Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/fDc_VqdfUdv98y2vn4wHcg_zH5Y.roa
File: fDc_VqdfUdv98y2vn4wHcg_zH5Y.roa (raw, json)
Hash identifier: n0yG1adplC7L8GrfQ+A6Q7EmF4jzePj4qgrdHETOh4Q=
Subject key identifier: 7C:37:3F:56:A7:5F:51:DB:FD:F3:2D:AF:9F:8C:07:72:0F:F3:1F:96
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 018394E12C56588182402B011B4A1F67762E
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/fDc_VqdfUdv98y2vn4wHcg_zH5Y.roa
Signing time: Sat 01 Oct 2022 18:48:48 +0000
ROA not before: Sat 01 Oct 2022 18:48:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 45.143.99.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:94:e1:2c:56:58:81:82:40:2b:01:1b:4a:1f:67:76:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Oct 1 18:48:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c373f56a75f51dbfdf32daf9f8c07720ff31f96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e0:2d:76:87:da:89:29:32:79:90:f0:5c:07:
c8:4c:ee:be:b4:ba:57:0e:01:ef:7a:b2:c6:b2:ed:
b9:77:e1:f4:21:a4:78:0c:5d:cc:7d:17:80:84:8b:
64:a3:e5:d3:4d:63:cc:7f:af:5a:68:7a:9f:18:f4:
4e:6f:14:0f:9d:64:35:a4:12:27:be:e2:ae:44:6a:
13:2f:89:be:1b:09:4f:3d:a5:d0:b0:7e:12:0f:3f:
a6:53:9f:02:68:b1:80:78:44:c9:0d:33:87:c4:d1:
f5:ed:01:9e:88:6f:10:86:9b:9a:b2:65:8a:12:9f:
2f:ac:3c:6a:93:6b:e5:3b:c8:05:bb:88:85:ba:b9:
d9:b5:5c:95:b6:b0:14:a5:72:e3:3a:c1:bf:77:fb:
bb:8a:dd:60:8a:18:97:24:62:fb:90:f9:6a:4c:91:
51:77:c9:7b:9f:1d:67:31:9e:ed:42:ff:d2:07:b4:
62:97:9f:ef:f2:a8:35:73:be:2d:37:c6:2c:0c:1b:
f5:3e:a8:1b:6f:78:40:3b:97:82:63:83:9d:85:08:
ac:2a:96:8d:de:83:cc:4d:92:f3:c6:37:20:4d:e6:
6e:8b:33:a7:0b:f3:1e:d1:27:3b:11:06:a6:a1:71:
f9:ea:89:06:48:56:03:75:a6:bf:9f:8c:1b:4d:82:
43:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:37:3F:56:A7:5F:51:DB:FD:F3:2D:AF:9F:8C:07:72:0F:F3:1F:96
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/fDc_VqdfUdv98y2vn4wHcg_zH5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.99.0/24
Signature Algorithm: sha256WithRSAEncryption
23:c1:12:6f:0e:7f:90:dc:e9:84:4b:fc:7a:49:5a:a7:6d:66:
d6:13:8a:6c:71:f5:8c:b8:5c:57:ff:5f:7c:e9:1b:63:04:2c:
b8:47:ce:65:8c:0c:72:2e:a9:ce:95:5b:69:a1:9a:65:40:c7:
f1:82:e2:68:09:5b:ba:57:a3:56:c8:0c:e4:32:1d:d2:ba:c6:
ce:50:a5:74:56:fe:43:c8:e3:22:ee:65:63:88:8c:2a:81:46:
5b:47:92:c6:a0:ca:e1:8c:05:6b:1a:38:1c:83:ec:8b:9b:94:
92:f4:9f:e3:d8:9c:d6:56:15:7c:e6:a2:4f:22:0a:30:02:d6:
c6:fb:99:69:38:8a:b1:e5:bf:da:7f:88:11:77:1c:ca:9c:fb:
b7:32:32:1f:09:a2:de:8f:b5:61:1d:a7:73:f2:b5:9c:fa:80:
9e:97:9b:92:4a:f3:11:a9:59:b8:58:43:5c:27:0f:9d:d4:d2:
e9:fc:cb:77:d8:ac:29:b0:b4:7d:3e:47:b7:3c:7b:ca:5d:bd:
8d:ae:0c:50:f8:1e:61:22:f1:2e:20:88:b5:0f:20:8d:49:b2:
6b:22:23:7c:38:2c:3b:b6:f6:a9:76:47:1a:7d:b9:09:1f:89:
70:fd:8c:08:ec:9c:3e:68:bb:b5:11:b3:47:8b:3c:a4:b2:3f:
00:54:f6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:49 2024 by rpki-client on console-fra.rpki-client.org