Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/Ju8vQiyTlCRABw64kHrjFA67-t0.roa
File: Ju8vQiyTlCRABw64kHrjFA67-t0.roa (raw, json)
Hash identifier: gjZOh0LcDVZYo8+nMqLQd/7OfYteaDBJIRcAcuZjuKo=
Subject key identifier: 26:EF:2F:42:2C:93:94:24:40:07:0E:B8:90:7A:E3:14:0E:BB:FA:DD
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 0AB99426
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/Ju8vQiyTlCRABw64kHrjFA67-t0.roa
Signing time: Sat 01 Jan 2022 08:05:51 +0000
ROA not before: Sat 01 Jan 2022 08:05:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213157
IP address blocks: 45.143.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179934246 (0xab99426)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jan 1 08:05:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=26ef2f422c93942440070eb8907ae3140ebbfadd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b6:0b:99:4a:22:e8:67:2f:32:a6:b9:e3:f5:
42:ed:5f:b4:7e:89:81:bc:a7:9c:ca:dc:98:e2:80:
a1:1d:e6:28:9d:66:d2:58:50:ca:47:77:29:b8:1f:
56:43:ea:02:3c:8d:ce:11:36:76:ed:df:32:0f:8e:
33:3e:27:5e:2f:d9:6e:a8:aa:7c:85:0f:0b:ad:4e:
04:fb:b9:ac:2a:bc:7a:c5:ee:1c:94:2f:22:87:9a:
0c:97:f3:ff:41:a9:87:31:c1:e4:53:75:03:54:10:
30:c0:a2:c2:4a:05:6e:1e:e1:88:b9:bf:c6:5b:44:
77:ec:ee:b0:92:0d:9f:fd:13:ce:a2:ef:8f:7a:b3:
d6:30:ff:f1:98:7d:9a:8c:56:a5:e2:24:74:dc:ae:
f3:88:a7:ec:20:16:2a:06:76:35:80:c5:d6:f1:84:
8d:da:75:a5:5f:d2:f5:db:4e:a1:95:03:8d:6f:af:
76:6e:68:bc:b7:cf:e4:4a:07:b9:9d:4f:71:bb:86:
6e:10:a2:ae:fa:18:a6:45:fb:d0:36:27:c2:a8:5a:
9c:6d:02:83:f2:3d:9f:77:7c:f6:b6:74:a4:74:eb:
1a:0c:a8:c9:95:b5:33:4c:28:c7:2b:35:a6:3c:44:
50:d0:aa:fb:2b:43:b9:bb:4f:49:1e:fb:6d:3c:ae:
03:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:EF:2F:42:2C:93:94:24:40:07:0E:B8:90:7A:E3:14:0E:BB:FA:DD
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/Ju8vQiyTlCRABw64kHrjFA67-t0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.96.0/24
Signature Algorithm: sha256WithRSAEncryption
98:a2:f2:ae:69:ab:f6:2b:b5:cf:b3:e0:55:18:47:37:f1:46:
f9:93:4d:93:5e:15:4d:e6:0a:69:77:4e:83:5a:6c:ef:a0:e4:
28:fe:e7:7e:de:4d:d8:fe:bc:9d:86:9b:e8:37:59:ed:22:89:
3b:ed:0c:89:33:0b:66:3e:b7:46:57:32:37:76:b0:8f:0b:79:
e2:b3:1c:71:9c:0b:b4:db:8f:27:57:66:85:9c:9a:a0:f0:32:
1a:25:b7:06:3b:e6:0a:61:96:4a:35:6f:65:17:a0:16:83:88:
62:65:6d:50:98:46:61:24:bf:0e:42:6f:e7:a2:b2:b8:49:61:
d4:ed:56:a0:17:e3:a6:ec:2a:8f:eb:ec:09:3f:57:aa:2b:92:
f5:b6:8d:b2:5e:5b:5a:44:3f:64:9c:45:df:5a:05:3f:5f:9e:
48:db:a7:8b:77:bb:8c:ab:dd:1a:76:86:db:3a:73:98:29:31:
24:49:d4:71:f1:60:a3:bf:2f:c8:2b:5a:16:e6:08:bd:0d:7c:
9f:a9:73:f3:dc:07:0e:eb:15:e2:e6:f4:85:ed:1c:71:07:ba:
da:5e:58:45:64:b1:67:97:08:a8:bf:7f:e5:87:35:be:94:78:
38:4c:8c:23:ac:1d:6d:e3:fc:e8:e2:5b:c5:ae:9d:34:e9:c5:
ba:bc:15:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:36 2023 by rpki-client on console-ams.rpki-client.org