Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/wSAlcPvtVFlmwUkB7RY9FGHDe4w.roa
File: wSAlcPvtVFlmwUkB7RY9FGHDe4w.roa (raw, json)
Hash identifier: phBX+6HaZsYagFlyFBJPivY1JVadSvmBtJiju3ZmwXU=
Subject key identifier: C1:20:25:70:FB:ED:54:59:66:C1:49:01:ED:16:3D:14:61:C3:7B:8C
Certificate issuer: /CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Certificate serial: 018499E3868C176B6C69A4615FE0EE72B8C9
Authority key identifier: 6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/wSAlcPvtVFlmwUkB7RY9FGHDe4w.roa
Signing time: Mon 21 Nov 2022 11:12:15 +0000
ROA not before: Mon 21 Nov 2022 11:12:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48357
IP address blocks: 45.154.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:99:e3:86:8c:17:6b:6c:69:a4:61:5f:e0:ee:72:b8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a798f0fe4f4dffdfed2c8e62d235430f49377cd
Validity
Not Before: Nov 21 11:12:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c1202570fbed545966c14901ed163d1461c37b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:10:46:84:77:84:3d:fa:b2:d6:a3:56:6a:24:
c2:ea:06:db:30:a5:a5:bf:61:7c:0f:f2:28:36:f6:
b9:77:c0:55:8b:bd:91:82:1f:70:40:ab:f0:01:01:
43:47:8e:db:0c:b9:d8:0c:17:be:7f:02:a5:cd:96:
61:db:f8:06:d2:2a:86:64:88:84:a8:92:86:4f:41:
41:7f:a3:c0:64:73:b4:c1:46:aa:d5:62:e4:ab:f6:
88:74:8f:a7:5e:42:00:df:a4:43:66:ba:b4:8f:f3:
f9:e2:6a:2d:a5:3b:35:de:a0:07:e2:f6:18:17:d1:
ee:02:d4:f0:44:d9:49:9c:16:9a:4e:c8:2b:4c:b4:
16:c0:e8:c7:3a:10:6e:3d:76:1b:94:54:2f:1d:f6:
ed:a8:93:40:33:a6:73:2e:b0:4e:78:8b:ff:15:35:
0e:fa:81:f6:94:e0:02:35:56:fd:b6:12:1d:18:3b:
99:0f:77:97:30:d6:7a:51:2c:2b:c6:55:0d:c4:3e:
f9:4a:39:a0:c5:1f:6a:42:92:23:d8:ed:4e:5c:bd:
ca:23:9f:d8:87:a3:25:bc:f2:04:82:47:73:2a:8a:
6c:95:54:12:ef:ec:90:e6:0e:8b:60:51:ba:39:7d:
05:b5:4d:63:4b:8c:ae:5d:f8:66:6c:95:51:11:ff:
7d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:20:25:70:FB:ED:54:59:66:C1:49:01:ED:16:3D:14:61:C3:7B:8C
X509v3 Authority Key Identifier:
keyid:6A:79:8F:0F:E4:F4:DF:FD:FE:D2:C8:E6:2D:23:54:30:F4:93:77:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/anmPD-T03_3-0sjmLSNUMPSTd80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/wSAlcPvtVFlmwUkB7RY9FGHDe4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b7825-a0f7-4f5b-9c23-77cf81041083/1/anmPD-T03_3-0sjmLSNUMPSTd80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.206.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:24:87:b2:58:1f:0e:44:ec:ef:17:ce:ff:de:c1:41:76:b1:
e2:5a:80:9a:9f:4f:a9:3e:6e:88:3d:81:0b:8d:b5:f5:9f:88:
06:2c:3a:f7:2e:cd:69:87:a6:7c:49:63:11:76:be:17:e1:01:
9c:82:64:01:b4:39:26:a1:a9:e4:99:56:af:c3:af:e4:d7:a5:
50:ac:6c:b7:77:a2:02:2b:e9:7f:da:96:9c:a5:d0:09:4f:fc:
fc:ec:5e:f1:da:2c:1f:84:a2:1e:af:60:0d:96:7c:0c:cd:92:
60:86:b2:67:69:79:f6:02:7e:84:8b:38:41:70:f8:86:5a:d1:
86:cd:e8:b8:db:85:2c:4d:22:62:82:56:77:ce:f9:6a:65:bd:
4c:b3:7d:75:5c:30:04:0c:f2:08:7d:f1:91:7b:66:73:db:22:
05:f1:06:15:d4:b2:38:55:75:ab:7a:10:d5:85:91:87:fe:d6:
84:af:ca:f6:fd:21:98:56:39:29:d0:b0:b3:d5:c2:34:8a:aa:
84:1c:ed:92:01:ae:4c:73:b0:9e:6c:b2:cb:28:b8:64:53:62:
94:ca:6f:ed:95:ec:2b:6c:c7:36:c7:bc:6c:5e:b1:de:6e:aa:
87:e1:30:74:67:32:e1:3c:b3:10:44:46:3b:c3:5a:b6:8b:1c:
3d:0c:d7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:17 2024 by rpki-client on console-ams.rpki-client.org