Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/alQOIQ-Gd2EjlVDKCfB6HdVeR0E.roa
File: alQOIQ-Gd2EjlVDKCfB6HdVeR0E.roa (raw, json)
Hash identifier: otQH6DCYVRjqlpNIAtUStPmOtcPqbKneVAyw/lPuL7Q=
Subject key identifier: 6A:54:0E:21:0F:86:77:61:23:95:50:CA:09:F0:7A:1D:D5:5E:47:41
Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Certificate serial: 0182441A7E2CBE39ACD284247F295B0B51AA
Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/alQOIQ-Gd2EjlVDKCfB6HdVeR0E.roa
Signing time: Thu 28 Jul 2022 09:19:23 +0000
ROA not before: Thu 28 Jul 2022 09:19:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 137409
IP address blocks: 45.132.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:44:1a:7e:2c:be:39:ac:d2:84:24:7f:29:5b:0b:51:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Validity
Not Before: Jul 28 09:19:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a540e210f867761239550ca09f07a1dd55e4741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ce:35:6b:e0:35:07:5d:89:a6:ed:51:50:54:
e9:09:7e:1d:05:10:fe:61:3d:5f:ff:93:3e:24:55:
e4:f8:34:3f:dd:a2:21:4c:fd:2e:55:22:3f:70:24:
71:97:53:e4:4a:89:44:a6:dd:6d:41:4a:cf:be:b2:
cb:b5:a8:e6:1d:66:8d:4e:fa:fd:e3:17:53:70:92:
3b:45:b9:ce:50:9f:81:2e:9f:fc:91:a1:74:63:be:
36:69:43:37:b6:e6:e3:80:d9:1f:d5:55:b9:df:03:
a8:63:be:df:38:7d:dd:82:9b:b8:5a:70:4d:14:82:
4a:1c:40:42:e7:cc:ae:b8:48:1e:4f:a6:10:db:d5:
00:13:84:fd:6a:88:7d:5e:c3:79:ad:5f:47:4d:f4:
47:e5:44:04:e4:48:b8:f2:61:3c:20:d4:ad:97:d8:
54:e6:a3:64:53:e1:b6:7d:8f:54:e4:f0:3e:52:00:
5c:c6:2f:2b:2f:78:e6:65:c3:17:a6:bd:93:f3:8c:
6f:96:df:5d:7e:24:fd:c5:c7:86:64:76:ee:e7:d2:
7a:f2:2c:10:f0:da:ca:2f:c2:eb:ef:e5:88:13:e1:
72:77:f8:b2:75:20:58:de:8c:2f:1b:84:30:bc:1d:
b9:98:ab:b5:36:8c:19:d7:fa:3e:0f:52:1e:af:27:
8a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:54:0E:21:0F:86:77:61:23:95:50:CA:09:F0:7A:1D:D5:5E:47:41
X509v3 Authority Key Identifier:
keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/alQOIQ-Gd2EjlVDKCfB6HdVeR0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.224.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:9a:e2:4d:e0:08:1f:1a:0b:82:13:fa:21:92:3c:8d:8d:e9:
c9:9a:59:0c:c2:6c:69:88:d8:b0:37:24:db:28:cd:21:cc:c6:
89:e9:f2:3e:33:28:cd:9f:98:8c:f6:3a:60:d5:b6:25:d9:2b:
8b:b2:22:2b:ed:b4:20:b5:54:d8:4d:0a:64:08:e8:ee:af:d1:
7b:cc:c5:0f:d9:72:41:17:6d:32:a0:c5:2c:2f:91:0f:ac:bb:
27:b9:9c:78:1d:01:26:d6:0a:dc:22:a9:32:b7:c1:28:b7:b9:
78:b1:66:bc:2b:c0:4d:83:34:09:33:cf:b5:e1:c5:86:84:89:
5d:da:db:10:6e:17:31:fc:8f:94:be:3a:37:5f:23:e3:bc:5f:
6e:b3:fc:3f:94:08:33:56:2e:76:4a:a2:cd:75:ba:0b:70:ec:
e9:6a:ac:74:ea:2f:3a:66:a6:c1:4e:88:cb:12:b7:ff:b6:0c:
93:70:44:f2:9c:08:25:ad:96:52:a4:88:3c:36:2a:34:cf:95:
fa:d2:63:df:8d:c9:42:11:72:32:f0:7a:3d:72:30:10:44:13:
d6:21:cf:d8:d5:9c:69:0c:14:20:75:11:41:d6:69:75:97:75:
68:20:51:57:6e:b3:b5:fa:eb:b0:9f:8a:c3:10:b5:05:89:e2:
f2:8d:86:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:31 2024 by rpki-client on console-ams.rpki-client.org