Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/2IM0Usk8l9Ko_49ppwJ_E9bumKY.roa
File: 2IM0Usk8l9Ko_49ppwJ_E9bumKY.roa (raw, json)
Hash identifier: NEG8PRnWXP3Wlc6lqmTLZIV0kHydoi9fMZNDkw2lhZM=
Subject key identifier: D8:83:34:52:C9:3C:97:D2:A8:FF:8F:69:A7:02:7F:13:D6:EE:98:A6
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 0183897326C602062BB65E367619EFD28235
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/2IM0Usk8l9Ko_49ppwJ_E9bumKY.roa
Signing time: Thu 29 Sep 2022 13:32:48 +0000
ROA not before: Thu 29 Sep 2022 13:32:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205570
IP address blocks: 45.67.202.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:89:73:26:c6:02:06:2b:b6:5e:36:76:19:ef:d2:82:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Sep 29 13:32:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8833452c93c97d2a8ff8f69a7027f13d6ee98a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:62:22:04:3d:1d:5a:13:a4:e7:5f:df:77:87:
d5:3e:b5:c0:87:ff:bf:22:4a:20:d9:11:d9:94:52:
be:58:b2:f2:0a:d8:eb:17:e9:be:d2:1e:b1:b8:10:
94:25:82:6b:bd:5c:07:20:96:27:9f:bd:01:08:c8:
16:2c:8c:c0:c2:42:20:6b:1c:7d:63:97:75:54:09:
65:5a:9d:18:cb:5d:b8:7b:fc:04:a2:22:03:a0:35:
61:8d:2f:b8:51:9e:9b:10:cc:ef:30:b3:56:ff:e8:
c6:cb:51:cf:a5:a7:27:43:94:58:05:60:2a:48:08:
9d:82:71:76:f1:5c:a7:5c:8d:14:e6:2c:d3:62:e8:
dc:9e:fb:cd:a6:8d:f4:3d:89:74:54:a2:3d:26:bd:
e7:ac:aa:82:b6:ce:99:c2:b2:31:eb:d7:bf:1a:0b:
d2:07:e8:2d:a3:6c:c6:2a:bf:81:d1:89:d1:ad:92:
14:0a:60:73:cf:71:9f:ff:c6:25:13:4c:31:90:9d:
04:02:29:cc:b0:ae:46:98:c4:38:8b:e7:9b:41:e6:
0a:c7:3e:93:5e:47:0a:50:76:d4:6c:cd:34:09:12:
50:6c:55:88:c2:ea:44:05:10:04:c0:84:e1:83:f8:
17:bc:ae:a2:27:66:f6:f9:dd:85:9e:07:c2:d2:d8:
7d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:83:34:52:C9:3C:97:D2:A8:FF:8F:69:A7:02:7F:13:D6:EE:98:A6
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/2IM0Usk8l9Ko_49ppwJ_E9bumKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.202.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:4d:07:4c:a8:54:ba:ef:3f:eb:35:52:54:8e:b1:07:bf:fc:
86:84:18:d4:39:e3:35:b3:55:b3:c9:28:a0:f2:e4:3e:3c:62:
06:61:13:51:37:cb:62:1d:8a:ad:21:14:65:40:9a:25:97:d2:
00:fb:45:19:cd:63:28:b2:6d:11:bc:bb:2e:c9:14:9d:1b:7a:
d0:1e:6a:5d:04:20:5f:ef:7d:1c:bc:97:fe:ab:7c:ca:18:c9:
0d:79:8b:f0:4c:a7:1b:fe:c0:40:d7:be:3f:e8:ff:ac:ab:8a:
24:e0:b0:07:55:b1:dc:d9:99:6e:a6:51:b4:fd:b7:e5:79:dc:
13:0f:3d:c9:2c:b9:ea:e1:a5:91:cf:72:c4:72:fd:83:16:c2:
cb:8d:5f:09:86:a7:96:56:f9:af:23:2b:c5:ff:27:f9:ca:27:
53:09:34:12:2c:49:79:fc:53:8c:21:7e:9b:3f:47:55:74:c1:
f9:25:73:b6:ca:53:49:b3:f9:3c:79:93:43:f3:00:cd:60:42:
1c:93:d9:ef:9d:5f:c7:cf:3c:7c:2b:bd:7a:ea:5d:da:59:da:
13:06:e8:1d:b7:1f:b9:9a:68:75:fa:c7:e6:7d:60:2d:5d:f2:
4f:e2:59:28:11:e0:31:c2:29:5f:e3:95:d7:78:10:c3:24:e3:
ac:21:bf:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org