Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/2dfefc-24b5-41fb-b1ef-11b8c283ece4/1/jMhegCXjN_B5JFaPVv2uQXQA_UY.roa
File: jMhegCXjN_B5JFaPVv2uQXQA_UY.roa (raw, json)
Hash identifier: wB0wjCMLYsVpo3v0xqrbpJK+6M5KEtRv/9zap3HhZ/Y=
Subject key identifier: 8C:C8:5E:80:25:E3:37:F0:79:24:56:8F:56:FD:AE:41:74:00:FD:46
Certificate issuer: /CN=0e835b896da71d2daadff139d65b7298f8412417
Certificate serial: 07D5587C
Authority key identifier: 0E:83:5B:89:6D:A7:1D:2D:AA:DF:F1:39:D6:5B:72:98:F8:41:24:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DoNbiW2nHS2q3_E51ltymPhBJBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/2dfefc-24b5-41fb-b1ef-11b8c283ece4/1/jMhegCXjN_B5JFaPVv2uQXQA_UY.roa
Signing time: Sat 01 Jan 2022 06:04:16 +0000
ROA not before: Sat 01 Jan 2022 06:04:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208516
IP address blocks: 45.131.236.0/22 maxlen: 24
2a0e:63c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131422332 (0x7d5587c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e835b896da71d2daadff139d65b7298f8412417
Validity
Not Before: Jan 1 06:04:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8cc85e8025e337f07924568f56fdae417400fd46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:88:13:21:a3:5e:80:d3:5d:a3:a3:1a:51:bf:
57:77:0f:c1:79:95:9a:f1:7e:97:f1:04:03:41:50:
b0:0f:24:4e:16:0e:fe:98:30:93:29:89:f4:40:92:
9b:71:c3:30:6e:2c:df:bc:71:9f:74:0b:e0:6b:ea:
41:aa:58:8e:83:31:b0:bb:7e:3b:82:f9:5f:14:fa:
ed:d7:52:d0:38:37:fb:35:bf:3c:01:fb:e2:c8:2c:
70:52:d0:8a:89:51:9d:12:db:c1:34:98:f5:fc:44:
20:bd:a5:a6:77:c2:8b:1b:48:8d:98:df:e4:f7:91:
f7:45:69:7d:4b:70:2a:90:1a:fe:fd:75:49:1f:d8:
30:58:53:f4:21:03:7d:91:b9:0f:3c:f9:60:ab:83:
30:10:fc:0f:8f:36:e7:69:8d:45:35:53:dc:5e:32:
a2:2f:bc:86:ab:be:67:02:01:0c:bc:cb:de:46:37:
4c:76:da:e9:88:aa:cd:b1:84:89:46:13:15:4c:8b:
c2:ad:78:89:7b:98:8e:29:ff:a4:a4:9c:60:59:db:
d3:2c:b0:3f:fd:9b:35:0c:3a:28:1c:aa:d6:d5:ec:
19:06:4d:a6:1a:94:a2:1a:54:d1:3b:f5:cf:a7:7d:
09:23:66:0a:33:0a:c4:3f:95:ad:72:a4:d5:dd:29:
7e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C8:5E:80:25:E3:37:F0:79:24:56:8F:56:FD:AE:41:74:00:FD:46
X509v3 Authority Key Identifier:
keyid:0E:83:5B:89:6D:A7:1D:2D:AA:DF:F1:39:D6:5B:72:98:F8:41:24:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoNbiW2nHS2q3_E51ltymPhBJBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2dfefc-24b5-41fb-b1ef-11b8c283ece4/1/jMhegCXjN_B5JFaPVv2uQXQA_UY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/2dfefc-24b5-41fb-b1ef-11b8c283ece4/1/DoNbiW2nHS2q3_E51ltymPhBJBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.236.0/22
IPv6:
2a0e:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
c6:e8:b1:45:70:56:ef:76:8f:16:f1:46:6a:a6:1c:dd:65:44:
7f:0f:18:af:4f:9b:28:05:f7:13:5b:5c:3f:8e:84:44:68:4a:
03:3c:9d:aa:90:ab:0a:33:9f:c4:58:a9:df:01:74:f5:50:21:
91:f6:88:ef:2c:d2:54:fb:80:21:be:40:71:f3:e2:e2:12:85:
0c:bc:9a:b2:ae:03:8f:ce:fb:2c:14:b9:a8:7f:ce:47:bd:8e:
91:df:ab:6d:d6:e4:d2:05:aa:04:ba:c0:c4:26:c9:f4:dc:34:
b6:63:e6:e1:46:91:d3:7e:7d:1d:5e:cd:60:ef:da:85:ad:e9:
33:3b:eb:27:20:33:f0:06:45:99:64:40:f0:2c:e1:6e:c2:47:
dd:80:8c:54:79:82:25:97:82:2f:a1:19:5b:38:97:94:d5:f0:
68:8d:a5:86:e8:83:cd:6b:2c:1c:c6:d3:47:76:1b:2a:07:d8:
3e:a3:f1:54:81:e7:2d:58:b2:7f:a1:5b:39:f7:d9:65:c7:ff:
cc:9f:9e:ca:7e:70:12:aa:a3:ea:6d:29:0d:8b:aa:02:ff:6c:
1e:75:ef:fa:36:12:68:0c:44:fc:b6:00:3b:4a:3c:6d:73:03:
c1:8b:0f:49:b2:22:78:90:e6:d7:1e:bc:42:a4:7a:21:29:c3:
f0:75:0f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:05 2024 by rpki-client on console-fra.rpki-client.org