Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/p1uiR06WlH3PZfC985qx2UVkVBc.roa
File: p1uiR06WlH3PZfC985qx2UVkVBc.roa (raw, json)
Hash identifier: m2P3/GyV/YwaAeOysSbe/Fj7+WQ+VJIuBWuo5Tol4FM=
Subject key identifier: A7:5B:A2:47:4E:96:94:7D:CF:65:F0:BD:F3:9A:B1:D9:45:64:54:17
Certificate issuer: /CN=c68c65e699b576ab113a79be8828948f1e6cc260
Certificate serial: 0182EE34A10BDFC8819CF4515AACCF6D6C69
Authority key identifier: C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/p1uiR06WlH3PZfC985qx2UVkVBc.roa
Signing time: Tue 30 Aug 2022 10:03:22 +0000
ROA not before: Tue 30 Aug 2022 10:03:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140057
IP address blocks: 45.140.209.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ee:34:a1:0b:df:c8:81:9c:f4:51:5a:ac:cf:6d:6c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c68c65e699b576ab113a79be8828948f1e6cc260
Validity
Not Before: Aug 30 10:03:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a75ba2474e96947dcf65f0bdf39ab1d945645417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2b:fc:31:56:0a:88:ca:d5:ce:92:14:53:be:
94:b4:33:de:d3:39:68:ab:db:39:0b:e8:67:e6:c0:
63:01:a5:08:bc:67:ec:76:91:5f:65:d7:db:b1:b9:
86:da:47:a6:a0:14:9e:80:14:2b:f4:c8:6a:64:89:
f3:ce:72:0f:79:a6:d0:f0:0a:e8:bc:3c:1b:1a:a0:
2e:c3:0e:9d:f0:b5:57:d2:6c:f8:e5:2f:d5:ec:4c:
4b:c7:6c:05:4f:02:f4:70:e9:27:a9:ac:da:c2:e5:
0d:a5:63:f9:66:30:1b:90:6d:d5:d4:ec:c9:b9:c9:
3b:78:74:59:ef:41:3d:af:69:8a:69:24:3c:65:5f:
7a:e4:80:09:18:a4:ba:0f:b8:8c:0a:92:85:ea:49:
1c:13:a1:ca:4a:40:34:1e:ac:76:94:47:1f:23:4b:
8f:03:1f:55:40:bf:8b:d7:e5:e9:08:eb:41:d8:37:
d6:49:68:25:ff:25:ce:18:e4:85:02:81:73:4e:bb:
a5:e3:5c:83:c4:2a:5c:ab:b2:f8:1e:61:cd:33:d7:
ff:52:d8:da:ad:83:49:87:fb:5b:9c:79:e1:e4:c4:
36:45:c1:af:94:32:10:3c:35:e2:63:83:fe:2e:d6:
18:c9:70:85:f1:54:6a:db:28:f2:f6:d0:51:76:fa:
6b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5B:A2:47:4E:96:94:7D:CF:65:F0:BD:F3:9A:B1:D9:45:64:54:17
X509v3 Authority Key Identifier:
keyid:C6:8C:65:E6:99:B5:76:AB:11:3A:79:BE:88:28:94:8F:1E:6C:C2:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xoxl5pm1dqsROnm-iCiUjx5swmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/p1uiR06WlH3PZfC985qx2UVkVBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/340c73-79ee-4926-8e4f-607d4f37f59f/1/xoxl5pm1dqsROnm-iCiUjx5swmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.209.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:a2:af:76:22:c7:1d:5b:e4:ce:f1:86:49:64:a3:56:90:84:
e0:a3:5c:22:b8:b5:62:e1:85:4f:49:cb:48:58:24:ad:f4:fc:
2d:4b:26:29:86:6c:3f:08:23:31:a9:0b:b1:2a:83:a4:14:71:
27:a4:60:43:d5:40:f4:53:c2:6b:54:1d:58:0e:30:58:9d:82:
a7:22:d0:d9:f1:7a:c6:76:f8:3f:72:b2:70:13:23:ff:25:8a:
b5:0a:4d:ad:0b:6f:3f:33:69:4a:c5:0b:7c:61:e1:8c:68:03:
8b:02:b1:24:63:d0:92:a0:a7:4f:1b:b5:df:a0:88:18:b2:b9:
b3:ad:41:c6:ed:f7:ab:4c:4d:06:f4:15:3f:b7:b9:f1:1b:bf:
64:b6:94:db:4c:41:fc:ad:95:a6:69:9d:7a:7b:58:f1:2b:c9:
1c:ce:14:f1:f0:fb:9f:60:87:d5:9b:46:7a:a2:72:40:65:5a:
95:86:96:d5:39:31:7f:d9:ec:84:7e:28:1f:37:9b:af:18:ab:
11:23:33:40:ea:08:fd:2c:60:35:3b:09:e6:0e:0e:88:b6:6c:
40:4f:98:e1:42:56:e1:ca:b9:1b:19:92:36:1f:3b:bf:48:66:
fc:da:90:d7:f1:a3:b0:18:63:78:6e:45:61:57:44:35:2c:05:
63:6f:7c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:57 2024 by rpki-client on console-ams.rpki-client.org