Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/LuAHttmCinQxb-_gm0B_3Zr-dSs.roa
File: LuAHttmCinQxb-_gm0B_3Zr-dSs.roa (raw, json)
Hash identifier: TiL7iB2dXKc3bl0wxOPkjoxmbS7+r4cBa6gPcMMLviY=
Subject key identifier: 2E:E0:07:B6:D9:82:8A:74:31:6F:EF:E0:9B:40:7F:DD:9A:FE:75:2B
Certificate issuer: /CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Certificate serial: 0182CB093D58FA0A1AB6C7CFD23E1C3AFBA4
Authority key identifier: 35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/LuAHttmCinQxb-_gm0B_3Zr-dSs.roa
Signing time: Tue 23 Aug 2022 14:09:16 +0000
ROA not before: Tue 23 Aug 2022 14:09:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204666
IP address blocks: 45.153.192.0/22 maxlen: 24
45.153.194.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:cb:09:3d:58:fa:0a:1a:b6:c7:cf:d2:3e:1c:3a:fb:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=359f0f5ff620e0db5311f64736909973ac60f6f3
Validity
Not Before: Aug 23 14:09:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ee007b6d9828a74316fefe09b407fdd9afe752b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:27:88:67:c8:93:02:7a:3c:22:83:3d:61:82:
66:63:b0:d8:1c:0a:c9:a0:5e:7c:a3:c0:1d:94:e5:
f6:6d:2e:a1:96:c1:8d:6e:80:77:37:ce:2e:f4:12:
5d:5a:e7:ba:6a:21:92:a1:77:17:1b:00:7b:d5:7c:
af:68:3b:ff:55:f4:c6:fc:14:b1:1e:d2:6c:b4:5b:
8a:cf:15:c3:b3:6f:6c:7c:c5:84:75:21:8a:bb:09:
5e:ec:96:9d:18:75:d2:52:39:a9:37:ec:76:dd:1e:
dc:f3:54:a5:b6:5e:c8:d1:6f:5d:00:2c:85:22:44:
4c:01:e3:69:ef:14:d5:af:4b:8a:5f:7c:bc:6d:4e:
13:37:57:0a:83:45:9b:e3:f5:9e:6b:cb:2a:71:18:
e9:08:cb:d5:95:a5:ea:ff:d2:2c:87:36:fe:08:4e:
2b:38:76:d2:bb:13:84:3a:89:20:f4:11:54:cf:a8:
7a:12:f1:ef:06:82:d6:6c:58:b1:35:30:c0:9c:58:
7c:9c:77:59:a9:f5:dc:03:77:a0:00:00:44:b3:03:
21:ec:50:43:7e:f0:c3:1d:5c:d1:0e:c0:dd:d3:7f:
3d:fd:09:24:e9:a5:3f:a6:48:1e:92:ff:33:25:ff:
84:a2:a5:e5:ff:5b:a5:30:1e:97:c1:d4:86:0d:d2:
fa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E0:07:B6:D9:82:8A:74:31:6F:EF:E0:9B:40:7F:DD:9A:FE:75:2B
X509v3 Authority Key Identifier:
keyid:35:9F:0F:5F:F6:20:E0:DB:53:11:F6:47:36:90:99:73:AC:60:F6:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/LuAHttmCinQxb-_gm0B_3Zr-dSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/NZ8PX_Yg4NtTEfZHNpCZc6xg9vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.192.0/22
Signature Algorithm: sha256WithRSAEncryption
84:90:81:2d:07:df:95:2b:a9:58:ac:07:8b:64:f5:c5:fb:07:
45:2c:d9:92:29:0a:41:a3:cd:4e:db:8b:34:02:84:6d:fa:74:
96:da:dd:77:d4:dc:19:29:17:41:1e:50:d7:dd:d4:ae:75:19:
6e:2b:1e:97:48:08:1a:8f:98:05:2e:3b:07:ac:9f:7e:92:5f:
fa:af:05:11:86:52:4d:9a:6b:6b:eb:cd:30:c8:db:a1:fa:e6:
5e:8e:f9:be:34:82:e9:f3:77:bb:ad:86:a7:61:da:df:11:55:
1e:7e:04:f0:87:0f:c7:cb:b5:b7:31:dc:53:8c:1b:5c:71:18:
5d:56:9d:a9:98:97:89:27:be:7c:e8:c4:8e:25:dc:e2:50:40:
fe:95:5c:77:e1:3a:68:09:5f:00:a1:65:eb:c8:4f:f9:a3:c3:
84:58:3f:7b:30:49:80:4a:c5:60:f6:93:fb:10:a8:1c:aa:2e:
60:77:39:37:b4:0c:df:87:37:c3:df:40:1b:f8:44:14:f2:ea:
ef:8e:0d:3c:a3:46:18:75:5d:22:32:53:2b:9a:6a:ee:39:f4:
17:7f:c2:41:81:dc:ad:c9:85:e8:0f:34:43:ff:f7:59:04:01:
19:b8:21:a6:8c:61:51:43:24:94:27:43:99:fd:de:c4:02:0a:
0e:ab:50:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:32 2024 by rpki-client on console-fra.rpki-client.org