Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/hQazVDk2hFyNCBNmIx631RMgja8.roa
File: hQazVDk2hFyNCBNmIx631RMgja8.roa (raw, json)
Hash identifier: 1OfL9jNi5NjVzTLtRItQ6cE9/JybWwoIXCQxzrfLoNk=
Subject key identifier: 85:06:B3:54:39:36:84:5C:8D:08:13:66:23:1E:B7:D5:13:20:8D:AF
Certificate issuer: /CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Certificate serial: 0182909BBDC434495946CEA5FFE11BA33EF9
Authority key identifier: 6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/hQazVDk2hFyNCBNmIx631RMgja8.roa
Signing time: Fri 12 Aug 2022 05:51:41 +0000
ROA not before: Fri 12 Aug 2022 05:51:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204451
IP address blocks: 45.14.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:90:9b:bd:c4:34:49:59:46:ce:a5:ff:e1:1b:a3:3e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fa86d1c1676a59a46acf37336192e985cff0e5b
Validity
Not Before: Aug 12 05:51:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8506b3543936845c8d081366231eb7d513208daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:85:3f:b1:6f:ed:00:47:bf:17:e9:81:d4:0b:
c8:e5:d4:a3:89:44:f0:75:52:e2:c6:ea:72:ba:bf:
50:ee:06:96:4a:68:c5:d9:a7:90:30:0e:da:de:26:
9f:72:c7:52:4f:0e:43:b3:2a:c4:f6:fc:dd:09:96:
6d:40:22:69:92:f0:aa:08:f1:50:70:90:bb:a9:8a:
52:0c:85:ab:68:89:85:35:69:7b:76:6a:d4:e2:8b:
1d:33:1c:9d:5a:7e:e6:ef:c4:fa:d0:d0:5b:9b:28:
09:27:e0:a5:b5:b1:cf:9f:3e:70:a0:a5:5c:c1:66:
8f:de:f0:48:40:2b:ae:94:e6:a9:2a:96:55:62:76:
7b:be:6c:2c:7b:01:9e:5a:90:08:a6:22:e2:65:2c:
91:37:d0:26:c4:ee:cd:2d:a3:db:78:84:9c:e8:9d:
11:b3:87:88:c6:28:0c:c5:d7:3f:6c:35:95:69:ed:
95:0c:48:96:a6:02:3f:8b:63:b5:9c:07:b0:ae:a0:
7b:8c:89:f5:2c:dc:f6:69:04:2c:73:09:72:4d:8d:
95:f2:f5:bf:5f:a4:0e:06:1a:a3:da:c4:c6:1d:38:
f9:f0:6d:96:c7:9c:cb:cf:bb:fb:c1:42:3e:9b:db:
97:ef:57:a8:7d:30:6c:88:d4:e4:63:42:34:d0:a2:
71:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:06:B3:54:39:36:84:5C:8D:08:13:66:23:1E:B7:D5:13:20:8D:AF
X509v3 Authority Key Identifier:
keyid:6F:A8:6D:1C:16:76:A5:9A:46:AC:F3:73:36:19:2E:98:5C:FF:0E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6htHBZ2pZpGrPNzNhkumFz_Dls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/hQazVDk2hFyNCBNmIx631RMgja8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/afe373-e5bc-4010-8ad6-6aab2b1b922c/1/b6htHBZ2pZpGrPNzNhkumFz_Dls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.175.0/24
Signature Algorithm: sha256WithRSAEncryption
77:53:1d:20:57:ab:ca:49:7e:17:db:bf:10:d7:c9:9e:a7:7d:
c9:5e:61:8d:b2:e6:2d:d5:62:09:07:a4:94:8f:a0:fb:f2:ec:
0b:d6:fc:79:04:83:ce:c2:71:41:3e:aa:8f:23:7f:d9:9b:47:
cc:2f:70:12:a3:fe:16:ae:98:0b:8e:07:97:b6:4e:e6:4e:28:
18:42:11:69:cc:4e:f6:a0:67:5d:7a:7e:38:a5:22:6e:09:32:
de:f3:ec:2b:fb:d7:69:26:e8:d4:a0:ae:4a:45:50:0e:f2:a7:
9e:9b:63:4e:09:da:f9:fd:8f:bd:c0:87:d7:c6:61:6d:2c:6f:
ee:83:63:8e:0d:2a:b3:f9:61:8f:b8:67:9f:eb:5d:53:21:d7:
8a:b0:43:45:45:3d:ee:c8:1c:f6:04:f9:5f:1e:90:a0:cf:54:
cc:33:27:ec:ef:ea:94:c2:41:d5:8e:74:32:62:c6:c7:cc:af:
16:8d:b3:7e:aa:3a:8d:09:27:f8:f7:d0:3d:09:8c:43:ce:06:
e8:52:29:44:7c:9f:92:02:ef:99:9d:f0:5e:99:06:e6:71:3d:
f7:16:c3:95:56:52:2d:21:f8:bc:ae:f6:82:54:12:27:dd:6a:
f8:39:06:0e:4c:d9:81:e9:1e:0a:96:c1:7c:61:a8:84:70:2a:
ab:1a:c0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:25 2024 by rpki-client on console-ams.rpki-client.org