Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/Sp9tOgJ1fjV5LSbGBuv5jDXp3nI.roa
File: Sp9tOgJ1fjV5LSbGBuv5jDXp3nI.roa (raw, json)
Hash identifier: AlHyxBHb3Kf0tiktwuJPqD9SsGlFStwvhbnyfrGH7a0=
Subject key identifier: 4A:9F:6D:3A:02:75:7E:35:79:2D:26:C6:06:EB:F9:8C:35:E9:DE:72
Certificate issuer: /CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Certificate serial: 060EBDED
Authority key identifier: 8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/Sp9tOgJ1fjV5LSbGBuv5jDXp3nI.roa
Signing time: Fri 01 Apr 2022 16:08:12 +0000
ROA not before: Fri 01 Apr 2022 16:08:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50302
IP address blocks: 45.133.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101629421 (0x60ebded)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Validity
Not Before: Apr 1 16:08:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a9f6d3a02757e35792d26c606ebf98c35e9de72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0a:80:e7:eb:cf:56:3f:e2:e2:18:63:b5:bc:
51:a7:f1:8e:a3:ea:ef:14:c1:1a:cc:6d:43:12:6f:
d0:23:10:16:4a:27:c1:6d:a5:58:56:c5:0e:5b:f6:
c2:0d:08:6b:4c:81:fb:1b:3d:e4:dc:38:4d:d7:da:
82:75:27:26:6e:1e:9a:51:84:78:eb:3b:68:76:d7:
b2:aa:3d:ad:b3:43:af:ff:5b:e0:8a:30:ba:eb:8a:
e4:49:69:e8:28:60:de:63:2d:7e:4c:83:35:da:89:
e9:04:db:d7:11:9e:d3:39:de:5b:9c:01:a8:7c:8a:
07:a0:9d:0d:4e:91:c4:37:d7:9d:43:8a:04:0c:54:
16:05:d9:46:3f:ee:65:7e:ce:39:69:dc:22:0e:3f:
9e:b0:2c:18:b1:e6:4a:7e:39:93:ed:f9:ad:6b:34:
c7:7c:de:cd:14:de:fe:4e:d8:01:03:5a:5c:c7:dc:
db:44:ec:2b:b2:f5:62:f5:ec:cd:94:0f:34:ac:37:
2d:cf:0f:ad:5a:48:0e:67:7b:fd:8a:05:49:09:26:
ed:a8:0e:5f:76:03:59:3e:2d:c9:9a:a9:ae:b7:da:
a3:c8:19:5a:c9:ec:b9:45:07:eb:60:61:58:1b:15:
83:c9:b8:a9:34:3a:b8:c0:28:d7:ac:99:47:80:a5:
3b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9F:6D:3A:02:75:7E:35:79:2D:26:C6:06:EB:F9:8C:35:E9:DE:72
X509v3 Authority Key Identifier:
keyid:8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/Sp9tOgJ1fjV5LSbGBuv5jDXp3nI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.92.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:2a:77:e4:7f:21:55:bf:3b:dd:d1:90:eb:8c:ca:8a:32:a6:
64:85:48:42:f7:a7:40:66:78:c9:b3:8c:fc:35:57:ad:a5:38:
66:f5:14:1d:e6:fd:0f:d3:de:0a:70:fd:a6:c8:cb:49:1c:af:
4a:4c:bb:f0:79:18:77:87:3c:9e:bc:2c:1a:af:12:9f:01:9c:
03:cd:3c:38:d8:3a:10:e7:9e:a4:a3:2e:74:02:7b:66:10:ce:
21:fd:d9:16:f2:6b:c1:a8:e1:8e:d1:84:f9:fc:a1:c6:f7:eb:
4a:2a:48:20:64:ba:e7:54:5b:75:e5:6c:5e:80:b1:65:ad:0d:
7b:a4:84:8a:4e:7c:69:ad:12:03:08:da:43:f7:cc:45:30:f7:
d6:ee:36:da:f2:d5:49:66:c1:43:c2:34:9a:df:41:d4:5a:05:
27:aa:4b:99:cd:4c:8e:ea:76:40:da:fd:29:33:b2:d9:15:e0:
0e:13:80:0a:62:9a:31:58:27:07:05:67:c9:32:47:c0:f7:ed:
0a:0f:27:6c:e8:76:88:4a:b5:dd:94:10:58:f0:b4:32:ec:06:
a6:dd:5e:9e:ba:96:13:7d:1b:a8:4d:64:ae:43:a9:9c:0e:a9:
ae:64:52:63:8c:89:d8:be:dc:01:3e:ce:7a:df:f1:88:68:78:
2b:6b:bb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:42 2024 by rpki-client on console-fra.rpki-client.org