Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/wZLJV8gmM8c7tPm6UF9Fh0MfWtU.roa
File: wZLJV8gmM8c7tPm6UF9Fh0MfWtU.roa (raw, json)
Hash identifier: TegQQR/OnE4x7ywrvO18t/JF6N/a8CR7EYaFdGe/fAk=
Subject key identifier: C1:92:C9:57:C8:26:33:C7:3B:B4:F9:BA:50:5F:45:87:43:1F:5A:D5
Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Certificate serial: 040F88FF
Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/wZLJV8gmM8c7tPm6UF9Fh0MfWtU.roa
Signing time: Sat 19 Mar 2022 03:40:34 +0000
ROA not before: Sat 19 Mar 2022 03:40:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207152
IP address blocks: 45.153.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68126975 (0x40f88ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055
Validity
Not Before: Mar 19 03:40:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c192c957c82633c73bb4f9ba505f4587431f5ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cd:2d:8b:99:37:56:33:4a:a7:1e:b0:c5:90:
00:64:6e:e2:82:e0:2a:6f:d3:ec:80:69:89:12:94:
da:18:32:e1:cc:dc:a1:ce:4b:55:a7:19:f6:ba:ac:
6e:dd:5b:d4:d2:21:ac:06:54:09:41:fe:ed:c3:69:
f8:55:ed:a8:ad:00:d3:58:ca:91:1c:2f:f6:0b:3a:
dd:45:19:85:37:c2:56:d9:fb:0f:ce:db:79:55:e4:
1f:3f:b8:5d:4f:73:7f:5c:56:f2:7d:53:4a:7c:ac:
d4:5b:3c:00:24:3a:c2:c7:6c:d1:4c:aa:54:d3:d6:
87:50:13:c1:bd:60:3c:80:59:17:f9:94:a7:d5:93:
d8:d3:82:31:fa:e6:b2:0b:00:ed:aa:57:39:3a:91:
cf:2a:f9:e8:79:72:cd:a4:28:2a:49:a6:86:e9:79:
3c:5c:32:8d:03:ad:0a:d7:37:ad:1c:aa:79:c8:50:
b5:d8:0f:26:52:33:e6:85:f5:28:73:b8:84:9f:2a:
40:5d:ee:f2:6e:b8:56:3f:45:ea:75:29:e2:71:bf:
7a:b3:0b:4e:f4:23:f1:e9:ae:fb:69:4c:34:18:40:
32:87:a3:26:12:ee:94:0d:e7:ac:7c:41:30:79:12:
36:d7:a0:d1:9f:3c:ef:6d:30:0a:54:7a:02:c1:b9:
40:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:92:C9:57:C8:26:33:C7:3B:B4:F9:BA:50:5F:45:87:43:1F:5A:D5
X509v3 Authority Key Identifier:
keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/wZLJV8gmM8c7tPm6UF9Fh0MfWtU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.164.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:22:72:b4:50:dc:a1:8e:eb:8f:2f:0a:1b:bf:13:69:b8:11:
32:58:7e:04:69:b1:5e:fa:16:2c:a6:ac:28:67:fa:fa:0c:aa:
e9:68:f0:3c:f6:62:a5:83:95:66:a5:3f:42:69:76:14:a5:06:
ed:36:18:6f:ee:80:d4:67:4c:c7:2c:a4:cd:f8:1e:67:08:c9:
1b:da:7c:24:9b:00:8c:d0:b0:f7:4b:44:ac:cd:63:05:96:09:
aa:4f:14:2b:bd:46:97:95:da:eb:86:e4:46:1a:c2:6b:7f:fb:
8b:48:29:86:d9:8a:31:93:a0:25:13:f6:6a:02:15:82:0a:69:
d4:1d:4b:ba:ae:1a:1e:45:3f:64:8e:76:21:18:85:e2:fd:93:
7e:9e:56:a4:40:52:e1:98:ae:25:1c:08:8a:af:91:9d:4d:61:
df:54:28:94:f7:49:56:56:1a:c0:c8:0e:46:ed:0b:18:99:41:
9d:03:3c:10:4a:32:8d:a1:bc:b1:a6:1e:cd:58:07:4b:2e:b9:
c5:5d:69:3e:72:04:b9:3c:a7:f9:34:e8:2f:ca:3e:da:3d:bc:
31:51:90:9e:69:89:8d:56:b2:04:9c:23:83:eb:45:04:65:96:
03:d9:29:06:c7:ba:94:a1:dc:7d:77:ee:12:65:ba:97:5b:3c:
f6:38:24:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:45 2024 by rpki-client on console-ams.rpki-client.org