Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/dpZLeQbXXyB70rGoYENC_yzy4FY.roa
File: dpZLeQbXXyB70rGoYENC_yzy4FY.roa (raw, json)
Hash identifier: FyUzlOpUb2kGbdg5YWhv0VOBgevgXoZW5J7WRPoCenA=
Subject key identifier: 76:96:4B:79:06:D7:5F:20:7B:D2:B1:A8:60:43:42:FF:2C:F2:E0:56
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 035707DA
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/dpZLeQbXXyB70rGoYENC_yzy4FY.roa
Signing time: Sat 01 Jan 2022 07:01:42 +0000
ROA not before: Sat 01 Jan 2022 07:01:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19437
IP address blocks: 45.153.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 56035290 (0x35707da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Jan 1 07:01:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=76964b7906d75f207bd2b1a8604342ff2cf2e056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:0a:ec:49:89:b4:ba:e3:d8:0c:ac:fc:a3:f3:
47:79:96:c6:64:29:c1:32:48:1b:cd:11:16:3b:e7:
8b:f6:4c:ce:5d:5f:b1:f4:16:86:f7:d3:60:41:2a:
c5:20:4b:f4:1e:c8:11:2a:53:a5:fb:8e:88:0a:18:
98:ae:3f:83:11:dc:1b:f3:9e:3e:ff:28:ec:01:a0:
6d:d4:64:97:b3:51:a2:a4:ea:d3:33:24:ad:4a:a0:
96:a2:d6:dd:70:e7:cb:95:b0:9c:e1:61:37:8e:48:
4b:17:d0:c8:72:95:d4:a6:c5:6e:25:d5:68:11:f8:
f3:a9:7c:59:f9:7d:a8:20:d4:e6:fd:ef:07:71:2b:
1c:9f:48:c7:7b:32:93:8c:69:03:6b:5d:36:31:7e:
1c:2b:1e:6b:1f:34:ef:f9:f0:3d:ee:ff:1c:10:1d:
9e:6e:61:d4:b9:73:c6:d9:ec:df:20:5c:77:80:d7:
97:8e:6b:07:c0:cb:cd:77:c9:81:92:29:fe:87:b5:
09:77:37:98:60:cd:d6:5a:1e:33:09:3b:4d:90:86:
15:b9:85:ca:29:a5:af:c3:87:3e:0d:b5:a5:1b:38:
19:72:21:ac:29:1c:2d:00:01:fe:84:d7:58:12:47:
6a:f9:af:16:63:a5:50:29:b3:33:af:b9:9c:79:f4:
8f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:96:4B:79:06:D7:5F:20:7B:D2:B1:A8:60:43:42:FF:2C:F2:E0:56
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/dpZLeQbXXyB70rGoYENC_yzy4FY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.166.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:3b:80:59:1f:e1:83:8a:ef:54:8d:f6:a8:c1:bb:3c:81:8c:
ae:ac:17:db:d7:68:be:30:e3:2e:5f:92:df:69:50:b8:1f:34:
b5:a6:2b:30:33:ef:b0:eb:53:26:35:31:83:23:4b:a8:5c:1f:
77:a4:90:07:5c:91:1d:ad:75:6f:9e:c9:d5:d4:6f:2a:c8:2a:
8e:f2:64:f6:ab:18:19:bd:0b:f4:8b:98:46:91:40:20:6b:bb:
7d:f0:d8:f7:ba:17:68:48:cf:f5:1d:a1:a4:ba:0c:26:52:a6:
54:9f:35:2b:af:34:67:5f:ad:66:33:d2:5e:aa:4d:2c:cb:ba:
10:47:6f:9e:ca:63:e0:3f:2b:f8:87:9a:15:e4:68:5e:3b:88:
f6:e2:19:4b:7b:31:9e:b6:fd:fe:e5:a3:17:62:98:e9:cb:1e:
95:12:ba:2b:62:3a:03:91:09:f1:ab:53:0d:96:96:2b:06:d5:
1a:89:aa:5c:3e:a5:15:7a:c8:db:9c:1d:17:71:63:46:94:a8:
00:9d:6c:87:95:4c:1d:01:48:d4:19:0c:b2:73:50:ad:be:1d:
c7:0b:db:89:ee:10:73:be:45:eb:5b:7b:f7:e1:9d:43:70:0e:
e6:83:2e:72:10:49:c1:50:5e:2a:a3:c8:99:38:be:b9:8b:87:
7d:35:1d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:56 2024 by rpki-client on console-fra.rpki-client.org