Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/2dp1ePVyfxSTJKeCot-fpSwVP6E.roa
File: 2dp1ePVyfxSTJKeCot-fpSwVP6E.roa (raw, json)
Hash identifier: tvv3G6zTbmzZJijCU9zvLnljlk4C/6Uk8dHsl3lPoro=
Subject key identifier: D9:DA:75:78:F5:72:7F:14:93:24:A7:82:A2:DF:9F:A5:2C:15:3F:A1
Certificate issuer: /CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Certificate serial: 05ACE2C8
Authority key identifier: 49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/2dp1ePVyfxSTJKeCot-fpSwVP6E.roa
Signing time: Sat 01 Jan 2022 08:52:47 +0000
ROA not before: Sat 01 Jan 2022 08:52:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 45.81.232.0/22 maxlen: 24
2a0e:66c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95216328 (0x5ace2c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Validity
Not Before: Jan 1 08:52:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9da7578f5727f149324a782a2df9fa52c153fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:15:45:1a:9a:f0:cf:1f:9a:2c:2e:47:cf:c3:
2f:3f:17:a7:e1:63:73:bf:11:cc:b6:01:5a:d9:e4:
49:90:59:97:b9:c3:d0:76:68:37:1f:b3:5b:2d:e2:
50:87:90:1b:1c:6b:73:cc:3d:ef:34:a0:19:81:b2:
36:12:01:96:03:84:d2:00:34:3d:38:e6:37:48:ee:
de:c1:0e:bb:2e:3d:52:95:cf:a6:45:47:4a:dc:9c:
4f:81:e4:4f:68:e0:b6:9d:ce:b2:4a:69:fd:87:6c:
cd:7c:8c:77:14:a1:f8:3a:13:de:a5:5b:39:f8:7f:
37:43:33:03:3f:bb:7f:fd:69:e9:07:17:95:25:c2:
13:65:2e:44:dd:2f:06:ec:99:95:3d:c0:d5:95:bc:
4f:33:1b:11:14:77:3a:f9:df:55:9c:52:f8:ff:97:
2b:41:0f:6e:88:60:c6:af:10:e0:31:e6:d8:84:d1:
2c:d2:6a:20:ee:f2:b3:19:ad:30:01:96:fe:5d:22:
3a:2a:da:56:6a:b4:20:2a:c3:4b:78:f1:f5:15:39:
0b:d6:be:bd:93:34:42:0a:77:7d:80:dc:fb:2d:6a:
36:b7:5a:60:a9:2d:4f:cd:1b:5b:57:dc:d5:f7:5e:
e8:04:43:c1:72:ab:8c:85:45:61:6f:0c:ca:13:fe:
09:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:DA:75:78:F5:72:7F:14:93:24:A7:82:A2:DF:9F:A5:2C:15:3F:A1
X509v3 Authority Key Identifier:
keyid:49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/2dp1ePVyfxSTJKeCot-fpSwVP6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.232.0/22
IPv6:
2a0e:66c0::/29
Signature Algorithm: sha256WithRSAEncryption
72:d0:6f:06:df:fd:c3:ae:37:52:9a:a3:78:de:02:f4:d6:d5:
fc:17:6d:ed:e7:16:2d:b8:f0:4a:39:d2:7b:90:84:9c:e1:9f:
6e:99:45:75:aa:f0:51:7e:72:40:49:7a:2c:d0:0f:12:68:87:
f6:7b:8a:9d:1b:a5:ec:7b:b3:a6:b6:5e:21:00:84:87:fc:7c:
0e:33:dc:be:99:59:d0:9c:bc:86:3d:b7:9a:f4:85:61:c7:99:
4d:e9:2c:3e:58:bb:d7:41:3d:b9:af:f1:5a:b7:17:b9:1f:08:
29:49:5a:d8:d8:c8:30:3d:85:c8:67:5d:66:4a:f4:95:51:8d:
bb:0b:7e:9c:d6:62:b7:a7:7b:2e:9f:02:c8:33:d6:74:20:1b:
b4:80:52:4c:0d:fc:7e:4b:c2:e4:61:cb:5a:59:3e:f5:8f:c9:
9e:4a:42:05:0f:04:0b:f2:a1:e8:1b:d0:0a:f5:b3:3a:a4:b0:
64:95:8b:4c:37:61:45:ea:6a:df:1c:c9:aa:9d:51:89:3a:07:
1a:18:e6:7a:51:3a:44:ba:c7:7e:d9:95:f9:d5:c6:a9:e3:62:
62:bc:d2:8b:20:22:1b:50:cf:17:1b:6c:e6:e2:a1:46:dd:85:
70:fb:dd:e6:e5:05:66:c6:73:56:da:86:90:10:c5:de:4c:9d:
ec:91:e7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:13 2024 by rpki-client on console-fra.rpki-client.org