Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/oA0IUS6BTSeXr6R4V14a5INC0vw.roa
File: oA0IUS6BTSeXr6R4V14a5INC0vw.roa (raw, json)
Hash identifier: kLJ+po4hyi97zzB4WfzF4nVIcmC+jq+HmPAui69ycIs=
Subject key identifier: A0:0D:08:51:2E:81:4D:27:97:AF:A4:78:57:5E:1A:E4:83:42:D2:FC
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 04D3CF42
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/oA0IUS6BTSeXr6R4V14a5INC0vw.roa
Signing time: Tue 07 Jun 2022 13:54:02 +0000
ROA not before: Tue 07 Jun 2022 13:54:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58061
IP address blocks: 45.140.195.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80990018 (0x4d3cf42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Jun 7 13:54:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a00d08512e814d2797afa478575e1ae48342d2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:9a:ef:f3:4b:93:9e:7a:22:f6:f6:f3:b3:
be:d0:b0:ac:c0:43:d9:26:f5:6f:bc:17:51:f8:a7:
52:b2:73:81:05:11:bf:d6:de:15:b4:16:bb:4e:16:
b1:32:d5:38:76:b1:3f:c8:94:bd:9e:fc:fa:37:b2:
9a:27:47:c1:08:9c:ae:9a:c6:32:45:51:c6:56:e1:
c4:3c:b4:e9:7f:a7:76:17:c9:61:3b:27:c0:7f:ca:
2f:d9:7e:6a:3a:33:c1:c8:a2:2b:f6:13:00:cd:59:
e0:71:71:ad:50:9d:c4:bd:3c:a4:e0:b2:e1:5c:c0:
db:66:7e:f2:79:00:e5:b2:03:74:55:2b:b0:cf:bf:
ee:08:9d:7d:45:61:3e:44:85:1e:15:8d:7d:c3:75:
a0:d6:63:58:c2:dc:e4:cd:96:9f:53:c6:d0:f4:c2:
63:52:e8:c6:3d:5f:d6:cb:07:1c:04:4a:65:3f:42:
34:ba:3a:66:fd:c0:fa:70:8c:ec:fb:00:e5:ff:59:
84:37:13:d8:08:ec:31:c9:77:55:c5:1a:8e:26:02:
f5:80:9b:85:3f:12:ea:1f:b6:ff:70:36:88:77:49:
a3:a4:3e:ed:f1:58:95:26:e9:14:5b:a5:92:a9:e8:
7f:6b:70:4f:eb:fa:de:41:67:02:db:0b:aa:b6:d5:
4b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0D:08:51:2E:81:4D:27:97:AF:A4:78:57:5E:1A:E4:83:42:D2:FC
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/oA0IUS6BTSeXr6R4V14a5INC0vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.195.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:ac:3c:1d:6a:93:a2:1e:08:79:58:84:83:a0:9b:9f:ef:c0:
0d:ce:1d:f8:86:f7:68:d7:48:a2:79:9b:16:6c:3b:98:3d:e3:
e2:3d:f0:5a:a3:61:29:1f:e7:20:96:f3:a2:76:81:ac:a4:30:
99:54:d9:b4:76:ce:53:1f:cd:1f:0c:e2:a6:ce:63:b8:90:3b:
78:74:3f:57:e6:f1:21:05:3f:d5:f9:92:80:f1:b0:16:3c:88:
f1:71:98:3b:1c:91:84:f4:d6:fe:22:4f:9d:a9:b9:9c:bb:de:
7f:41:4d:f0:6e:5e:e6:ac:a6:9e:c2:ee:d0:a4:c1:50:8c:81:
4f:90:86:0d:14:87:ef:5f:70:74:89:26:68:4d:70:e5:2c:84:
d8:09:bd:00:c8:b0:f4:86:5f:a4:37:84:2b:36:7d:d7:92:60:
02:29:b0:b4:69:c7:c3:70:f1:fc:a7:aa:c9:a1:51:86:87:81:
35:32:fb:0f:c5:9c:c0:8e:8a:ed:03:3d:24:ef:c1:fd:33:27:
6b:69:75:22:c8:ee:5a:0c:26:fe:08:d4:37:98:22:ba:7f:50:
ba:33:0a:dd:03:06:03:27:0e:1a:94:e8:1b:49:22:12:95:9c:
c3:98:e5:a5:cf:86:20:8f:66:1a:f4:4b:e4:2d:fd:23:5f:ab:
7d:b8:fa:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:45 2024 by rpki-client on console-ams.rpki-client.org