Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/2JgZoQTzEQ-Blu1jxsAkaxB8_1w.roa
File: 2JgZoQTzEQ-Blu1jxsAkaxB8_1w.roa (raw, json)
Hash identifier: tvx/WJRPL2g5X5mVcWw9VY8m7DcI3z3Dv1EFnTcqQN0=
Subject key identifier: D8:98:19:A1:04:F3:11:0F:81:96:ED:63:C6:C0:24:6B:10:7C:FF:5C
Certificate issuer: /CN=0046801e45ca1eed3f78d99277d0193f576665c7
Certificate serial: 025AA4
Authority key identifier: 00:46:80:1E:45:CA:1E:ED:3F:78:D9:92:77:D0:19:3F:57:66:65:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEaAHkXKHu0_eNmSd9AZP1dmZcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/2JgZoQTzEQ-Blu1jxsAkaxB8_1w.roa
Signing time: Wed 12 Jan 2022 12:27:49 +0000
ROA not before: Wed 12 Jan 2022 12:27:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42189
IP address blocks: 45.82.156.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154276 (0x25aa4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0046801e45ca1eed3f78d99277d0193f576665c7
Validity
Not Before: Jan 12 12:27:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d89819a104f3110f8196ed63c6c0246b107cff5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:07:44:16:24:a5:80:ea:5f:9a:2f:6d:9a:62:
bd:a8:c7:ea:33:d2:2a:27:ec:6c:b2:b0:cb:8c:09:
39:62:78:3b:d7:6e:53:22:ab:55:77:25:5b:03:01:
6a:27:7b:6c:a1:91:9f:07:bf:79:33:5b:0c:94:1d:
91:89:70:77:db:36:46:2d:08:28:a5:64:2c:66:a8:
5f:98:89:1e:c9:9a:a9:62:90:c8:0e:11:48:16:38:
15:62:70:c7:6e:d4:55:34:50:8b:96:69:04:6f:84:
9b:fd:e2:11:16:1e:c6:07:cb:59:8a:58:8e:1a:eb:
bf:fd:98:f4:e4:1a:63:3b:b4:16:20:d0:d4:56:1a:
f6:5c:5e:cc:9d:12:9b:aa:39:11:5a:9b:f9:c8:4d:
b4:be:90:3b:51:24:88:25:df:07:65:67:9a:4b:e8:
e8:9b:a9:5b:70:1c:00:e5:72:57:33:b0:9b:cc:c8:
5f:60:98:92:39:71:ca:5f:91:f3:46:49:a9:fa:f7:
ab:7a:03:da:9d:da:b7:e9:f9:c6:5a:4f:01:ef:13:
7a:85:9c:a6:65:e7:74:94:01:46:dd:0e:24:39:95:
38:04:ba:59:fd:0c:57:85:33:15:52:56:a9:ee:2d:
29:e1:46:8d:25:81:d3:ec:ba:26:65:e5:30:12:74:
72:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:98:19:A1:04:F3:11:0F:81:96:ED:63:C6:C0:24:6B:10:7C:FF:5C
X509v3 Authority Key Identifier:
keyid:00:46:80:1E:45:CA:1E:ED:3F:78:D9:92:77:D0:19:3F:57:66:65:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEaAHkXKHu0_eNmSd9AZP1dmZcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/2JgZoQTzEQ-Blu1jxsAkaxB8_1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/28db82-bd8c-4e00-912a-e09801171b92/1/AEaAHkXKHu0_eNmSd9AZP1dmZcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.156.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:b2:c4:42:6c:f2:8f:b7:00:29:8e:fe:2d:ca:56:15:e1:70:
d1:de:27:2f:e1:1f:00:cf:d3:13:69:9e:1e:60:be:5f:de:95:
fe:f6:db:f2:22:19:b5:b7:22:71:9e:94:b5:c4:7c:69:11:30:
4f:ff:e6:54:52:c9:c1:8f:12:51:87:de:42:f5:b4:e9:eb:bb:
c4:0d:53:60:b8:9b:87:13:cf:4a:d1:a4:5c:31:a1:61:fa:52:
e2:b3:91:bb:01:39:ea:cd:04:df:8e:48:d8:37:82:d0:77:91:
7a:8a:32:79:10:7a:a5:f6:b6:36:eb:c9:91:50:b9:c3:25:cf:
23:09:3d:f1:6b:99:bf:14:e7:07:d0:64:49:0e:c3:48:12:0a:
75:b9:2e:2a:24:0d:83:28:e3:b7:62:ab:3a:55:fd:b0:86:89:
74:8d:3f:01:a5:b6:49:1e:63:b2:70:a4:e3:8e:71:a3:56:93:
ef:81:97:ce:9a:6e:97:79:96:ea:72:c4:77:ae:80:99:ca:e2:
73:70:20:0b:19:79:de:15:99:23:d5:8a:53:5b:78:02:c5:8b:
1f:72:86:d4:ea:19:25:b9:89:ae:76:8f:35:d8:7b:d7:0d:79:
f1:c9:c6:20:42:4a:c5:19:40:e9:65:55:12:27:3f:7c:74:ec:
c7:76:1f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:07 2024 by rpki-client on console-ams.rpki-client.org