Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/s43KM46Rp-nO6AXBCG5YfofDPm8.roa
File: s43KM46Rp-nO6AXBCG5YfofDPm8.roa (raw, json)
Hash identifier: 05xKS+ZC+2Oetwr7p1BkyzhnqS6zRVT+jpgt8Ecj/Wg=
Subject key identifier: B3:8D:CA:33:8E:91:A7:E9:CE:E8:05:C1:08:6E:58:7E:87:C3:3E:6F
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 0183F8275B8561CB20213447E8EE0E180F17
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/s43KM46Rp-nO6AXBCG5YfofDPm8.roa
Signing time: Fri 21 Oct 2022 01:27:52 +0000
ROA not before: Fri 21 Oct 2022 01:27:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 45.153.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f8:27:5b:85:61:cb:20:21:34:47:e8:ee:0e:18:0f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Oct 21 01:27:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b38dca338e91a7e9cee805c1086e587e87c33e6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:34:b6:d5:22:aa:58:ad:33:df:b8:0d:79:ba:
ed:e8:03:cc:a4:73:99:c3:e2:0f:7b:79:dd:e4:ea:
b9:5f:05:ea:14:d0:a9:07:63:25:16:32:21:e2:13:
c7:41:5d:4b:26:b2:81:a8:2d:1c:9c:ab:65:0d:8e:
31:4e:00:b4:b6:ae:e2:ee:d2:f2:b0:46:a3:cc:56:
fa:95:6e:9f:78:20:2c:41:4c:b1:f3:6c:ae:e1:41:
29:49:71:c7:78:cf:99:9b:95:4f:59:38:5f:a4:14:
25:94:85:13:18:4a:ec:c9:b7:ea:58:01:bd:df:90:
4b:70:4f:c5:6f:d5:c2:9f:2b:b5:42:02:72:ca:39:
95:ef:75:bd:2f:fc:d4:1f:61:a4:5c:7b:08:34:39:
e3:50:d8:16:2a:4c:ba:2b:b2:17:c8:d8:70:d3:60:
56:70:a4:bf:7d:d2:77:b2:1e:d1:53:19:07:c2:59:
86:fe:b0:5a:6b:0b:31:e1:9c:56:e5:e9:ee:29:73:
a8:85:c5:c2:67:01:18:33:d1:1a:1e:06:47:56:9f:
c9:04:ad:27:f9:c1:cf:9d:f6:4e:27:01:ed:a0:fd:
1f:97:19:8c:f1:25:e7:59:37:b7:ee:48:aa:6c:7c:
b2:d7:38:75:43:e9:9d:df:4b:c0:03:ca:f9:2a:26:
31:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8D:CA:33:8E:91:A7:E9:CE:E8:05:C1:08:6E:58:7E:87:C3:3E:6F
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/s43KM46Rp-nO6AXBCG5YfofDPm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.164.0/24
Signature Algorithm: sha256WithRSAEncryption
87:5c:35:8a:c9:8e:e2:00:8c:c6:dd:ef:6f:91:67:13:3e:f7:
76:80:cc:93:29:50:db:73:ff:bc:17:b7:04:d5:da:f9:72:21:
21:4a:05:a5:b9:a9:d2:5d:ec:22:61:58:ff:b8:15:1f:61:4b:
97:35:0f:eb:93:c0:56:0d:29:4d:e8:af:84:95:87:8d:3a:2e:
0c:bd:59:8b:61:e6:d8:cf:a4:6e:27:41:15:81:b4:0d:f0:c7:
6f:ea:a3:ea:78:40:16:71:6d:01:81:b1:36:42:d1:2a:72:5f:
3c:c0:27:d4:ff:84:23:4c:d7:83:41:0f:62:3e:fb:55:a8:a4:
8d:51:f1:76:62:f0:ea:4d:5d:e6:b2:2b:f0:f6:01:c9:a3:43:
42:be:fb:99:42:57:6f:1b:e0:5d:86:89:16:9f:6a:85:51:ab:
63:97:6a:fc:90:7d:e7:64:66:9f:0b:13:ff:89:94:3a:cf:3d:
d3:03:97:ae:8f:e3:f2:aa:42:5e:3f:e7:89:72:e9:f8:fe:d2:
07:8f:4c:71:86:25:4f:43:e7:c0:ae:00:32:d8:6d:74:dd:b2:
30:76:f7:5b:ea:87:bf:3a:b2:b9:9b:a0:fe:f8:39:f2:29:54:
1a:e7:c8:77:49:e4:9b:2d:ed:0b:e1:4b:2d:af:4f:f4:91:17:
cf:45:2d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:45 2024 by rpki-client on console-ams.rpki-client.org