Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/2mXVALXTuIaGP5woUu0XoDqWVEo.roa
File: 2mXVALXTuIaGP5woUu0XoDqWVEo.roa (raw, json)
Hash identifier: /Uf8hsxU1YDT6L9rc9NX/+HAafdt1hx88E/CKWO3XD4=
Subject key identifier: DA:65:D5:00:B5:D3:B8:86:86:3F:9C:28:52:ED:17:A0:3A:96:54:4A
Certificate issuer: /CN=411a2a9405bda1671c10776f4426273c904e4ad0
Certificate serial: 0844962B
Authority key identifier: 41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/2mXVALXTuIaGP5woUu0XoDqWVEo.roa
Signing time: Sat 01 Jan 2022 04:57:12 +0000
ROA not before: Sat 01 Jan 2022 04:57:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 45.11.252.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138712619 (0x844962b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411a2a9405bda1671c10776f4426273c904e4ad0
Validity
Not Before: Jan 1 04:57:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da65d500b5d3b886863f9c2852ed17a03a96544a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c9:70:4e:ef:c7:95:54:5f:e7:4b:1a:29:cf:
1e:6f:f0:ca:5c:3f:b0:dd:b0:45:5d:d2:3d:ee:86:
e9:0e:f5:2f:c0:c4:18:bf:08:18:6e:87:18:fc:9b:
a3:6a:cd:51:ba:e3:ac:d5:02:16:4f:11:1c:8b:3b:
0c:d4:30:0b:a5:3c:bd:96:26:00:66:71:7c:18:4c:
cc:17:0f:93:a3:1a:47:7b:c7:63:3b:8b:36:b9:e0:
5d:3a:d3:f1:f0:3e:bc:7f:bd:5c:60:dd:39:6f:1c:
4d:b5:31:b5:ef:1d:3b:da:2d:58:fb:e9:59:1c:e5:
c9:b4:69:9b:9d:7e:44:4a:d0:50:ba:1f:c1:cf:b1:
2f:8e:86:25:bc:ed:7c:92:31:ae:9e:76:b0:c9:14:
c2:06:51:c9:c4:f4:7d:cb:0e:06:25:c6:df:78:62:
6b:84:4a:f3:a1:4f:0e:79:e0:e1:4f:c0:62:07:4c:
be:0a:19:3a:00:23:a4:4f:3f:30:0a:de:ca:61:b4:
5c:8e:8e:fc:59:bc:80:aa:24:48:a6:a6:25:55:73:
49:ae:0d:a5:5c:f9:a2:6a:b1:77:b6:27:5a:3b:b6:
87:a0:1d:68:74:1b:49:60:de:a1:e7:0a:27:7c:6a:
52:bd:4f:89:f8:a6:9d:06:d4:2d:3b:8c:08:0b:4e:
42:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:65:D5:00:B5:D3:B8:86:86:3F:9C:28:52:ED:17:A0:3A:96:54:4A
X509v3 Authority Key Identifier:
keyid:41:1A:2A:94:05:BD:A1:67:1C:10:77:6F:44:26:27:3C:90:4E:4A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRoqlAW9oWccEHdvRCYnPJBOStA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/2mXVALXTuIaGP5woUu0XoDqWVEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fe6870-0990-4c21-9e4d-8c52e666a8a2/1/QRoqlAW9oWccEHdvRCYnPJBOStA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.252.0/22
Signature Algorithm: sha256WithRSAEncryption
73:7d:a8:97:f4:27:73:27:0b:e9:d0:c7:5a:d2:ca:df:6c:91:
e3:96:ac:b6:99:17:34:37:fc:86:a2:08:c5:84:50:e3:83:51:
a5:27:d8:63:53:41:49:57:92:b8:e6:77:a4:e1:cf:93:27:ea:
38:08:a1:f4:86:c3:37:18:ed:20:ac:5b:ff:e6:d8:cf:c1:18:
78:b8:25:4a:fc:65:0d:5c:5d:3b:db:2f:5e:82:59:b1:d9:23:
c1:ba:9a:6d:e0:cf:90:65:42:d3:e4:30:bf:0a:1a:5f:b0:7e:
01:b7:d6:9f:9e:ab:44:ea:ee:e7:23:85:c8:00:4b:1a:60:21:
09:30:e0:ed:fe:cf:87:2e:66:d3:73:03:69:11:f4:e9:80:aa:
d3:3e:74:b1:64:e0:7a:be:20:a1:e7:a9:c4:32:49:fc:98:ed:
a8:28:58:4f:d4:7c:11:0f:b5:a2:c0:f0:78:02:36:08:57:17:
38:5e:64:22:a8:7b:dd:7e:19:9b:ed:5d:84:68:b7:7f:d9:8a:
83:3e:86:f5:87:9c:b0:6e:6e:29:74:b8:cd:a2:ad:df:17:a9:
f8:87:27:80:3a:0c:40:27:e8:4b:0f:e9:c4:30:63:1d:f2:03:
8e:53:87:f2:5a:b9:ae:0e:96:ef:d1:ea:2d:27:21:f9:31:76:
3d:14:d5:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:23 2024 by rpki-client on console-ams.rpki-client.org