Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/RCUsq9WWmYcmUA0_27kPbXmOtsY.roa
File: RCUsq9WWmYcmUA0_27kPbXmOtsY.roa (raw, json)
Hash identifier: 8P8J/i9OLE5Bmm1fnYT04iyYcMfYqNFbsdbK0t6CWnk=
Subject key identifier: 44:25:2C:AB:D5:96:99:87:26:50:0D:3F:DB:B9:0F:6D:79:8E:B6:C6
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 033D774B
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/RCUsq9WWmYcmUA0_27kPbXmOtsY.roa
Signing time: Mon 23 May 2022 14:09:29 +0000
ROA not before: Mon 23 May 2022 14:09:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46261
IP address blocks: 45.135.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54359883 (0x33d774b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: May 23 14:09:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=44252cabd596998726500d3fdbb90f6d798eb6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e3:4b:d3:73:c0:69:3b:ce:b0:e3:aa:cd:34:
b7:83:3c:9a:7e:f0:d1:54:a4:7b:6c:d6:e6:88:86:
53:59:e0:9f:99:98:f9:cb:20:60:87:3b:09:83:13:
eb:37:ec:42:e4:68:92:b4:52:b4:fe:be:77:79:86:
e7:eb:20:ac:24:8b:87:cc:79:ec:b7:a8:c5:ae:c9:
dc:c2:6b:49:c5:5e:f0:6a:c8:54:1c:1b:eb:a3:6d:
a0:2b:09:e7:22:83:33:fb:95:29:03:dd:91:70:fa:
8c:a8:53:36:d3:16:5a:7c:29:bd:a9:56:80:a3:30:
8b:ab:93:f3:6e:68:e0:45:54:fa:e3:6c:15:4a:b5:
58:d5:65:e3:23:8f:d8:59:4b:a4:4b:44:28:73:9b:
2a:67:41:12:70:73:f8:88:70:65:d4:a8:19:d8:7b:
18:c2:26:f2:3d:db:aa:d8:6c:7a:55:b9:64:fc:34:
70:0e:e7:a8:9e:f0:3e:e5:6e:6f:f8:83:5b:ac:47:
53:ba:9d:55:25:87:ce:39:8e:5d:b9:a5:dc:70:f6:
e0:fe:dc:6a:08:3d:df:57:d5:21:25:5e:f8:f6:d2:
8d:e2:30:66:db:f9:2b:b9:98:f6:25:d7:41:a7:ba:
3f:18:df:1b:15:94:cc:15:24:1c:94:9d:b3:18:f5:
07:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:25:2C:AB:D5:96:99:87:26:50:0D:3F:DB:B9:0F:6D:79:8E:B6:C6
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/RCUsq9WWmYcmUA0_27kPbXmOtsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.136.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:57:ee:2a:57:77:fa:50:09:e4:85:f1:7d:6b:90:70:f7:4a:
59:6f:fe:1a:3a:64:bb:9e:8a:52:fa:ed:96:cf:ec:df:bf:a9:
31:a6:5d:07:af:0b:02:ea:5d:5b:14:c1:20:2d:ef:36:a3:2d:
e5:9b:aa:1c:2e:ad:fe:db:8f:9a:ac:78:28:e8:13:6c:ca:e5:
79:4c:4a:78:28:1a:e2:2f:2f:8b:19:5c:23:c3:d0:7a:13:89:
a3:cd:9d:db:30:52:1b:09:93:29:01:82:e3:63:46:91:f2:8d:
07:dd:13:11:3e:56:0a:e3:2e:ac:8f:ae:0f:ff:dd:42:36:47:
d5:a1:6b:fa:07:09:1a:4b:ff:57:8c:a9:8a:75:42:41:99:4b:
58:32:62:cb:17:71:61:51:76:9d:8e:81:bc:fc:ae:0f:eb:45:
b6:b4:21:4c:c7:ca:b1:c1:a8:ce:a5:f8:84:90:55:c2:20:d0:
3f:d1:29:62:1e:51:ac:66:e5:40:9d:f7:0c:10:74:cc:06:b9:
9a:7e:76:bd:ff:78:65:3b:0c:26:16:e3:6e:b8:2c:e6:9e:c9:
e7:d7:38:80:3e:4e:c0:54:0d:69:33:db:a7:32:bb:45:10:71:
dd:c1:ad:25:e7:65:4e:7f:52:14:de:7c:e3:b5:8f:b5:77:e2:
4c:54:2f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:52 2023 by rpki-client on console-fra.rpki-client.org