Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/wJWaBNBoy2ESIKGQnVQiFC_J0GI.roa
File: wJWaBNBoy2ESIKGQnVQiFC_J0GI.roa (raw, json)
Hash identifier: Bf62LKeB4cyBCPA76sOC11t6D8pleb5SsXNpgQc/z+E=
Subject key identifier: C0:95:9A:04:D0:68:CB:61:12:20:A1:90:9D:54:22:14:2F:C9:D0:62
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 0402D146
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/wJWaBNBoy2ESIKGQnVQiFC_J0GI.roa
Signing time: Mon 14 Mar 2022 14:42:43 +0000
ROA not before: Mon 14 Mar 2022 14:42:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210443
IP address blocks: 45.153.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67293510 (0x402d146)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Mar 14 14:42:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0959a04d068cb611220a1909d5422142fc9d062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:25:c0:77:b2:3e:82:cb:2b:a3:d2:2e:5f:d2:
f9:90:23:36:00:89:08:e1:35:a3:35:22:8f:14:85:
2b:40:4e:fd:2d:b3:ea:83:93:3a:98:70:06:52:64:
41:da:65:27:55:2b:1d:bc:32:6a:86:6f:d2:ec:27:
36:4e:7d:7c:32:77:66:f0:6b:34:9a:49:67:37:a0:
c9:6f:69:e7:8f:a6:06:4c:cb:68:13:6f:f5:17:07:
78:01:8e:8e:f6:bd:9d:84:ee:d8:0e:c7:44:5a:8b:
4d:be:ca:a7:9e:56:69:04:4d:38:fa:d7:17:0e:d7:
52:92:cf:b0:bc:bc:d9:9b:4e:0d:21:c5:e1:5d:61:
40:57:c8:21:10:98:d5:29:df:43:b4:03:04:e1:1e:
33:8b:d3:b9:78:b9:ca:c7:3a:1c:84:b9:0d:83:9a:
9a:3b:a7:ab:76:09:1a:07:2c:26:36:8f:44:74:78:
7b:cc:0d:ad:ae:ea:4f:2e:00:6f:26:83:c5:3b:6a:
e7:04:79:17:dd:1d:22:75:06:a3:62:88:a1:92:fa:
69:1f:bd:fe:2a:b7:44:99:b8:4b:d6:7d:d9:cb:17:
6a:8e:85:98:90:8f:ca:9a:30:a6:c9:52:e2:e0:88:
af:e6:1b:4a:71:9e:18:62:5c:8d:3d:28:90:dd:df:
3c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:95:9A:04:D0:68:CB:61:12:20:A1:90:9D:54:22:14:2F:C9:D0:62
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/wJWaBNBoy2ESIKGQnVQiFC_J0GI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.164.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:5a:14:e2:37:86:53:a0:c6:37:3d:3f:22:01:21:95:06:30:
8b:0a:6f:a8:91:2a:13:bb:d2:0f:d7:ba:64:8c:b2:23:0f:dd:
1f:1a:c0:89:10:2a:7d:fe:ab:dc:6a:f1:a6:08:b2:2b:35:53:
12:ee:ce:83:4b:97:7c:95:12:4d:ba:25:52:4d:d2:ea:0f:b8:
32:1c:c5:96:d4:0a:14:5e:53:7c:b5:71:f9:83:2a:f1:2c:8f:
8b:55:b5:dc:41:8a:79:b5:00:d4:06:b6:46:63:30:03:3d:f6:
97:f9:08:44:e3:11:74:65:ca:c4:77:c3:e9:62:67:6e:26:4a:
88:29:88:1a:3a:57:58:ed:4f:46:23:d2:4c:80:99:86:3f:84:
74:fe:c4:41:f2:61:ba:d4:38:99:5f:69:b4:f4:62:25:a6:fd:
32:1c:14:1e:43:73:fb:23:7b:17:34:ba:38:be:11:ec:51:3f:
73:a1:91:28:d2:3b:24:c8:da:f1:fb:9f:28:38:db:cd:34:24:
40:b4:c4:e9:5a:cb:7f:9d:89:7e:c8:de:77:70:31:35:c1:98:
47:c0:a8:0f:ba:e5:f2:9a:dc:b1:e7:2b:76:cb:a9:d7:37:a0:
9e:b2:bf:3e:6f:a5:fb:f6:bc:34:ed:f2:d1:04:82:f1:ed:4b:
15:08:b6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:56 2024 by rpki-client on console-fra.rpki-client.org