Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jlH2uNsa2q_eSYErPoqCD3JKIMY.roa
File: jlH2uNsa2q_eSYErPoqCD3JKIMY.roa (raw, json)
Hash identifier: fnXOiF+xN8+VrF8ut7DlguguikqaLkkM51yaRKCoQ8I=
Subject key identifier: 8E:51:F6:B8:DB:1A:DA:AF:DE:49:81:2B:3E:8A:82:0F:72:4A:20:C6
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 088117F8
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jlH2uNsa2q_eSYErPoqCD3JKIMY.roa
Signing time: Wed 11 May 2022 07:16:02 +0000
ROA not before: Wed 11 May 2022 07:16:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 45.132.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142678008 (0x88117f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: May 11 07:16:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8e51f6b8db1adaafde49812b3e8a820f724a20c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:da:51:03:75:6e:62:d5:7b:d8:82:53:c9:77:
fd:a3:a2:25:4a:38:29:56:5c:de:81:cb:81:80:aa:
6b:97:41:1e:49:9d:d6:86:02:7d:8d:e7:85:6a:5d:
9c:29:fc:8c:d5:87:fb:fc:d9:6c:f8:0c:d8:bd:3b:
60:2d:5f:1a:99:b4:1b:5d:75:67:0d:1c:5b:a2:44:
b5:f9:17:ff:2a:4a:f5:43:49:7b:f2:40:08:cf:ac:
60:e8:4a:dd:0b:64:80:00:8f:72:c1:7b:6e:15:26:
9d:8a:a7:45:1e:2f:94:1d:5d:9f:9e:b7:5b:21:ea:
cd:1c:a4:9c:35:4b:db:36:bb:10:21:0c:e8:5f:0e:
4d:a6:02:a7:ed:f7:ef:50:c6:c8:ac:3a:53:d4:00:
92:8a:b5:e2:b4:a0:a9:25:94:c9:52:be:f1:9c:9e:
8d:4c:85:50:e0:7f:37:86:24:86:2a:f1:4c:1b:0a:
51:77:a6:6a:2a:47:11:45:2b:d2:cb:e1:7c:45:60:
18:16:ca:9d:7c:7e:9e:ec:d0:2e:6c:c2:eb:28:4d:
37:89:64:4a:6f:67:fb:ad:82:37:b2:f6:e1:c7:72:
fb:ad:ab:4a:81:bd:7b:d8:1a:fe:45:05:8f:c5:a8:
eb:40:6d:87:73:46:1a:ea:fc:f9:25:4d:19:07:4c:
01:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:51:F6:B8:DB:1A:DA:AF:DE:49:81:2B:3E:8A:82:0F:72:4A:20:C6
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/jlH2uNsa2q_eSYErPoqCD3JKIMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.181.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:c4:77:90:1c:6f:08:fc:ea:6d:3d:e1:fd:70:58:40:23:93:
e6:b0:43:42:a6:c6:08:70:1b:48:89:d6:a5:aa:e6:40:b8:af:
d6:23:d3:7b:2c:5b:3a:4c:84:ca:32:a3:c9:bb:a9:52:18:ac:
6b:a3:36:60:20:89:9c:25:1b:59:61:46:d4:86:20:34:81:93:
b8:bb:b6:2e:54:fe:23:f6:b2:e0:d6:14:43:4f:02:d8:85:53:
84:21:e7:14:44:81:fc:f8:7e:94:e7:5a:ad:9d:fd:7e:c6:62:
4f:e8:7c:26:93:56:2f:4d:9e:9b:91:3e:2c:13:66:e6:c0:d6:
ab:57:17:c9:eb:ec:85:00:0a:39:d0:19:ee:c5:f2:1a:39:e4:
ab:16:56:88:ea:fe:94:d5:51:4c:dd:56:af:bc:dd:71:3c:c1:
98:a4:fa:e6:a7:86:43:2c:d1:66:67:a4:18:e8:c5:48:4e:ac:
fa:ff:8b:d5:81:a2:53:55:a4:2e:df:0d:c9:aa:4b:61:0e:0c:
1e:87:3a:57:12:47:91:9b:7d:fe:55:3d:87:b9:74:1f:44:e0:
82:ae:8e:e5:21:47:3e:bd:9e:8d:62:06:f9:f9:f3:3a:e9:44:
97:e5:dc:01:fc:03:db:36:84:34:e3:fd:ba:41:3f:11:2c:ca:
cb:b5:07:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:19 2024 by rpki-client on console-ams.rpki-client.org