Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/f5D3WzQz023dYJ76YkaoLbf4NkI.roa
File: f5D3WzQz023dYJ76YkaoLbf4NkI.roa (raw, json)
Hash identifier: O2R+n4AqNBtS9n/VHDTwsUK76cP1ChFBgy/qlOGORdg=
Subject key identifier: 7F:90:F7:5B:34:33:D3:6D:DD:60:9E:FA:62:46:A8:2D:B7:F8:36:42
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 077B6975
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/f5D3WzQz023dYJ76YkaoLbf4NkI.roa
Signing time: Sat 01 Jan 2022 05:04:21 +0000
ROA not before: Sat 01 Jan 2022 05:04:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211440
IP address blocks: 45.9.152.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125528437 (0x77b6975)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Jan 1 05:04:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7f90f75b3433d36ddd609efa6246a82db7f83642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:3e:5c:6f:6c:f0:5b:b0:44:9b:af:46:4d:
b4:4f:bb:9b:bb:02:59:c6:65:38:d6:65:01:bb:c1:
b1:c8:09:eb:9c:27:49:c2:d3:03:06:1f:09:18:e7:
e8:d5:18:23:40:c8:0d:cc:12:64:ed:0a:f8:17:a6:
0f:a7:f0:7a:0d:36:bd:00:56:a7:c4:08:38:f3:f9:
e3:6e:8d:5d:1b:6d:44:bd:12:78:a9:d7:13:b4:9c:
67:d9:c4:2b:b5:ac:de:f0:11:36:ae:5e:d7:ac:03:
c1:bf:80:72:6f:9c:69:e6:cb:25:3b:c8:b1:0c:0e:
13:ca:18:b8:bd:0d:fa:e7:dd:3a:b5:d8:d4:78:a7:
a5:85:32:31:48:92:b4:94:12:6f:30:4f:9b:47:61:
a9:49:90:24:7a:4a:9a:22:57:18:5e:2c:3d:06:4f:
f7:71:a0:45:98:53:53:56:ec:88:1c:84:22:2b:81:
74:4c:26:51:9b:33:8c:c0:c6:58:72:87:0c:99:93:
82:2a:9f:ae:49:c3:6c:67:d4:99:65:f9:03:5c:b7:
12:a1:4c:e7:22:d3:0e:bd:53:53:48:f2:04:d0:f7:
58:0f:2d:16:a5:21:af:d1:2b:5b:33:b2:62:ca:0b:
26:c8:25:c1:d0:29:80:d6:5a:16:bb:86:ce:8b:08:
15:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:90:F7:5B:34:33:D3:6D:DD:60:9E:FA:62:46:A8:2D:B7:F8:36:42
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/f5D3WzQz023dYJ76YkaoLbf4NkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.152.0/22
Signature Algorithm: sha256WithRSAEncryption
56:9d:1e:1d:ba:42:bc:1e:a4:98:66:bf:f0:d5:74:b2:f8:99:
24:a1:6d:22:c1:a7:0f:8e:15:c5:95:4e:c2:96:80:b5:6c:20:
47:14:fb:19:7d:ec:66:f7:4b:60:43:0e:8e:f9:e1:25:31:05:
dc:a6:64:ad:3b:ea:41:e0:fd:92:47:ab:2a:de:52:56:31:73:
2b:fe:f2:18:81:a6:36:51:7a:85:ff:bd:2c:79:d3:35:3b:d3:
95:d9:21:ff:56:1b:11:d8:1f:ce:ed:8e:e7:32:6c:76:da:15:
f5:82:6a:8b:30:eb:f1:03:08:01:31:6f:3a:ea:f5:af:c2:a4:
2e:56:c3:e9:92:59:02:d5:34:4d:d7:c5:b9:66:5d:4b:3e:26:
d4:19:91:b6:e1:a6:20:03:4e:73:bf:bc:64:6c:9f:37:c9:76:
1a:38:61:30:13:c1:1d:84:fd:de:06:5c:2e:26:f7:42:5d:21:
05:e0:e2:e0:9e:67:5c:7d:35:a6:1c:e7:1d:97:cd:89:8c:7a:
73:7e:7f:ef:13:ba:40:44:34:44:b0:f2:dc:c2:d5:04:8e:03:
e3:b1:27:f4:28:db:02:de:71:88:0a:e0:74:6c:e5:fd:fb:8b:
29:02:9f:ea:13:47:02:71:79:d6:6b:63:87:e0:b9:84:6c:6b:
2d:b0:73:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org