Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/EVP0moU3MjkykvRl45w0Mp1daqU.roa
File: EVP0moU3MjkykvRl45w0Mp1daqU.roa (raw, json)
Hash identifier: IEfCS7U1RQ6sJLPc1DesgW9MiNzHZJxGZkfazfqBDxQ=
Subject key identifier: 11:53:F4:9A:85:37:32:39:32:92:F4:65:E3:9C:34:32:9D:5D:6A:A5
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 01849F37497A0B0B28CA9CC6E531A7D37FAA
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/EVP0moU3MjkykvRl45w0Mp1daqU.roa
Signing time: Tue 22 Nov 2022 12:01:51 +0000
ROA not before: Tue 22 Nov 2022 12:01:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61344
IP address blocks: 45.66.250.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9f:37:49:7a:0b:0b:28:ca:9c:c6:e5:31:a7:d3:7f:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Nov 22 12:01:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1153f49a853732393292f465e39c34329d5d6aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:46:65:f5:3c:54:98:66:b2:6d:15:0f:bf:04:
78:31:64:e4:5e:7c:f8:d0:de:98:d0:7c:00:2e:e4:
10:d5:a1:11:50:b4:d3:51:ac:65:1e:9d:f6:8f:30:
a4:f1:cb:3c:dc:11:0b:d5:3a:ea:00:76:5d:22:59:
9e:da:3f:26:76:45:37:5f:63:66:dd:60:5e:27:3f:
06:92:95:79:a4:8d:42:5d:40:2f:1a:c7:51:7a:4e:
de:8f:dd:85:ca:04:f3:4f:e6:f8:4d:92:5d:7b:4b:
e2:2d:89:10:b7:ab:c3:8f:0d:94:87:14:2f:57:7f:
e3:f8:3d:19:3b:93:47:06:e9:c6:0c:21:25:f4:3c:
6d:dd:f5:bf:9d:78:e6:07:24:17:54:08:4e:f0:70:
ad:73:38:33:28:cb:42:e7:a3:eb:9a:4d:2a:10:92:
fa:f7:a1:12:61:28:81:80:c7:0c:66:37:a2:ec:2a:
1a:4a:b2:08:0c:2e:c0:e7:10:da:b3:cd:76:0f:3a:
45:50:7e:c6:27:79:40:7f:80:1a:a5:a4:7e:55:6f:
26:12:61:b1:5f:f7:42:9d:da:23:bc:03:51:8a:b8:
8f:5c:c7:f8:ec:56:f3:10:72:cd:81:47:a8:2a:f3:
4d:16:3a:c1:6a:5a:ce:de:b7:94:dc:18:d4:93:71:
aa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:53:F4:9A:85:37:32:39:32:92:F4:65:E3:9C:34:32:9D:5D:6A:A5
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/EVP0moU3MjkykvRl45w0Mp1daqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.250.0/23
Signature Algorithm: sha256WithRSAEncryption
34:b9:d1:cf:1f:b5:11:3a:ff:0e:a9:8c:26:30:41:14:43:a8:
d8:93:c5:3f:13:f2:38:a6:f5:57:99:20:c7:30:d9:d4:aa:f8:
57:65:6e:b2:c3:4e:97:62:1a:ab:7c:6c:10:05:91:7a:b3:56:
13:6e:0c:b7:9b:5a:99:21:b0:c0:b7:92:1d:ca:ee:0b:f0:2c:
62:b8:f6:6d:6c:20:5c:66:b7:00:68:73:2e:d5:86:a3:cc:26:
6e:23:3a:e7:1a:46:89:4b:f3:d6:b0:80:e6:89:61:12:96:69:
ef:30:22:96:a2:4a:61:55:4a:c8:b1:3c:6a:ce:12:4b:a4:48:
bf:2d:86:f7:80:0d:c4:1d:90:82:3c:1c:37:fd:4e:3c:94:84:
82:87:7b:79:a9:6b:08:b4:9e:86:61:74:9f:ee:f3:ba:05:cd:
e7:00:b3:e4:18:5b:77:21:f3:ab:cb:98:8f:83:ce:ee:26:5a:
4e:9e:d7:c7:d1:36:02:86:5a:a3:2b:94:72:f3:df:93:94:e7:
dc:49:c5:eb:79:b3:a9:29:c5:7c:fe:87:e4:f5:7d:db:da:db:
a7:06:19:36:ac:45:52:74:72:da:b9:d3:61:98:db:ff:4b:3b:
e6:41:2f:d2:90:ff:8a:4b:d1:4f:2e:35:b7:3f:2d:8d:0c:8f:
67:cd:61:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:37 2024 by rpki-client on console-fra.rpki-client.org