Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/rroe5_ZuAYD4ROBCRrQf3GgHl6U.roa
File: rroe5_ZuAYD4ROBCRrQf3GgHl6U.roa (raw, json)
Hash identifier: LvoPiLDS41OxVN8bRwE7ID7Q7ZZYRrjp5S3mzKa44Xk=
Subject key identifier: AE:BA:1E:E7:F6:6E:01:80:F8:44:E0:42:46:B4:1F:DC:68:07:97:A5
Certificate issuer: /CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Certificate serial: 05A040B0
Authority key identifier: 42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/rroe5_ZuAYD4ROBCRrQf3GgHl6U.roa
Signing time: Sat 01 Jan 2022 15:03:23 +0000
ROA not before: Sat 01 Jan 2022 15:03:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 45.86.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94388400 (0x5a040b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Validity
Not Before: Jan 1 15:03:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aeba1ee7f66e0180f844e04246b41fdc680797a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a8:6f:c4:b8:5d:a7:e8:84:ca:49:ff:74:47:
30:88:7b:2f:16:14:f9:f4:20:df:0f:8f:f2:a9:a0:
ed:eb:e8:ac:fc:03:f9:48:0d:3d:54:d7:2c:77:d3:
71:aa:9e:0d:32:44:fe:0e:1a:b8:06:63:a1:6f:be:
9e:9c:05:bd:93:a9:9a:4a:30:9f:77:40:4e:a7:90:
31:67:5c:6c:48:65:eb:01:b8:81:e5:ee:c9:32:55:
98:7a:79:31:75:0b:19:34:1d:b6:1e:2a:85:49:91:
3c:11:ed:6b:13:4b:04:b4:dd:de:da:8d:9a:1e:71:
da:9a:0a:14:e7:c9:d7:24:d1:15:ee:1c:72:99:42:
f2:07:19:d5:07:b9:a6:36:a7:1e:8b:2c:de:42:e8:
a8:bc:81:a8:20:ae:5c:a5:f9:f4:cf:88:71:96:9e:
95:63:a3:96:33:fd:1e:7a:c7:87:21:78:32:b8:cb:
6f:37:35:db:64:64:ee:33:d5:da:cb:57:51:f7:29:
32:dc:d1:e2:45:97:44:dd:ac:a1:ca:61:5f:b0:24:
ed:c4:0f:ff:d9:f1:87:d1:0e:3a:97:bf:b0:8f:f0:
d8:a1:70:bc:5c:82:4e:d0:f0:24:14:6a:bf:41:d9:
4b:50:b5:28:fd:84:d6:90:46:0c:be:a7:ca:10:95:
a9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BA:1E:E7:F6:6E:01:80:F8:44:E0:42:46:B4:1F:DC:68:07:97:A5
X509v3 Authority Key Identifier:
keyid:42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/rroe5_ZuAYD4ROBCRrQf3GgHl6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.112.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:6f:69:89:3b:4d:bf:e1:8f:08:82:a2:36:51:d8:0a:52:ac:
e1:9a:54:18:00:8d:fc:18:72:e7:74:e7:8c:76:c5:eb:00:6f:
ee:21:03:df:8d:30:8f:ff:13:c1:75:31:07:7a:ac:9e:76:e3:
97:d2:40:a0:fe:41:de:3c:b5:49:5e:88:98:09:1d:ec:3a:ae:
f4:59:b9:4a:17:83:2a:3d:0a:79:b3:7c:5f:7d:98:ac:dd:97:
36:0e:36:8f:af:fe:5c:b0:71:c1:cd:21:57:06:7e:61:43:26:
77:62:01:31:cd:3d:2c:31:2a:36:64:03:00:c6:d0:cf:27:cc:
bd:1e:f5:6d:4d:ca:dd:ed:6b:75:d0:c5:2c:98:61:0d:43:0f:
10:ee:a3:26:e8:84:af:aa:d4:1b:2f:18:11:10:85:a2:e9:a2:
54:4c:56:71:5f:a8:58:f7:1e:4f:52:e0:6a:dc:52:c1:6e:01:
ac:f3:7e:d8:72:0f:96:72:e8:b9:71:fc:67:2c:fd:96:68:89:
24:48:5e:d5:86:34:3f:bb:94:7e:73:e3:12:e3:58:4c:b7:bc:
4b:8b:0b:48:5f:3f:b6:1f:e6:ae:7a:c9:9f:cb:97:d7:93:1c:
41:0b:98:78:9d:ad:ac:3a:5a:78:15:37:4d:2f:e7:ee:1c:7a:
9b:73:0f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:43 2024 by rpki-client on console-ams.rpki-client.org