Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/Ryj1w1I4oQn0tDR3bUZFrLDFC9o.roa
File: Ryj1w1I4oQn0tDR3bUZFrLDFC9o.roa (raw, json)
Hash identifier: SYj5W0prz+7cCapkMNIv1BF0AaVpRPpLXAj9+gIF+lo=
Subject key identifier: 47:28:F5:C3:52:38:A1:09:F4:B4:34:77:6D:46:45:AC:B0:C5:0B:DA
Certificate issuer: /CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Certificate serial: 0749CFD0
Authority key identifier: 80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/Ryj1w1I4oQn0tDR3bUZFrLDFC9o.roa
Signing time: Sat 01 Jan 2022 07:56:01 +0000
ROA not before: Sat 01 Jan 2022 07:56:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210681
IP address blocks: 45.129.122.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122277840 (0x749cfd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8069d9ffe048a70003f16f06e24d9bf2db85eb52
Validity
Not Before: Jan 1 07:56:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4728f5c35238a109f4b434776d4645acb0c50bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1a:24:1a:f3:ce:68:fc:7f:19:b1:29:91:67:
80:7b:c5:d8:61:08:da:a6:22:72:ab:21:7d:5f:7a:
8a:6c:03:1b:ad:b0:d0:cf:dc:34:34:8d:ff:9c:17:
e9:8e:30:7a:53:e3:08:48:65:88:7c:df:b3:3d:e1:
64:0b:43:af:ef:f6:4b:b9:8b:19:05:63:00:9b:a9:
b8:c4:61:28:f5:52:c3:c5:21:ea:19:48:a9:9d:3d:
3e:b7:47:a4:7f:d4:c2:56:c0:fa:eb:a6:85:a4:56:
16:bc:3f:ec:07:6a:ee:5d:2b:75:0b:9a:94:6e:e8:
36:65:26:10:2e:4a:69:20:51:0c:33:55:b6:a5:a6:
a8:55:81:e3:9d:43:62:6d:ee:1d:2d:bc:27:20:8f:
8b:ce:c2:bc:60:35:92:24:a7:08:6b:63:b5:02:42:
d1:4e:83:73:20:d8:ca:9e:77:2d:a0:7a:88:77:95:
34:38:2d:15:a6:2b:74:94:29:5d:4f:8b:8d:64:a4:
ff:42:de:ec:00:61:0c:6d:70:4d:ab:1b:d4:6e:be:
45:57:3a:d7:55:86:06:b6:cc:75:61:1c:1f:7d:3f:
15:19:9d:f6:be:30:47:73:17:b4:31:4d:27:9f:6d:
64:21:87:47:f8:a4:5a:7e:9a:d2:43:9d:9e:42:41:
b0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:28:F5:C3:52:38:A1:09:F4:B4:34:77:6D:46:45:AC:B0:C5:0B:DA
X509v3 Authority Key Identifier:
keyid:80:69:D9:FF:E0:48:A7:00:03:F1:6F:06:E2:4D:9B:F2:DB:85:EB:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gGnZ_-BIpwAD8W8G4k2b8tuF61I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/Ryj1w1I4oQn0tDR3bUZFrLDFC9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e64148-4c8c-4e84-925b-e022e3009a71/1/gGnZ_-BIpwAD8W8G4k2b8tuF61I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.122.0/24
Signature Algorithm: sha256WithRSAEncryption
89:3c:70:8a:16:b9:22:c7:3e:46:a2:92:a1:dd:82:fc:2f:df:
ab:e4:4c:6d:1f:69:65:f8:43:62:32:a0:5d:1e:8e:ea:57:19:
40:5e:f7:b4:ec:b3:16:3f:4f:12:1f:b4:e2:23:6e:16:5b:93:
b3:5e:08:3c:83:2b:65:79:38:70:7a:fb:c5:61:83:48:87:77:
87:fe:82:03:6d:32:e1:30:15:a8:01:4e:f4:45:6b:60:3a:81:
e2:39:aa:ec:ef:ec:75:ed:ed:63:d4:a4:01:82:a0:1c:78:ad:
7f:94:bc:49:08:ec:75:7a:17:dc:ea:4f:84:7c:86:0a:57:77:
2c:8d:04:16:fd:0c:a0:85:e4:42:79:21:b5:7e:38:15:cf:1c:
2a:3e:5e:89:ea:29:4b:57:a3:c0:97:56:58:da:f3:a1:1e:a9:
c5:08:fa:0e:31:39:fc:f2:07:44:b4:e7:9a:17:2e:79:77:fc:
68:72:ae:19:7c:0a:10:71:0d:69:09:08:09:79:3e:30:76:be:
1d:b4:bc:9b:53:2d:27:88:79:f6:77:c8:4a:54:62:09:55:80:
e5:c8:26:f5:29:e0:82:cf:84:67:40:14:c7:95:1b:a2:e4:f3:
c8:31:9c:1e:3e:a7:17:be:e9:03:67:e2:97:f0:2e:64:76:95:
8f:5d:29:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:22 2024 by rpki-client on console-ams.rpki-client.org