Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/EzK7TSo6jhZqfU1v6AoCVTHno4E.roa
File: EzK7TSo6jhZqfU1v6AoCVTHno4E.roa (raw, json)
Hash identifier: yF04jf5LGeY0YnLilCLBMJyCgOgrC2qcifFJwR30v7g=
Subject key identifier: 13:32:BB:4D:2A:3A:8E:16:6A:7D:4D:6F:E8:0A:02:55:31:E7:A3:81
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 08F62525
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/EzK7TSo6jhZqfU1v6AoCVTHno4E.roa
Signing time: Mon 06 Jun 2022 09:30:20 +0000
ROA not before: Mon 06 Jun 2022 09:30:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 45.67.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150349093 (0x8f62525)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jun 6 09:30:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1332bb4d2a3a8e166a7d4d6fe80a025531e7a381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ae:96:cb:ee:48:29:61:f1:b7:65:bf:43:37:
a1:fa:c1:56:67:a5:b2:46:0e:eb:ff:57:25:0b:01:
6c:46:a8:37:fd:c3:a0:63:b4:25:13:f0:6b:28:9b:
55:c9:42:8e:24:74:0c:ca:ad:d1:52:7e:5c:7f:e7:
77:e3:8f:68:96:35:89:4b:15:6b:c2:6d:26:8b:41:
33:ad:71:21:69:12:18:58:42:e7:a3:f3:2a:6a:a6:
94:04:0b:38:32:82:b6:52:73:5d:9a:0e:f9:d5:42:
49:9e:d6:3e:e0:e3:7f:f6:72:5b:bf:f1:de:78:d6:
9a:9c:70:2f:10:95:47:54:b7:10:4b:0c:4f:05:6e:
c7:bc:f1:47:40:4e:19:3d:af:6e:e4:72:31:5c:6d:
a5:06:d2:4e:b8:88:e7:31:26:7a:fb:17:30:fb:d8:
30:0f:55:d2:c6:37:01:a6:5e:40:10:1a:43:12:9e:
c6:a9:87:92:5b:60:02:2a:83:58:3d:22:af:5b:b5:
2c:26:fa:f1:09:b8:d1:dd:91:64:30:bb:ae:13:93:
2e:f5:d3:8c:bd:02:b1:27:1b:bb:d9:a6:49:94:2f:
6c:1c:ca:a5:dd:5d:a8:a2:c6:22:b6:51:99:91:af:
9c:a0:31:18:d4:d6:eb:ba:3a:30:c1:6f:a1:11:22:
20:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:32:BB:4D:2A:3A:8E:16:6A:7D:4D:6F:E8:0A:02:55:31:E7:A3:81
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/EzK7TSo6jhZqfU1v6AoCVTHno4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.203.0/24
Signature Algorithm: sha256WithRSAEncryption
49:ce:73:58:4d:7d:9a:fa:6a:e9:2e:8d:b3:5f:c1:d5:66:6c:
09:64:72:07:1d:86:15:e9:48:26:00:ab:12:dc:2d:ab:eb:75:
b6:32:f7:18:21:ba:56:c0:c7:87:cc:0e:23:a2:90:24:85:d9:
f7:34:81:4a:4f:fc:e5:e5:85:2d:7a:76:c1:3e:fa:37:0a:20:
c6:a2:27:24:8b:9b:65:7a:1f:9d:4e:d6:87:ee:af:4c:0d:86:
bd:36:b7:06:08:95:40:8d:37:be:b1:31:04:da:8e:5b:6c:36:
2d:98:2a:6e:4a:d2:42:e1:c6:98:ac:cf:f5:af:ab:c4:f3:43:
d2:a3:59:98:ff:f6:fe:f1:6d:d3:e3:16:d5:a5:b3:75:bc:2d:
d5:e1:02:af:a5:56:63:ce:84:d7:15:34:50:37:4f:17:b5:9b:
99:53:b3:23:14:ab:31:2d:c4:ed:d6:6a:fb:79:ae:80:b0:db:
b4:a0:12:3d:da:3d:16:05:e3:6d:5b:cb:9a:55:95:4d:3f:8a:
60:4b:ea:9c:a6:96:1c:e9:ed:87:6d:d0:6e:4d:74:d0:1c:ef:
52:6a:c8:c5:82:af:49:1c:e9:b6:0e:d2:80:30:4c:53:79:ea:
66:77:2a:88:0a:1a:fd:93:d0:d6:26:98:cf:d5:40:47:8c:37:
46:7d:35:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:48 2024 by rpki-client on console-ams.rpki-client.org