Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Kfiqhmz1eUTEg_klymXOJ0xA_bs.roa
File: Kfiqhmz1eUTEg_klymXOJ0xA_bs.roa (raw, json)
Hash identifier: RrErcMf1aKLHO2bmnIOCGR+zenz+xFD/4VjWv0JDFjk=
Subject key identifier: 29:F8:AA:86:6C:F5:79:44:C4:83:F9:25:CA:65:CE:27:4C:40:FD:BB
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 055A9AD0
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Kfiqhmz1eUTEg_klymXOJ0xA_bs.roa
Signing time: Mon 24 Jan 2022 08:34:20 +0000
ROA not before: Mon 24 Jan 2022 08:34:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210512
IP address blocks: 45.143.166.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89823952 (0x55a9ad0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jan 24 08:34:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=29f8aa866cf57944c483f925ca65ce274c40fdbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:85:98:f5:01:b7:3d:6c:33:1d:ec:33:1e:a5:
89:a0:27:9e:d3:d0:ce:bf:18:09:59:1a:2a:5f:ff:
38:81:5e:22:a5:4f:42:18:64:84:0b:a7:de:88:6d:
88:94:12:d0:fe:b2:12:cd:6e:e1:d2:f5:4d:ff:42:
cb:d8:4c:85:31:da:82:03:36:4e:8f:97:c0:ef:55:
86:cf:0f:33:67:c8:0f:71:ce:23:95:d0:f9:2d:cd:
28:0a:fc:c4:d9:d1:f5:8e:0a:65:fb:17:12:89:ec:
24:bd:93:f1:32:3c:48:19:d9:84:27:c5:c3:b0:cf:
64:09:7f:e7:6d:a6:3f:af:e2:aa:1f:f1:d6:87:3d:
31:1e:f6:b3:b6:49:d5:8d:10:8f:63:88:b5:32:1e:
53:07:0c:03:31:94:c6:9c:b1:40:58:4e:61:97:c5:
9d:e1:2c:7b:fc:45:ba:12:4c:3b:54:ea:89:af:60:
d4:04:a5:e5:b9:b4:f9:d7:8a:73:da:5b:9c:f8:bd:
b5:4f:24:1d:cd:19:35:e9:50:48:7d:74:0c:d3:9e:
4b:9f:9f:66:34:c4:2d:b0:93:fc:2f:f0:d0:1a:da:
14:ff:6e:c3:c8:f6:6c:2b:6a:d1:6c:3f:29:ca:ab:
1d:26:3d:41:a4:c6:56:37:94:c0:55:6a:d0:a2:26:
2a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F8:AA:86:6C:F5:79:44:C4:83:F9:25:CA:65:CE:27:4C:40:FD:BB
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/Kfiqhmz1eUTEg_klymXOJ0xA_bs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.166.0/23
Signature Algorithm: sha256WithRSAEncryption
11:35:a3:f3:f9:00:5b:c0:89:27:e9:ed:49:31:46:60:e6:b0:
fa:e9:0c:32:a2:73:98:25:aa:18:b5:99:44:52:b1:e2:9d:3c:
e1:20:d1:8a:51:07:84:2d:d2:8e:49:5e:a4:45:7c:92:a0:08:
21:03:7c:f9:5b:c1:8f:60:07:13:a6:cd:82:f1:ce:b1:6f:91:
07:0e:69:d1:e0:7e:0b:4d:29:1d:14:a5:38:5e:a3:ff:da:16:
20:0a:1f:68:19:98:26:1c:c5:27:0e:0f:62:5b:cf:77:70:a2:
f5:23:01:22:2d:a5:f0:f9:a7:4b:7c:cf:14:fd:28:7c:7d:91:
d5:7d:d6:91:40:25:86:63:e4:01:cd:3a:44:07:a2:8e:08:d3:
db:48:06:34:38:31:df:30:42:98:bf:d8:a5:05:66:a7:95:fc:
1d:c1:e7:00:29:70:55:30:b3:92:0e:5d:a0:0c:08:b3:46:cf:
f2:39:48:8c:31:ce:93:1f:09:8f:e4:87:fc:ec:f4:9e:ee:6d:
98:33:b6:67:81:18:d8:6b:78:56:11:54:c2:17:1b:4f:bf:02:
5a:e5:83:ba:44:47:51:f3:04:52:02:33:16:da:af:c9:c6:2c:
52:1a:87:99:f0:29:9e:ac:f3:d8:b6:fe:8f:c7:b0:54:33:66:
73:f4:0b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:00 2024 by rpki-client on console-ams.rpki-client.org