Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/yk6hD5ntonnxkxqaBdo9M1jnszQ.roa
File: yk6hD5ntonnxkxqaBdo9M1jnszQ.roa (raw, json)
Hash identifier: 5DjVWg1qsRV5CkWNvZD8lR0LrYsdWx3bXH6lW3N2zbg=
Subject key identifier: CA:4E:A1:0F:99:ED:A2:79:F1:93:1A:9A:05:DA:3D:33:58:E7:B3:34
Certificate issuer: /CN=3a00807698f0b097d69ab3926917d1dcc838a624
Certificate serial: 05F1E4C5
Authority key identifier: 3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/yk6hD5ntonnxkxqaBdo9M1jnszQ.roa
Signing time: Tue 22 Mar 2022 23:59:02 +0000
ROA not before: Tue 22 Mar 2022 23:59:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 328543
IP address blocks: 45.81.34.0/23 maxlen: 24
45.150.236.0/22 maxlen: 24
2a0e:4c80::/29 maxlen: 29
2a0f:9a00::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99738821 (0x5f1e4c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a00807698f0b097d69ab3926917d1dcc838a624
Validity
Not Before: Mar 22 23:59:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ca4ea10f99eda279f1931a9a05da3d3358e7b334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:90:08:03:4b:c9:26:d7:66:e7:d8:a5:41:
c5:32:ba:1d:ef:8d:50:83:6a:a8:4e:09:d9:61:fe:
0a:33:81:0a:f2:4e:3c:32:42:f0:e0:19:25:3c:37:
fe:3f:5f:50:7e:b9:a4:7a:e4:66:79:28:fe:46:f8:
99:a3:a1:33:f7:c1:83:93:36:8a:54:06:e8:85:70:
ad:e3:81:19:3b:db:b8:e1:df:24:38:b1:f9:9f:53:
80:2a:c3:00:8e:e6:7a:38:b1:59:df:30:c2:75:33:
b7:d8:1b:e3:6f:44:43:e4:b9:37:0f:ce:4a:f5:64:
db:02:3d:68:c9:5c:ad:7b:79:3d:31:a0:2e:e4:f6:
44:6d:eb:2a:9b:40:56:bc:e8:64:e5:b2:5c:88:e1:
ac:7d:ea:98:29:9a:5e:c2:6a:24:2c:51:f3:67:47:
72:da:ef:1d:2d:d3:ce:a5:74:0a:e5:d2:37:1e:17:
fa:eb:b0:2d:ea:ae:f9:25:cd:fd:9b:d3:4b:0d:45:
3a:b6:84:bc:92:a4:82:a1:24:48:41:f2:a1:b7:7d:
e0:c3:63:06:47:31:b1:9a:8e:d9:75:63:3b:a8:6a:
8d:ca:21:05:b3:37:00:18:03:18:50:74:22:c9:53:
cf:b2:bb:cd:03:4a:7a:a5:82:a9:21:9d:35:dd:a3:
dd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4E:A1:0F:99:ED:A2:79:F1:93:1A:9A:05:DA:3D:33:58:E7:B3:34
X509v3 Authority Key Identifier:
keyid:3A:00:80:76:98:F0:B0:97:D6:9A:B3:92:69:17:D1:DC:C8:38:A6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/yk6hD5ntonnxkxqaBdo9M1jnszQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/143d29-cf72-4d01-918c-16afc4dffdd4/1/OgCAdpjwsJfWmrOSaRfR3Mg4piQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.34.0/23
45.150.236.0/22
IPv6:
2a0e:4c80::/29
2a0f:9a00::/29
Signature Algorithm: sha256WithRSAEncryption
11:ba:2c:58:d7:41:06:01:cc:53:78:93:fb:76:d9:bf:86:cf:
93:fb:1f:c5:b1:d5:0d:7d:c6:c9:7b:e6:87:4b:0a:00:7b:c1:
bd:7f:eb:a5:59:66:dc:c2:61:07:1d:56:85:6a:c4:4f:d5:80:
94:10:ad:b7:f6:80:58:c0:6c:f9:4f:17:79:85:1f:81:e8:dd:
8f:b1:a6:01:77:e9:54:0e:63:e8:48:b3:81:27:06:76:79:6c:
97:ee:11:30:61:bb:a8:30:4b:ca:35:85:cf:49:49:ef:d3:b0:
78:5e:4c:fc:9e:7b:90:29:6f:14:74:51:be:0a:17:bc:f8:13:
c5:cd:2a:e9:ae:bf:6b:1e:1d:a4:35:f1:1f:81:81:9e:8b:87:
f0:12:ea:c8:71:8a:7b:98:e3:4a:a2:b6:2a:c0:19:fe:d2:b5:
83:7a:62:be:f8:7e:f9:78:e3:2e:17:bf:fe:37:8a:02:81:d5:
53:68:09:87:85:53:68:25:10:b0:58:a6:ef:63:4e:e4:cc:2c:
f9:24:17:32:e9:3d:3c:9c:af:61:81:db:59:cf:8e:42:8a:b3:
f0:a9:7d:73:48:81:c2:02:2d:3f:f4:bc:52:3d:c6:6b:33:0a:
9a:c9:2b:8f:15:21:f1:28:7e:45:a5:ed:9c:6c:8e:85:76:e3:
96:f1:59:8b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:26 2024 by rpki-client on console-fra.rpki-client.org