Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/RQRLrtzxEEgZTV8xjmAKhq9-eVw.roa
File: RQRLrtzxEEgZTV8xjmAKhq9-eVw.roa (raw, json)
Hash identifier: zOQEvh33nQENfTI7KGkUTHgvoQas7WouussjfTtAO88=
Subject key identifier: 45:04:4B:AE:DC:F1:10:48:19:4D:5F:31:8E:60:0A:86:AF:7E:79:5C
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 0184B5E4F30FB90B310AE460385D9163E622
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/RQRLrtzxEEgZTV8xjmAKhq9-eVw.roa
Signing time: Sat 26 Nov 2022 21:43:11 +0000
ROA not before: Sat 26 Nov 2022 21:43:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12312
IP address blocks: 141.98.44.0/24 maxlen: 24
2a07:6f46:4400::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b5:e4:f3:0f:b9:0b:31:0a:e4:60:38:5d:91:63:e6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Nov 26 21:43:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45044baedcf11048194d5f318e600a86af7e795c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a8:93:21:fd:96:bb:1d:71:cd:7f:6b:04:02:
a2:cb:9c:e5:10:0f:89:f7:f6:c1:73:6e:89:15:34:
29:17:2b:77:03:10:f9:37:15:4a:bf:58:2f:4a:ff:
bc:cc:39:07:e2:3f:e4:02:4d:41:4b:30:f4:1d:17:
87:8d:84:cc:dd:86:3e:c9:5d:51:31:29:b8:85:17:
93:02:0c:a4:ce:6c:12:5c:1f:45:c0:44:46:56:57:
44:5d:6c:d6:ad:64:a3:d9:42:06:4c:0d:d9:84:05:
d4:c6:7d:3d:57:02:31:ca:d4:bd:59:b2:5e:13:f3:
82:60:ab:37:9b:d3:4d:0e:8d:35:c0:17:3d:a5:55:
7c:a3:3d:6c:68:25:a7:b6:67:05:45:0e:ad:d6:95:
41:47:1b:ef:69:4c:78:97:28:5a:8a:0f:c7:70:1a:
45:0b:51:46:0f:ed:b5:9c:dd:c8:9a:76:7c:3d:26:
b6:cb:1e:c0:82:2f:3d:ed:24:2b:10:8a:9b:fd:ab:
d3:29:2c:81:d9:16:0d:5b:ae:88:4f:71:0b:e7:cf:
06:0b:d9:56:cf:34:74:dc:9c:dc:bf:7d:f7:61:74:
58:5d:81:57:9b:af:8f:e1:a2:6b:81:f9:98:45:00:
55:73:0a:41:cb:fb:86:36:12:e5:ac:eb:98:15:4f:
f2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:04:4B:AE:DC:F1:10:48:19:4D:5F:31:8E:60:0A:86:AF:7E:79:5C
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/RQRLrtzxEEgZTV8xjmAKhq9-eVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.44.0/24
IPv6:
2a07:6f46:4400::/40
Signature Algorithm: sha256WithRSAEncryption
de:28:06:63:08:d2:56:30:2a:48:ed:32:da:b5:47:8b:79:8a:
91:50:2c:82:c5:c9:29:21:ac:f9:a1:77:0f:6a:20:16:78:6d:
0e:12:42:46:d7:7e:c3:3e:f0:fd:59:29:bf:2b:a8:e3:62:b2:
a8:94:37:db:9e:e2:d7:05:d2:3b:7b:39:64:13:0e:83:e7:33:
8b:3f:dc:be:b2:b4:7d:cc:c0:ae:f1:e6:d0:7a:ad:88:3a:ec:
ae:e3:35:8f:63:91:da:1e:89:1b:7e:c2:bb:18:88:08:2f:f7:
a8:35:b3:c2:c9:42:ea:90:1a:1e:72:4d:4f:43:82:cb:61:9d:
d1:80:13:ae:28:b6:76:a5:b0:c7:4e:30:39:55:bb:cc:84:a5:
e8:1b:4b:ef:35:8a:25:ec:da:92:23:2b:ea:ed:8d:5e:0e:28:
a1:63:50:ed:ec:23:a9:61:71:de:09:b3:8a:97:93:9f:86:8f:
9c:0d:03:7b:3b:42:50:9d:8e:f0:5c:13:df:fe:7e:c7:ca:54:
94:c8:4c:81:47:e9:ab:91:7c:10:44:a1:f9:89:2e:bc:d0:ac:
c1:ca:ef:53:cb:c4:cc:48:8d:84:59:ef:8f:cc:a8:2f:18:f7:
6e:45:14:84:55:f1:61:4f:46:74:6b:ff:2e:f0:d3:c9:90:12:
79:0e:ad:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:39 2024 by rpki-client on console-ams.rpki-client.org