Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/ctLqrqWgtiLrQgwQoPu32weCW9c.roa
File: ctLqrqWgtiLrQgwQoPu32weCW9c.roa (raw, json)
Hash identifier: c6C67VoffNV9nvOU3iTXBQeHOiBxcGBuGc48+afCQ/g=
Subject key identifier: 72:D2:EA:AE:A5:A0:B6:22:EB:42:0C:10:A0:FB:B7:DB:07:82:5B:D7
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 071D0B44
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/ctLqrqWgtiLrQgwQoPu32weCW9c.roa
Signing time: Sat 01 Jan 2022 12:55:54 +0000
ROA not before: Sat 01 Jan 2022 12:55:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6830
IP address blocks: 45.88.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119343940 (0x71d0b44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Jan 1 12:55:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=72d2eaaea5a0b622eb420c10a0fbb7db07825bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d6:d8:4f:df:88:43:ec:54:4c:57:ad:ab:78:
e0:1e:89:77:4b:f4:f0:b7:e1:c0:f1:34:fa:ce:dc:
61:e4:7a:0a:9b:ba:4e:a1:66:29:5f:08:7d:78:b8:
aa:29:2e:09:de:fa:ed:2a:54:d2:37:79:ac:3d:55:
e1:62:cf:2e:09:50:23:8e:ce:a1:28:cb:27:6d:8f:
0b:68:2c:26:0d:84:73:8a:e8:53:fd:5f:45:b2:b0:
a4:2b:dc:a8:48:8a:33:e9:1b:92:0a:ee:e0:aa:e2:
09:a9:83:31:4a:68:5f:87:08:41:29:69:a6:20:9f:
c6:9b:1e:bb:e7:ae:f4:41:5f:58:27:ea:d2:ad:94:
29:21:bc:fa:1e:2e:a7:c0:a3:37:55:2f:f8:53:a3:
04:62:94:c0:f6:d1:aa:ac:92:dd:ce:7d:2d:0e:09:
b6:f1:7b:9e:e0:5b:02:1c:44:31:b2:9c:ae:dd:1d:
8e:e8:da:77:53:73:5e:2d:60:0d:fc:a4:38:9c:68:
e2:50:70:f8:db:ad:f0:fd:dd:b4:82:4f:74:81:21:
36:38:0b:fa:11:bc:8e:da:db:34:c2:32:d4:ce:00:
7d:52:b5:72:92:c1:ef:0c:f2:56:76:06:80:43:bc:
1e:da:68:97:64:40:ca:e5:8c:6c:0b:99:29:f8:95:
ef:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D2:EA:AE:A5:A0:B6:22:EB:42:0C:10:A0:FB:B7:DB:07:82:5B:D7
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/ctLqrqWgtiLrQgwQoPu32weCW9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.7.0/24
Signature Algorithm: sha256WithRSAEncryption
33:ef:bb:b3:24:99:26:88:92:06:91:1b:b0:86:13:8a:84:45:
db:26:fe:3a:46:ec:6c:0a:99:3a:73:28:03:32:34:76:84:7c:
72:f0:c3:60:1e:87:ad:ca:b8:b8:72:d7:7c:6b:6d:8a:30:94:
b9:23:96:59:64:b7:1e:3f:c6:d5:ab:ef:b1:7b:87:81:bf:28:
25:b3:60:cf:83:83:5d:09:22:0e:85:fe:06:56:21:dc:01:e5:
47:ce:ba:bb:18:ae:2a:97:ed:17:b6:da:26:17:57:b9:fb:e8:
38:ed:4c:4b:01:2d:c9:25:4e:e0:83:77:b0:b7:8a:3f:e9:8a:
ef:9d:cf:bf:97:67:6d:e1:5c:da:2a:8e:44:8f:2a:3d:9d:71:
56:3b:0d:f1:48:63:f1:b1:db:96:9f:d9:b4:56:d8:62:d5:bd:
c1:09:e1:f9:76:5a:47:58:67:e2:56:5e:28:12:ad:ed:64:51:
74:be:6f:b1:20:93:1f:64:dc:b9:ff:0a:e7:58:54:47:73:38:
16:dd:a4:0c:86:0b:e3:ce:8d:e8:ce:79:a7:44:e2:26:92:37:
3e:7e:44:96:0f:e4:5a:41:35:4d:8c:ea:2c:d4:02:a1:0f:9e:
91:d9:55:30:33:c7:f7:06:a4:e7:8d:1a:eb:63:77:a9:df:03:
56:3c:e4:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:07 2024 by rpki-client on console-fra.rpki-client.org