Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/4iLl4t-Hs0usuO6cdmWjUNZboqs.roa
File: 4iLl4t-Hs0usuO6cdmWjUNZboqs.roa (raw, json)
Hash identifier: Vii9xqmsekHv+ecCmSJ0XFd6RP3qxiF8dTOJoK+FKAM=
Subject key identifier: E2:22:E5:E2:DF:87:B3:4B:AC:B8:EE:9C:76:65:A3:50:D6:5B:A2:AB
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 037BC528
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/4iLl4t-Hs0usuO6cdmWjUNZboqs.roa
Signing time: Fri 14 Jan 2022 14:40:23 +0000
ROA not before: Fri 14 Jan 2022 14:40:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60602
IP address blocks: 45.140.194.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 58443048 (0x37bc528)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Jan 14 14:40:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e222e5e2df87b34bacb8ee9c7665a350d65ba2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e7:19:dc:8d:06:a5:d9:34:55:51:d4:47:50:
57:7f:20:87:88:16:77:63:d2:38:66:3b:f9:38:5f:
98:cb:0d:92:2a:15:67:06:09:4b:74:cc:6b:65:20:
7b:e4:e7:e0:3c:2e:1c:cd:7b:d7:7b:95:21:4c:d0:
11:5a:b6:10:11:6a:56:9a:88:2e:56:b7:ab:87:8d:
41:53:c9:27:e8:f2:3c:b1:86:43:eb:b4:24:f7:3f:
c3:77:af:c1:de:42:30:a5:fb:e2:31:f3:42:c3:27:
c3:0c:49:58:4e:af:5a:de:76:4d:8b:f4:26:9d:8c:
61:dd:c4:77:57:a7:e3:d4:20:3c:14:15:bd:20:ed:
15:4b:10:9d:3c:09:4c:30:f6:36:a5:b3:7d:20:5e:
2d:ab:ba:19:dc:87:16:05:4a:3f:8d:ee:52:1c:77:
33:e0:29:e1:b9:fa:0b:7f:3b:6c:2c:27:97:36:1a:
65:75:6f:8d:10:b1:93:aa:a1:cd:a1:a3:bd:7e:6a:
40:d7:36:b5:94:44:8e:0c:14:ab:ea:67:fb:f4:4d:
99:5e:36:63:18:3f:0f:63:5d:03:cc:4a:ed:b4:61:
f7:e6:0e:32:2d:28:6b:3c:b0:7c:5a:65:db:2c:aa:
fe:80:79:32:fe:4b:4e:bd:e5:c6:b9:d9:1c:d7:21:
15:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:22:E5:E2:DF:87:B3:4B:AC:B8:EE:9C:76:65:A3:50:D6:5B:A2:AB
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/4iLl4t-Hs0usuO6cdmWjUNZboqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.194.0/23
Signature Algorithm: sha256WithRSAEncryption
b6:0e:4b:1d:44:56:96:f6:3a:c4:97:6a:6c:5d:81:db:fe:89:
48:3c:2c:f7:bd:e6:41:67:60:1d:d4:05:8d:cf:96:cd:3e:fa:
7a:f2:25:57:84:6e:c5:e4:2a:ae:06:63:bb:ed:cf:cf:55:29:
0b:b0:4e:b3:d4:ea:69:d1:08:4f:fe:26:57:68:f2:bf:66:ec:
c2:8b:70:21:40:9e:bb:56:82:1b:4f:2f:fe:cd:c2:b9:5c:89:
95:11:3d:29:98:d0:b6:44:ae:74:28:9f:2d:a8:82:67:5e:8c:
a5:05:92:fa:38:b1:6d:98:89:68:bd:a7:ca:78:e0:dd:72:5a:
8d:49:6e:dd:8e:53:2b:6d:e0:01:7e:12:59:78:3e:f5:4b:96:
6c:e9:29:3b:e0:08:a4:f6:6a:1b:44:ba:2c:63:e4:22:2e:1f:
cf:eb:4a:2f:0d:49:89:16:0e:af:d1:7d:97:3c:df:44:c5:85:
de:2c:da:d3:14:c6:aa:ec:f7:4e:60:e2:d0:76:ef:86:9e:7d:
be:dd:96:ae:87:81:48:68:f9:30:3f:a4:eb:89:a6:02:2d:5c:
01:f7:00:3e:fe:f1:5e:33:ca:51:12:e8:d3:03:7d:c6:c0:4a:
3b:87:5b:43:1c:71:b1:12:23:af:9c:fb:70:6b:83:0b:5e:2f:
7f:4f:88:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:56 2024 by rpki-client on console-fra.rpki-client.org