
3a:a6:12:98:ec:3f:6c:54:88:fe:6f:8e:6f:1a:e4:
f8:db:ca:92:71:32:78:4d:f2:9f:85:eb:03:95:a7:
9e:a0:2d:57:24:85:82:e9:6d:60:71:3a:6a:f1:1f:
a8:ac:e4:89:4a:b8:22:17:58:c7:d7:c0:10:50:34:
8b:21:e4:c9:ab:5a:69:4b:50:00:86:50:1d:1a:1f:
a0:79:be:79:2e:0a:8e:35:3b:a7:0b:5e:4d:54:3c:
c3:87:33:f0:d3:27:b3:b1:12:80:5a:da:47:da:ad:
02:5a:09:c1:77:f0:c0:d5:1f:9a:34:dc:a9:6d:d2:
8f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:29:F1:5B:99:31:15:47:15:AC:72:A8:F4:05:0E:54:05:83:72:A7
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/_CnxW5kxFUcVrHKo9AUOVAWDcqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.139.0/24
45.144.213.0/24
Signature Algorithm: sha256WithRSAEncryption
07:d8:5b:82:61:60:f7:e7:c2:66:7a:7a:56:4c:6a:a4:75:b1:
6b:ce:d7:3f:fd:7d:69:33:13:8f:07:4c:86:3b:3b:f3:bc:62:
4e:7c:f5:7e:24:01:55:67:45:83:fb:bd:92:7d:1b:e4:ed:58:
b1:d9:02:f1:84:03:45:5f:4b:dd:df:dd:25:b9:7d:c8:4f:9e:
e2:83:7c:4f:a4:bd:87:0d:df:eb:68:ce:da:91:9b:51:8e:1e:
d0:6c:c3:b4:e9:39:51:51:ca:93:f3:c4:4c:aa:c1:2a:b6:35:
3f:de:d5:96:89:b0:5c:bd:65:d7:84:f3:06:5e:ff:65:55:63:
4d:b7:34:27:e9:25:00:ef:ec:79:bf:ca:d4:41:17:40:44:92:
c4:ff:31:cc:ba:23:db:5d:76:c0:e0:a3:9b:42:ed:9c:be:c3:
59:74:55:a3:d6:3c:03:2d:93:1b:d3:29:08:46:fe:d8:c9:6d:
c6:ca:5d:cc:8c:1e:7a:9c:21:4f:df:4f:30:73:cb:d7:f2:b6:
1f:44:0d:f9:fe:e5:cd:d5:8e:05:d2:d4:8a:dd:bd:b7:02:a7:
b7:0e:4d:c2:49:50:36:17:9e:ec:26:22:2f:06:2b:95:b4:a7:
8f:9a:eb:08:f7:2a:8d:01:f3:3e:91:89:03:df:a0:69:c1:cd:
16:4a:dc:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:18 2024 by rpki-client on console-ams.rpki-client.org