Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/7n21JwP1OcDdqENajIIzCLxMd5k.roa
File: 7n21JwP1OcDdqENajIIzCLxMd5k.roa (raw, json)
Hash identifier: g9yE7Y80SwxSrGo5DUFqVTLZePmG0R3UUPtoCcasfF4=
Subject key identifier: EE:7D:B5:27:03:F5:39:C0:DD:A8:43:5A:8C:82:33:08:BC:4C:77:99
Certificate issuer: /CN=2fb87a2c309d75553a46e1025775e9aa41f6b337
Certificate serial: 03D1577F
Authority key identifier: 2F:B8:7A:2C:30:9D:75:55:3A:46:E1:02:57:75:E9:AA:41:F6:B3:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/7n21JwP1OcDdqENajIIzCLxMd5k.roa
Signing time: Sat 01 Jan 2022 14:57:32 +0000
ROA not before: Sat 01 Jan 2022 14:57:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208463
IP address blocks: 45.135.108.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64051071 (0x3d1577f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fb87a2c309d75553a46e1025775e9aa41f6b337
Validity
Not Before: Jan 1 14:57:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee7db52703f539c0dda8435a8c823308bc4c7799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4b:8d:02:d7:56:bd:97:6e:bc:d1:b6:6e:21:
41:89:4b:99:d7:51:d3:bc:86:ac:5e:72:2d:95:d8:
c7:57:55:00:07:c3:4e:f1:07:7c:b0:a9:fb:96:c9:
52:65:93:16:19:e8:af:6e:8d:9e:b0:5e:8d:c4:b9:
15:47:7d:ac:48:2d:16:66:2b:14:10:f4:d2:dd:bc:
3e:31:2e:1d:ef:91:14:3d:13:f1:38:a9:e0:1c:36:
5e:be:5d:f0:51:23:19:7d:c7:ae:52:ce:b9:3d:c0:
94:ed:2d:28:10:26:bf:49:79:43:7d:c0:7b:d7:19:
cc:62:1c:62:03:0b:76:ad:eb:5d:dd:e3:d3:35:ea:
d4:79:eb:8c:80:c7:16:4b:c6:6d:b1:33:0c:4c:a7:
11:18:4b:25:87:1c:58:cc:56:7f:f7:40:b1:82:98:
21:55:3e:83:fb:37:52:87:c5:89:3f:70:4a:ea:9e:
85:96:ee:de:dc:26:1e:66:d7:6b:92:6e:ba:e0:a5:
7e:5e:50:e8:07:78:00:0c:c1:c1:f0:c1:06:77:3d:
50:53:59:5a:ad:e0:4d:46:98:81:3d:26:f9:b5:9f:
ef:a5:6b:40:8b:a8:7a:86:c0:1c:0d:a0:58:53:39:
33:1a:b4:7c:f0:88:5d:79:ef:e2:85:65:ad:70:9d:
c3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7D:B5:27:03:F5:39:C0:DD:A8:43:5A:8C:82:33:08:BC:4C:77:99
X509v3 Authority Key Identifier:
keyid:2F:B8:7A:2C:30:9D:75:55:3A:46:E1:02:57:75:E9:AA:41:F6:B3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L7h6LDCddVU6RuECV3XpqkH2szc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/7n21JwP1OcDdqENajIIzCLxMd5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/3cfd94-7d51-459a-8393-7717eb319160/1/L7h6LDCddVU6RuECV3XpqkH2szc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.108.0/22
Signature Algorithm: sha256WithRSAEncryption
43:18:49:e5:11:d0:20:f1:fc:6f:08:bb:c1:92:d0:5a:9f:43:
b0:ce:92:b1:79:42:3a:0b:b3:4d:f2:e3:6b:3c:8b:c1:77:e1:
d3:30:f7:44:6a:e2:d8:e9:0c:65:0a:c3:f3:63:e9:d8:58:15:
8c:41:86:14:92:a9:fb:b0:3e:64:ef:22:8c:d5:44:9a:0f:78:
12:26:c3:1e:6b:3a:3d:14:67:af:00:a4:b3:7f:1c:75:1e:0a:
2c:19:da:54:72:c7:c4:b8:46:3e:96:2c:f0:fb:6c:14:7e:a5:
da:ee:22:5e:97:43:62:07:57:4b:0d:ae:1d:cf:fe:dd:3e:89:
b0:d2:6d:90:6f:04:d8:e1:d5:d8:46:b4:bc:80:a1:29:f1:23:
50:79:e3:8c:ea:61:51:49:6d:26:ed:ec:59:6a:ba:8b:80:b6:
c4:40:1d:5a:fb:cb:c8:bd:b1:5d:44:3d:3d:d7:e2:a6:fa:df:
78:aa:1c:5d:a0:fa:ab:11:55:d7:fd:87:06:87:45:ac:af:9a:
28:91:43:0c:cd:c0:79:89:34:cc:83:37:d4:79:fc:b0:51:5e:
8e:98:99:8d:17:26:c6:51:b1:30:c4:cb:19:a7:e4:c2:56:6b:
be:58:e2:98:57:33:e6:e4:99:54:87:9a:73:a4:40:06:3d:1b:
f4:5e:1e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:27 2024 by rpki-client on console-ams.rpki-client.org