Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/mYgTZTvCHVheVlIXf8u1VbrAHbk.roa
File: mYgTZTvCHVheVlIXf8u1VbrAHbk.roa (raw, json)
Hash identifier: UcxBLwTZmEEkC7ReIy1vNwKs7rWYFwih90WT70GEfGA=
Subject key identifier: 99:88:13:65:3B:C2:1D:58:5E:56:52:17:7F:CB:B5:55:BA:C0:1D:B9
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 08823DFF
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/mYgTZTvCHVheVlIXf8u1VbrAHbk.roa
Signing time: Wed 20 Apr 2022 04:19:19 +0000
ROA not before: Wed 20 Apr 2022 04:19:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46573
IP address blocks: 45.67.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142753279 (0x8823dff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Apr 20 04:19:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=998813653bc21d585e5652177fcbb555bac01db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9b:d6:ab:81:45:9c:e0:ee:eb:80:fe:e2:8b:
8d:5c:dc:4d:b6:f4:5c:23:c1:d1:09:4c:15:b5:4d:
3e:6b:9d:5f:22:65:8e:3f:18:1f:ef:b2:f5:14:0a:
40:c7:79:3f:14:94:66:57:99:ae:f0:89:55:3a:a4:
90:65:7d:c8:9a:fc:5e:9c:39:13:31:72:0d:1b:86:
3b:19:fe:73:b2:f6:74:3a:72:ab:76:94:56:ac:35:
00:d1:47:48:c1:45:99:52:60:62:a1:63:05:7b:15:
d5:34:02:e5:c9:8c:e8:89:24:82:06:23:94:a7:32:
9c:13:4a:16:8a:3a:15:bd:c1:07:dc:b6:51:52:fb:
26:f1:64:d0:c0:3d:f7:ae:e8:b9:61:3e:35:2a:3f:
70:df:3d:38:de:d5:40:e1:22:f2:bf:48:16:24:d7:
6f:25:7a:2f:03:ca:4f:43:d7:61:82:b4:e7:7e:94:
6c:23:66:ef:aa:72:71:73:9c:0c:7d:14:43:ab:12:
56:f0:5a:d5:61:08:75:6b:af:df:57:c3:96:4a:e0:
fd:83:22:1e:72:68:8e:b9:6c:6e:bb:72:f2:d9:78:
23:8c:6b:e5:48:ac:90:aa:5d:7d:77:c7:03:54:47:
fd:42:a1:b2:3a:cd:70:8e:d0:30:a4:74:2a:98:a4:
9b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:88:13:65:3B:C2:1D:58:5E:56:52:17:7F:CB:B5:55:BA:C0:1D:B9
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/mYgTZTvCHVheVlIXf8u1VbrAHbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.203.0/24
Signature Algorithm: sha256WithRSAEncryption
49:1f:db:6e:0e:cd:d1:2c:a2:fc:6c:97:44:b5:a4:fb:29:a6:
18:98:21:8f:56:0d:34:c4:25:e5:02:e6:ae:49:8f:d7:6d:d7:
1a:fe:1e:63:ca:64:6c:2c:f6:9a:1f:2e:44:d4:4a:48:e2:fd:
a4:18:47:f6:9c:d4:cb:ef:9c:b2:0c:cd:40:78:70:ac:48:2a:
ed:b6:77:88:c1:74:0e:98:1c:f9:55:e1:0f:3f:63:b7:f7:67:
48:fb:44:2b:99:14:3e:ba:7d:f4:dc:c4:8f:a3:00:2d:ff:cb:
c0:0e:95:82:95:26:47:a4:a7:e3:2a:25:b9:57:99:fc:5e:cc:
00:f7:23:b7:85:28:16:7c:73:f2:cf:6e:35:7e:6c:48:e9:1f:
c5:30:74:16:7d:3a:76:5e:c2:3d:8a:36:7b:da:e8:9b:bf:a3:
41:db:c9:d2:bc:01:91:fe:be:a9:65:0a:5d:8e:69:e4:c3:8f:
c8:61:f8:39:0e:4d:ac:be:95:fd:29:12:5a:a1:14:4a:9a:f9:
94:7c:dc:b7:4f:39:64:db:cc:ac:33:c2:25:76:f1:e9:85:0e:
d1:c5:2d:67:a2:b9:7a:26:77:cf:0b:f2:fa:ca:b2:b6:41:37:
a4:90:d2:77:97:9f:02:71:89:84:33:fd:c3:57:48:11:87:5d:
bf:06:71:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org