Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/bjh2MYjGTLolhAfknJ0J6p7RsUY.roa
File: bjh2MYjGTLolhAfknJ0J6p7RsUY.roa (raw, json)
Hash identifier: 9yMdVlHQ30/jAPwmT6pxYxb6v6vwAHyt2U8c5Io/PTk=
Subject key identifier: 6E:38:76:31:88:C6:4C:BA:25:84:07:E4:9C:9D:09:EA:9E:D1:B1:46
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 0AB7A9AF
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/bjh2MYjGTLolhAfknJ0J6p7RsUY.roa
Signing time: Sat 01 Jan 2022 08:05:49 +0000
ROA not before: Sat 01 Jan 2022 08:05:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208198
IP address blocks: 45.10.149.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179808687 (0xab7a9af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jan 1 08:05:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e38763188c64cba258407e49c9d09ea9ed1b146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e4:93:6b:ad:64:39:58:3f:0d:b1:96:14:be:
22:4b:62:42:5c:6c:fd:b0:e7:f4:06:2a:e2:d8:14:
63:51:e1:6d:96:86:34:3c:95:0a:7a:0d:25:37:1d:
ce:c2:d1:3b:06:91:eb:b4:16:ac:37:51:0a:7b:4d:
5a:76:18:41:53:c7:5d:6c:38:93:dd:8f:1f:7e:dd:
41:f6:a4:77:d4:d3:24:ef:89:8e:9e:00:5b:a0:69:
ff:36:83:93:e6:54:d7:97:22:b7:4e:2d:d9:f6:a7:
6b:60:92:22:85:cb:98:3f:e5:2d:6f:05:51:c9:26:
67:f7:16:48:05:46:9d:be:e2:37:5b:87:77:6b:cf:
5b:30:ad:bb:28:b8:12:bc:e6:2f:95:f2:fb:11:b2:
29:fd:5c:70:b8:d1:6a:15:80:93:ce:15:31:e1:30:
29:6a:0c:4d:de:ec:80:de:2c:ea:ab:4e:aa:d0:a4:
fa:3c:2b:2e:17:e3:6e:00:f5:22:c2:ff:61:e6:bf:
4b:a1:51:f0:e9:d2:53:7f:65:29:67:ad:e5:d1:d6:
e6:c3:3d:34:a6:06:4e:d2:44:55:cb:41:c8:60:8b:
cd:9e:c9:bf:92:ba:67:11:fa:d8:0b:b4:1d:17:53:
f5:b8:62:e6:a6:1e:ec:f5:fe:6b:33:89:92:55:a3:
8a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:38:76:31:88:C6:4C:BA:25:84:07:E4:9C:9D:09:EA:9E:D1:B1:46
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/bjh2MYjGTLolhAfknJ0J6p7RsUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.149.0/24
Signature Algorithm: sha256WithRSAEncryption
28:1e:f1:57:6b:63:64:1d:ab:ca:01:5d:75:b0:bf:7d:9d:a8:
0c:9d:5c:26:23:ad:ff:86:37:f6:37:b1:fd:95:63:43:bf:2b:
92:6f:83:07:50:ca:6e:5b:f1:79:fc:c0:5c:86:7c:5d:10:93:
94:43:6d:9a:64:93:87:10:8f:58:e9:f9:ab:7c:ed:73:12:7e:
4f:0f:3d:c1:aa:4b:f6:ca:4c:98:0c:4d:cd:52:e3:54:77:34:
df:36:db:e3:06:45:76:13:41:b5:fd:ec:3f:40:c4:dc:c2:da:
ff:ce:37:7a:77:29:d4:66:a5:34:82:5a:72:46:a3:11:c2:b8:
d9:49:eb:d4:d1:fe:05:1a:6a:aa:11:e4:19:4d:6d:f1:67:c5:
36:e9:80:03:f0:45:83:d2:fb:b8:34:37:f6:84:62:35:e6:0c:
e0:13:a7:4e:63:f7:59:6d:ec:33:da:61:ed:13:6d:4c:e1:36:
41:4a:10:51:f2:0a:58:f1:d0:5c:53:d8:af:83:cc:b3:96:ca:
9e:2d:e9:73:01:4d:b4:c8:f7:e5:16:98:56:f4:df:74:9e:1d:
52:46:87:a7:7d:bd:e7:7d:98:46:15:8e:c4:42:a8:49:bb:e2:
3f:8d:3f:6a:28:11:38:ef:9d:ae:9c:1e:f7:ae:c9:a7:06:cc:
9e:86:e9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:49 2024 by rpki-client on console-fra.rpki-client.org