Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/54-ftf59-goJG6NY-Ne5lLIg9gA.roa
File: 54-ftf59-goJG6NY-Ne5lLIg9gA.roa (raw, json)
Hash identifier: Qs07Z7fHy1ZZhdyXRl4ugMSha5v2RyuKfRZJ34rfGd8=
Subject key identifier: E7:8F:9F:B5:FE:7D:FA:0A:09:1B:A3:58:F8:D7:B9:94:B2:20:F6:00
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 0621B75C
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/54-ftf59-goJG6NY-Ne5lLIg9gA.roa
Signing time: Wed 20 Apr 2022 14:31:14 +0000
ROA not before: Wed 20 Apr 2022 14:31:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62005
IP address blocks: 45.66.249.0/24 maxlen: 24
45.66.248.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102872924 (0x621b75c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Apr 20 14:31:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e78f9fb5fe7dfa0a091ba358f8d7b994b220f600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:48:01:ff:27:d9:10:ca:ca:88:90:c8:4b:04:
fb:09:cb:75:0c:42:c3:c4:8f:4e:c1:47:31:17:9b:
c9:e8:e7:e7:4e:73:7d:5c:55:95:75:93:7c:7f:05:
f9:5a:2f:05:d9:64:65:95:8b:ad:73:42:75:fc:e3:
14:bc:03:23:43:29:d1:1b:dc:ce:b4:77:ff:3c:f4:
61:68:3d:f5:a9:c5:c4:fb:8f:15:17:29:e9:ae:2f:
a9:b8:cf:11:de:ce:c3:3b:46:ca:0f:b6:4c:0f:4f:
61:6e:13:ef:38:db:16:ee:9c:a8:ec:2b:ae:ea:ff:
57:9e:3e:a0:fa:9a:59:95:8d:fe:31:db:d0:fb:61:
33:c5:c3:55:1d:86:74:ef:9e:44:3a:24:24:79:12:
cb:2f:e5:f4:00:19:e8:24:10:1c:26:65:91:4d:10:
2e:85:1f:b1:11:b1:23:ad:c6:18:16:5d:ab:86:89:
a1:b0:6e:e0:65:75:76:d6:d2:64:78:cb:9f:37:7b:
2f:62:42:d0:64:80:b5:c5:41:47:1f:e8:29:32:9b:
05:7e:b0:95:f2:75:10:2c:ce:e4:7f:9f:55:3a:77:
19:8e:23:21:35:13:14:ca:46:ac:85:c5:7d:93:2e:
26:d2:5d:e2:89:e3:41:d8:bb:f6:82:41:89:fd:40:
07:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:8F:9F:B5:FE:7D:FA:0A:09:1B:A3:58:F8:D7:B9:94:B2:20:F6:00
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/54-ftf59-goJG6NY-Ne5lLIg9gA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.248.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:a0:71:b2:79:d1:2e:42:fa:81:a8:66:d6:1c:f2:b3:94:29:
52:bc:9d:ef:76:2a:7c:bb:89:db:d4:1d:22:9f:86:d4:c9:4c:
4c:01:60:1f:8d:5f:ce:62:62:a3:be:4e:4d:a3:af:2e:b9:3c:
06:36:1d:00:20:29:68:4a:be:16:46:8c:44:68:f6:20:89:58:
0c:51:bb:dd:56:b7:da:66:c2:04:a1:e5:36:74:d7:c6:ca:e2:
47:4f:a5:b8:12:81:4d:ad:ad:00:98:bf:5f:86:cf:74:8c:df:
f5:39:45:0d:7c:98:3b:53:b6:9d:a2:8d:ca:93:45:4b:93:d5:
6b:b8:c9:13:86:66:3b:db:d1:88:5b:b6:ba:0a:c0:b3:93:aa:
1f:7d:90:f4:af:0f:9f:f1:2c:52:c0:f3:89:40:0a:05:a7:1f:
8a:f4:48:bf:4e:73:5b:ce:d0:14:7a:40:66:26:b0:c7:1f:79:
ba:17:d1:f9:a2:eb:06:41:ca:1d:14:b6:2a:c1:88:b0:fd:a0:
de:6d:09:0e:01:ec:09:cc:8c:9c:ab:ca:82:d5:71:af:b7:4b:
27:a5:d3:7f:ea:56:31:8c:67:24:8d:52:c1:cb:ae:60:b6:3c:
db:c0:04:2d:73:89:54:d3:58:3d:54:b5:97:0d:9d:56:b6:12:
da:1b:18:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:37 2024 by rpki-client on console-fra.rpki-client.org