Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/Clje37DJdEh0-DO1mEbUFtaTlyc.roa
File: Clje37DJdEh0-DO1mEbUFtaTlyc.roa (raw, json)
Hash identifier: /rEHZBYHt0S6YPxDXLYVABfONLCD6uOLiEiRBJ2XBEY=
Subject key identifier: 0A:58:DE:DF:B0:C9:74:48:74:F8:33:B5:98:46:D4:16:D6:93:97:27
Certificate issuer: /CN=a04de87501c7d3082c76659f4debd9428843b4cb
Certificate serial: 02C85E08
Authority key identifier: A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/Clje37DJdEh0-DO1mEbUFtaTlyc.roa
Signing time: Sat 01 Jan 2022 01:59:27 +0000
ROA not before: Sat 01 Jan 2022 01:59:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41529
IP address blocks: 45.131.84.0/24 maxlen: 24
45.131.85.0/24 maxlen: 24
45.131.84.0/22 maxlen: 22
45.131.87.0/24 maxlen: 24
45.131.86.0/24 maxlen: 24
2a0e:5f40:84::/48 maxlen: 48
2a0e:5f40:87::/48 maxlen: 48
2a0e:5f40::/29 maxlen: 29
2a0e:5f40:85::/48 maxlen: 48
2a0e:5f40:86::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46685704 (0x2c85e08)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a04de87501c7d3082c76659f4debd9428843b4cb
Validity
Not Before: Jan 1 01:59:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a58dedfb0c9744874f833b59846d416d6939727
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:01:4b:64:df:e0:2a:32:03:ff:f1:1a:6a:5c:
b6:47:8c:a1:1b:6b:75:4e:8b:20:ca:4e:c6:d3:57:
b0:89:47:e6:b0:ef:35:5c:e5:84:06:03:27:69:a9:
ed:d4:eb:70:1e:78:87:10:2b:32:b8:de:ec:ef:61:
55:fc:77:97:65:2e:93:60:0c:eb:73:be:08:a3:24:
c5:72:22:88:d0:1f:62:5e:9e:89:38:1e:58:af:23:
af:e9:d3:32:25:89:68:f1:3e:41:56:ad:b4:95:b1:
06:2b:39:47:97:66:9b:b4:40:b7:29:af:48:16:f4:
6b:57:f7:c2:d3:5c:37:bd:f7:c2:23:da:6d:c1:91:
a6:a8:41:e4:8e:53:23:0f:11:da:b7:6e:26:8a:59:
c5:d1:ca:cc:b3:5e:b2:30:75:4c:e4:13:5f:38:17:
93:94:d1:ff:36:18:13:02:e8:da:04:1e:8c:69:53:
73:a9:8a:72:b1:8f:85:ad:5f:c6:cd:6c:d6:7d:7c:
3e:a6:93:e4:a4:a3:6e:a2:85:5d:c8:04:fe:89:3d:
5a:58:15:01:8e:51:64:af:f5:29:a5:2c:c0:9f:15:
d9:87:e8:6d:b2:29:59:b6:09:64:14:1b:ae:70:a0:
04:94:3a:b5:24:b6:18:43:09:5c:44:39:1b:b1:b6:
8d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:58:DE:DF:B0:C9:74:48:74:F8:33:B5:98:46:D4:16:D6:93:97:27
X509v3 Authority Key Identifier:
keyid:A0:4D:E8:75:01:C7:D3:08:2C:76:65:9F:4D:EB:D9:42:88:43:B4:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oE3odQHH0wgsdmWfTevZQohDtMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/Clje37DJdEh0-DO1mEbUFtaTlyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/465c90-70fb-4015-b969-748f7878388a/1/oE3odQHH0wgsdmWfTevZQohDtMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.84.0/22
IPv6:
2a0e:5f40::/29
Signature Algorithm: sha256WithRSAEncryption
51:b0:83:1b:5d:e8:44:04:b1:a8:d9:7b:2f:5c:f7:3f:e9:ba:
e6:a9:18:d1:ec:d7:5f:24:35:4e:5a:e8:dd:76:27:21:6c:3c:
d1:8f:26:45:9f:e3:62:84:c8:16:80:60:f1:7b:4f:0b:77:74:
ac:02:7e:9a:c3:57:f2:b0:0d:ff:93:cd:2a:ee:73:56:8b:ba:
a7:0c:5b:07:58:9b:ab:b9:ce:bc:c5:ff:44:de:9d:85:97:c4:
2b:58:98:b2:53:cd:90:bd:02:9c:38:21:b8:ab:48:69:fe:a2:
e2:db:25:e1:f4:69:2e:35:58:c2:b1:01:4b:ce:15:49:2c:47:
73:e8:f1:ff:80:4b:57:e6:42:75:35:20:d7:ce:d6:76:09:f3:
7e:92:3d:af:5a:3d:b7:75:e5:cc:7d:b4:aa:05:a4:da:20:83:
ec:bb:44:4a:9c:8f:8c:bb:7b:7a:bd:cf:1a:f9:d4:47:ac:40:
25:ef:33:f3:da:90:7c:95:fc:43:e8:b7:58:5f:6d:3d:cd:45:
d2:c9:3e:4b:91:c6:b0:c1:7d:f8:37:b4:42:eb:7c:e7:53:ef:
ca:64:c7:4d:a9:41:f6:bb:0c:40:f8:32:4b:ff:c4:23:cf:37:
32:70:82:a7:cd:6e:01:6c:6b:cf:95:d2:e7:4e:46:d1:d8:f3:
ad:90:81:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:15 2024 by rpki-client on console-fra.rpki-client.org