Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/eEWEybFBNaTIhdL8eV3byI-cqDA.roa
File: eEWEybFBNaTIhdL8eV3byI-cqDA.roa (raw, json)
Hash identifier: 4LPkBDzycovNZkoZa91aHjQo3caadiNoSTLzs89mOHk=
Subject key identifier: 78:45:84:C9:B1:41:35:A4:C8:85:D2:FC:79:5D:DB:C8:8F:9C:A8:30
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01849E5B515E1A8995280780EC797889444C
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/eEWEybFBNaTIhdL8eV3byI-cqDA.roa
Signing time: Tue 22 Nov 2022 08:01:35 +0000
ROA not before: Tue 22 Nov 2022 08:01:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212669
IP address blocks: 45.151.0.0/24 maxlen: 24
45.138.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9e:5b:51:5e:1a:89:95:28:07:80:ec:79:78:89:44:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 22 08:01:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=784584c9b14135a4c885d2fc795ddbc88f9ca830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1c:fd:a4:28:53:0b:28:59:c2:77:eb:bb:bc:
30:df:39:80:58:9c:91:c0:64:af:59:f3:6b:9f:18:
8b:9c:f0:ef:f7:51:b1:a1:c5:48:b3:86:b8:bb:74:
3e:88:e6:30:ae:2c:cd:d9:13:2f:8d:91:47:99:b8:
47:67:99:a1:d6:d9:30:03:c2:3e:39:6b:68:08:3d:
4d:9c:d1:be:d6:3d:be:34:e3:32:c1:d8:60:62:2b:
04:bd:29:3a:67:4d:15:15:50:01:b2:0c:51:5c:6d:
ed:e0:e8:56:35:a0:fe:9e:fe:f6:78:17:20:6e:44:
09:36:0a:33:3d:e0:06:7f:83:58:a0:99:2e:01:72:
44:98:41:30:03:77:bd:68:26:c9:ed:78:0a:cb:4d:
2c:3e:33:10:01:f7:cc:a2:30:d8:a6:17:31:f7:51:
c6:f5:a1:94:34:fd:4f:d6:0c:e9:2e:b5:53:9e:da:
cd:e2:03:10:19:1f:2c:b2:d6:57:bf:26:f8:b4:48:
bd:c1:44:cd:ad:72:f9:79:b0:0a:27:9a:19:3a:b4:
b7:9d:25:a7:43:a4:bb:26:46:54:62:aa:67:b7:c1:
f9:50:6b:08:a4:c1:ec:81:b8:8b:46:5b:c4:7a:e9:
2b:42:99:47:99:0c:13:c4:62:23:b1:ac:15:ba:9a:
60:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:45:84:C9:B1:41:35:A4:C8:85:D2:FC:79:5D:DB:C8:8F:9C:A8:30
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/eEWEybFBNaTIhdL8eV3byI-cqDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.181.0/24
45.151.0.0/24
Signature Algorithm: sha256WithRSAEncryption
96:63:a9:28:81:95:17:6e:9d:c6:03:8b:50:f5:94:fb:58:4c:
d6:b8:7f:2b:b8:45:f7:37:97:63:b1:c7:6d:8e:c7:a5:8e:ea:
06:eb:2a:96:ba:57:35:d9:96:1a:3d:ec:dd:1d:ab:75:85:06:
95:90:d6:73:6b:94:13:e8:35:a5:7e:43:67:79:ad:26:a3:f8:
35:b3:96:83:d1:5c:33:a0:5a:55:1d:e1:6a:6d:03:38:eb:7d:
3f:1a:b1:c5:ce:2c:8d:6c:26:6f:0f:74:55:ae:60:b0:da:ba:
ec:a3:37:92:4d:73:7c:b0:d6:28:83:fc:f5:25:99:df:c2:2d:
54:84:fd:f6:a6:45:bf:7d:ab:69:68:17:f9:49:43:a8:92:ae:
53:fe:eb:5e:66:a8:6e:81:b1:cf:a8:a6:ca:c2:66:a5:1c:8c:
78:c2:f0:f9:ca:33:e7:c0:c8:dc:72:42:ec:a0:a8:7e:b2:cb:
8e:6a:7a:ec:29:27:3d:dc:dc:ed:0a:b0:eb:40:45:e7:12:8e:
63:55:1b:1f:5e:c1:6e:ca:97:84:ca:6d:2d:c3:39:fc:cf:df:
c3:0c:2e:90:12:44:75:dd:b0:60:7e:dd:12:bb:af:8c:f3:83:
17:94:4b:8d:3c:5e:5a:e3:20:0e:01:16:9b:75:40:1d:6c:a9:
e9:2d:1f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:32 2024 by rpki-client on console-fra.rpki-client.org