Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/VsUdMQ8jhXfLNJGiK9PGqQR971g.roa
File: VsUdMQ8jhXfLNJGiK9PGqQR971g.roa (raw, json)
Hash identifier: v++/BS+Y+jdGOYHuIUZjgQLzM3+f5VJVDK1k6qlq/2g=
Subject key identifier: 56:C5:1D:31:0F:23:85:77:CB:34:91:A2:2B:D3:C6:A9:04:7D:EF:58
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 01822633C5B2DD0E7E57020463296C0737B7
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/VsUdMQ8jhXfLNJGiK9PGqQR971g.roa
Signing time: Fri 22 Jul 2022 13:58:23 +0000
ROA not before: Fri 22 Jul 2022 13:58:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204968
IP address blocks: 45.153.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:26:33:c5:b2:dd:0e:7e:57:02:04:63:29:6c:07:37:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Jul 22 13:58:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56c51d310f238577cb3491a22bd3c6a9047def58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:43:5a:fc:f9:6f:32:50:95:e2:07:f2:fc:fc:
50:de:29:f6:5a:29:30:5f:aa:08:f7:0f:8f:54:68:
af:b8:a3:49:23:c4:f4:c0:d7:06:b4:30:35:2f:b3:
aa:d4:8f:ae:1b:b7:4c:32:51:26:06:13:5c:8e:b3:
0f:a7:d2:5f:f6:61:36:8c:dd:eb:71:61:3c:8f:37:
db:e3:67:fd:d3:5f:76:9e:a8:8d:b4:c2:e3:4e:7a:
7a:fa:5d:2f:c7:03:d6:83:90:45:38:6a:0a:ba:e5:
41:fd:15:ef:79:3d:6c:ee:0a:52:28:88:bf:cf:e4:
09:31:b4:27:0e:12:7b:19:85:0d:e3:8b:4d:34:6f:
b7:17:c2:06:af:08:e9:2e:32:e3:cd:38:5a:e1:d5:
b3:e9:28:0a:5a:9c:f2:e7:f5:ec:75:47:82:91:a0:
01:34:94:80:3e:83:37:d0:cf:88:5e:60:40:7f:3a:
b3:dc:e6:a1:63:ee:0d:96:e3:2a:45:c1:da:c0:56:
a9:f3:3f:a2:82:fb:1a:35:ee:3b:05:9b:92:89:93:
f2:67:5f:9e:0b:6c:61:cb:79:7b:c5:36:6e:c7:86:
1c:6c:f1:11:80:e4:1c:f0:92:7e:f0:99:3a:96:86:
51:c7:e7:22:45:fe:0a:82:3e:e7:c6:7a:2c:c8:25:
43:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C5:1D:31:0F:23:85:77:CB:34:91:A2:2B:D3:C6:A9:04:7D:EF:58
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/VsUdMQ8jhXfLNJGiK9PGqQR971g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.164.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:f6:a4:55:bf:24:ea:63:af:91:79:99:0d:b3:c2:2e:44:01:
bc:25:c3:47:39:85:02:bc:c5:a5:97:2c:3a:2e:a5:4c:9c:96:
57:f6:76:fd:bc:97:e1:aa:0f:29:20:7e:fe:b7:86:de:a9:97:
05:9c:1c:c8:13:44:7b:96:57:b0:c8:07:5a:b2:1f:8b:52:cf:
ff:18:80:0e:51:cc:d3:07:1c:05:83:28:18:1b:5c:c4:cc:54:
9d:3c:18:33:e4:d8:36:ea:c8:a8:a0:f6:32:9d:44:14:84:1b:
3b:31:65:e6:80:22:d2:63:e3:82:f7:92:1c:69:88:f6:8d:89:
85:29:2f:f6:92:8c:bd:6c:5b:8b:2d:18:8b:85:04:b4:e8:0c:
75:ab:52:eb:d2:20:6f:04:44:5f:72:e3:9e:c2:76:c9:0b:0d:
e0:15:62:bb:b3:16:24:a0:11:5a:40:d9:58:10:1b:19:39:fd:
15:2b:7d:92:4d:67:2c:41:9f:57:af:b0:ca:eb:73:af:b7:99:
c3:56:7e:fb:8b:4d:d2:cd:49:28:a9:fd:a4:d7:bf:76:ad:7d:
3d:90:6f:4e:a3:df:c1:bd:3e:cb:7a:47:9a:eb:67:97:fa:b1:
26:37:41:cb:11:3b:af:e7:79:b8:5f:43:e4:af:d6:7f:6a:b6:
2e:49:f2:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:45 2024 by rpki-client on console-ams.rpki-client.org