Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/rckOJCjCTWf4tBEmgFOPpyAswrI.roa
File: rckOJCjCTWf4tBEmgFOPpyAswrI.roa (raw, json)
Hash identifier: 6Mr+5PMmAo4IDtmadA0usw2L/RrDW6pL/o9DSrSyOeg=
Subject key identifier: AD:C9:0E:24:28:C2:4D:67:F8:B4:11:26:80:53:8F:A7:20:2C:C2:B2
Certificate issuer: /CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Certificate serial: 099FF826
Authority key identifier: B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/rckOJCjCTWf4tBEmgFOPpyAswrI.roa
Signing time: Tue 07 Jun 2022 14:46:02 +0000
ROA not before: Tue 07 Jun 2022 14:46:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205150
IP address blocks: 45.67.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161478694 (0x99ff826)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c40a747e3ac1acc611a4c403b6007398e7d79f
Validity
Not Before: Jun 7 14:46:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=adc90e2428c24d67f8b4112680538fa7202cc2b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b0:1b:77:37:13:50:64:69:63:a8:bd:46:af:
1c:60:03:45:3f:59:e6:63:f5:b7:05:77:b9:76:cd:
8e:e7:23:b5:5a:fd:75:ed:7a:a8:b9:23:5c:50:14:
2e:7b:43:63:10:8d:61:3e:a0:13:44:aa:11:90:75:
c4:88:3d:c8:81:08:0b:4d:a7:72:5f:1d:92:04:ea:
6e:fa:d2:50:68:6e:63:3a:58:39:24:03:16:f5:7c:
12:72:8b:19:ad:0f:5b:1f:83:d3:90:14:db:93:62:
a6:31:33:64:dd:21:b3:be:61:b0:be:54:67:13:2a:
4e:32:79:b5:03:ad:41:33:8c:92:7b:14:63:7c:48:
d4:8b:ce:80:a8:12:54:a1:49:d5:57:d2:f8:56:9b:
c0:e8:19:50:e9:47:9f:a9:cd:e6:81:dd:ef:ad:5d:
2c:42:0f:2e:78:56:01:d1:07:c2:a9:d0:7a:ff:fa:
73:e0:2f:cf:14:3f:54:eb:d7:69:16:a9:79:44:af:
e6:c7:fd:04:0f:74:c7:f1:28:4c:bf:31:bc:5d:6a:
54:08:24:ec:4f:ee:40:02:86:5b:a0:2d:56:4a:8d:
87:04:3c:7c:3a:45:4c:20:9d:8f:a9:ef:50:0f:8f:
60:e0:29:a1:6d:f8:e9:dc:fe:45:bd:a3:9c:9f:df:
b7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:C9:0E:24:28:C2:4D:67:F8:B4:11:26:80:53:8F:A7:20:2C:C2:B2
X509v3 Authority Key Identifier:
keyid:B7:C4:0A:74:7E:3A:C1:AC:C6:11:A4:C4:03:B6:00:73:98:E7:D7:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8QKdH46wazGEaTEA7YAc5jn158.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/rckOJCjCTWf4tBEmgFOPpyAswrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/375ebc-bafb-4e0b-b549-77635a22eb96/1/t8QKdH46wazGEaTEA7YAc5jn158.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.13.0/24
Signature Algorithm: sha256WithRSAEncryption
75:37:b9:4c:60:b0:e9:58:ac:c5:b3:8d:a9:25:a9:f6:5a:2c:
cc:0f:2c:76:50:45:b6:c8:82:a5:60:c2:55:71:db:da:ea:02:
20:c3:c1:91:1a:4e:3f:f4:b1:45:ec:14:52:3a:4e:b5:30:dd:
e4:ba:44:3e:41:68:b5:50:98:9f:93:1f:c3:fe:10:7c:7b:26:
5a:92:fe:59:b7:c6:5f:9b:54:a9:1a:0f:3b:70:c5:4c:55:c5:
b2:df:62:4a:e9:78:d3:5b:43:20:0f:a2:2d:d1:c2:09:37:95:
36:25:b8:6c:26:b0:02:42:4c:bc:33:c3:08:81:2c:ea:9d:22:
56:47:9d:f3:fa:35:ec:b4:5f:3f:75:80:26:79:9c:c3:3f:8c:
9c:66:29:42:62:f3:e1:f3:93:52:c4:fa:1c:ad:f3:3f:ce:15:
7b:2d:bc:31:f3:ff:09:d2:b5:cb:c2:e1:f1:40:4b:6d:d6:91:
01:f7:3c:e7:81:d8:4f:98:df:db:cf:20:fe:ee:be:86:e5:fe:
64:eb:dd:88:fe:fc:74:ac:cb:f7:47:0e:ae:4c:4c:60:50:8c:
73:fa:b9:14:7a:c7:42:2d:79:b1:a3:26:81:01:d4:27:e7:1d:
b1:0e:72:a0:5d:93:2d:14:4b:2c:8f:eb:8f:21:93:e0:12:8d:
9c:c6:70:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:51:37 2024 by rpki-client on console-ams.rpki-client.org