Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/7HZElci8KenMjkmdyRIqnv-eJmI.roa
File: 7HZElci8KenMjkmdyRIqnv-eJmI.roa (raw, json)
Hash identifier: Ydg3r2HecFsDA49NbTqH0JFZnnE3T7X+V85qycNRmhk=
Subject key identifier: EC:76:44:95:C8:BC:29:E9:CC:8E:49:9D:C9:12:2A:9E:FF:9E:26:62
Certificate issuer: /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Certificate serial: 076231BA
Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/7HZElci8KenMjkmdyRIqnv-eJmI.roa
Signing time: Sat 01 Jan 2022 07:59:16 +0000
ROA not before: Sat 01 Jan 2022 07:59:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62579
IP address blocks: 45.129.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123875770 (0x76231ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Validity
Not Before: Jan 1 07:59:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ec764495c8bc29e9cc8e499dc9122a9eff9e2662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bd:63:5b:33:2f:2b:47:08:b3:a8:97:3b:02:
47:3b:23:8f:14:2c:5a:30:a6:e6:60:18:eb:a4:70:
70:e2:6b:8b:7d:a8:fd:f5:9f:e6:ce:fc:c1:73:b2:
41:aa:8e:2a:87:51:c1:0d:bf:4b:7f:a9:54:d8:d5:
18:47:93:c7:35:cf:13:41:f1:bb:d5:e6:c1:33:ae:
5f:21:36:f2:cf:fc:7a:ff:41:37:aa:dc:2b:68:9e:
bb:82:98:89:b3:f5:52:c6:06:90:8d:e2:a2:53:13:
0c:b5:3c:a9:3b:73:df:0d:d2:ec:f0:58:44:3f:4f:
94:b5:0b:66:79:38:a9:6e:b0:cb:fa:6b:dd:ad:60:
e8:84:20:bd:7a:84:db:8c:5e:52:d9:c3:ea:b3:20:
af:f6:a8:a9:00:46:b8:52:02:2e:22:73:77:e0:5a:
39:c3:cb:65:f9:72:5d:ba:27:6a:56:96:20:84:99:
a4:31:02:94:58:e3:f6:1d:ff:13:8c:86:a4:2c:90:
1d:03:58:37:df:80:f1:3e:0f:6b:7e:db:07:c7:f7:
7e:cf:f1:f4:f8:8f:27:d1:3b:01:b3:71:8c:8f:00:
16:7b:0d:a9:c0:ec:6e:58:ea:56:2e:96:e2:a1:3d:
59:11:e3:78:dd:de:40:af:ba:3e:2c:c8:31:88:0b:
59:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:76:44:95:C8:BC:29:E9:CC:8E:49:9D:C9:12:2A:9E:FF:9E:26:62
X509v3 Authority Key Identifier:
keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/7HZElci8KenMjkmdyRIqnv-eJmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.194.0/24
Signature Algorithm: sha256WithRSAEncryption
36:90:97:35:68:22:1d:ed:3e:99:68:7d:01:b4:5c:32:e8:36:
53:1d:90:03:4b:75:9d:34:6e:ac:69:e5:2a:48:43:55:4c:91:
1b:a1:0a:3e:ee:a8:2e:7e:cb:c5:ad:c2:42:98:91:b3:23:ed:
77:05:b4:34:11:2c:c6:9f:79:3e:a3:cb:15:5f:73:76:b7:4f:
26:28:db:91:87:a4:02:76:78:43:70:23:d9:c2:d6:bb:10:12:
83:be:36:5a:2a:43:3f:b9:bd:e8:17:d6:c5:13:5d:b1:30:77:
f3:e0:75:5d:db:4b:78:dd:2a:bc:c4:4b:f1:09:37:14:cf:cf:
01:b4:e4:dd:07:c9:0c:ee:b7:b3:7d:16:67:82:dc:e9:16:c6:
84:1d:1f:b1:a6:bf:aa:f1:4a:a9:5e:6b:ba:19:a7:3e:ea:15:
52:e2:ef:f2:fd:1b:b9:d7:1e:3e:17:bb:b2:ef:d4:12:21:ce:
74:91:5b:4d:45:52:47:1e:d0:16:ce:22:66:2c:86:f8:ad:67:
f3:8c:c0:e5:eb:a1:45:f6:bf:b6:c7:1f:af:64:23:ed:c5:1c:
4d:a1:48:3b:f5:04:e2:ce:51:f1:54:af:f5:ab:ba:d1:b3:82:
d7:3e:48:7a:f1:03:23:1e:5c:f6:c5:de:08:8b:24:34:cb:05:
09:70:ff:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:57 2024 by rpki-client on console-fra.rpki-client.org