Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/hf_fbM8T8rk7VksEA_TgaZB1vKM.roa
File: hf_fbM8T8rk7VksEA_TgaZB1vKM.roa (raw, json)
Hash identifier: 3bTbgccqVIrA5myM8XDrE417h3OkniRCZk/4X267dKU=
Subject key identifier: 85:FF:DF:6C:CF:13:F2:B9:3B:56:4B:04:03:F4:E0:69:90:75:BC:A3
Certificate issuer: /CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Certificate serial: 056C92A6
Authority key identifier: 72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/hf_fbM8T8rk7VksEA_TgaZB1vKM.roa
Signing time: Sat 01 Jan 2022 00:58:06 +0000
ROA not before: Sat 01 Jan 2022 00:58:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2119
IP address blocks: 45.8.9.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 91001510 (0x56c92a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Validity
Not Before: Jan 1 00:58:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=85ffdf6ccf13f2b93b564b0403f4e0699075bca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:08:23:45:80:e6:14:50:a4:3f:31:43:9e:33:
b0:2d:a7:2a:22:df:87:da:57:d0:e3:1e:12:e6:7d:
63:30:32:f1:a8:14:d3:38:b9:13:46:a9:61:76:f9:
b1:71:6e:f8:e8:13:5a:5f:03:0f:cc:10:1c:e6:bd:
dc:cd:5b:66:4c:6c:d5:1b:0a:e8:44:6a:1c:d4:f4:
2e:64:fc:dc:78:67:9d:89:7a:f8:00:3e:8f:4e:4b:
62:38:9e:85:a0:37:2a:75:1f:52:09:a1:95:a6:19:
4a:05:67:c2:42:cf:a4:5f:3f:1a:3b:a8:be:0d:44:
cd:cf:55:02:8f:be:7b:69:cd:e5:17:6c:37:b6:19:
43:d7:47:34:7a:a2:fd:a2:54:5d:be:e1:4b:0d:0e:
79:b4:fa:48:71:39:a9:61:b4:fa:77:40:a3:91:b9:
33:41:5c:43:97:2a:c9:ae:f4:3b:4f:a3:db:ae:dd:
b5:8c:4b:92:f5:fa:c0:4d:f9:c0:43:11:60:c8:b2:
f8:a5:65:ab:3d:a2:d7:1f:58:1c:8d:75:c4:a7:be:
eb:b3:01:d8:ad:f3:07:44:0d:63:67:07:aa:f0:0e:
72:bb:13:e4:6d:01:22:3c:ac:1b:f1:9c:6e:a3:e8:
d6:30:7e:47:b6:bc:19:af:7a:2d:e7:bc:f1:11:8b:
8b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:FF:DF:6C:CF:13:F2:B9:3B:56:4B:04:03:F4:E0:69:90:75:BC:A3
X509v3 Authority Key Identifier:
keyid:72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/hf_fbM8T8rk7VksEA_TgaZB1vKM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.9.0/24
Signature Algorithm: sha256WithRSAEncryption
48:c9:d3:78:ef:19:9a:07:c8:53:7b:80:62:9b:df:a8:f3:92:
30:33:94:2d:8f:90:93:db:9c:57:0f:30:7b:21:34:82:04:8f:
c2:f4:9b:1d:47:5f:9f:34:0b:a5:d0:b4:e1:1b:9a:5a:ec:9b:
64:be:c9:c0:5f:eb:e8:af:ab:17:53:70:a1:2d:0f:5f:b6:12:
e6:7b:73:2c:00:06:cf:ff:8f:bb:c6:50:db:6e:82:27:0f:47:
3a:f6:4d:c9:e4:8a:50:dd:ad:82:12:37:56:bf:9e:f5:e5:bf:
46:d9:6c:9f:a9:a9:e5:1b:ee:5d:2b:04:95:c4:9e:2c:5b:1e:
5e:37:ca:71:7a:40:d5:07:77:c3:97:d8:66:e3:ba:c5:db:1f:
1a:55:61:30:83:4a:7a:0a:4f:c1:0a:be:60:42:59:5f:40:ec:
18:6b:80:8e:f6:0a:13:d6:71:0e:0a:f7:0c:06:ef:bb:65:2c:
43:e7:c6:29:27:94:f1:a5:fa:37:5a:1c:dd:17:16:f8:29:4c:
4e:c0:50:0f:0a:b3:2f:18:2d:f2:d5:a9:b5:06:ce:6b:86:c0:
ab:b9:33:f9:de:d3:5e:20:d4:e3:a1:90:13:99:b4:24:cc:38:
61:ac:4d:f9:65:5c:73:1a:66:15:af:8b:a1:8d:3f:c5:2b:be:
0a:08:f5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:39 2024 by rpki-client on console-fra.rpki-client.org