Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/Odu3RGCeqO_cAWGzRL76JXWtE1U.roa
File: Odu3RGCeqO_cAWGzRL76JXWtE1U.roa (raw, json)
Hash identifier: SB8ttv7kYLBdDz9gD0O4jnV5ua+dnriK+mpJ0PRj6Xw=
Subject key identifier: 39:DB:B7:44:60:9E:A8:EF:DC:01:61:B3:44:BE:FA:25:75:AD:13:55
Certificate issuer: /CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Certificate serial: 0B6B6242
Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/Odu3RGCeqO_cAWGzRL76JXWtE1U.roa
Signing time: Tue 14 Jun 2022 11:57:44 +0000
ROA not before: Tue 14 Jun 2022 11:57:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 45.11.173.0/24 maxlen: 24
45.11.174.0/24 maxlen: 24
45.11.175.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 191586882 (0xb6b6242)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Validity
Not Before: Jun 14 11:57:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39dbb744609ea8efdc0161b344befa2575ad1355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:45:52:52:ad:be:33:aa:70:2c:4b:b1:e3:ef:
09:7c:6a:ec:de:fb:45:c0:7b:cb:92:1e:47:d5:b6:
e8:0c:c3:16:2d:d4:e2:02:9a:12:c7:e6:62:ed:e9:
7f:c8:e0:c8:f9:09:3f:9a:fa:69:b6:ba:77:c6:7b:
07:8f:26:7c:12:36:5f:3f:7c:e2:81:dc:1f:93:36:
fe:02:f3:d0:2a:1e:2d:3f:53:46:44:fd:e6:14:87:
8e:5e:8d:41:5e:c9:a9:c8:d7:d7:0c:a5:4f:69:1e:
2e:76:21:06:92:a2:6f:43:7c:62:3b:65:6e:b5:28:
50:da:9d:5a:d0:a2:ca:10:86:a0:79:cd:13:20:0a:
90:10:db:51:c5:83:32:7f:87:1c:1f:5f:3e:70:11:
80:b3:d9:cb:bd:fb:22:45:43:64:3d:ed:3a:47:b0:
91:5a:cd:75:27:f6:59:d2:c5:9c:e0:04:55:6e:c4:
b5:c5:68:a2:ea:e4:f7:72:d5:d5:7c:f9:dc:ba:aa:
be:95:90:a8:52:b5:e2:ba:ac:c9:fe:e5:b2:c3:b6:
86:40:59:c6:62:00:25:8a:2c:f6:b9:a4:e0:41:90:
28:d2:65:f7:6c:da:8e:53:06:03:bf:78:50:64:92:
71:33:c2:96:d1:c0:e6:23:65:76:9c:fb:fb:3a:67:
18:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DB:B7:44:60:9E:A8:EF:DC:01:61:B3:44:BE:FA:25:75:AD:13:55
X509v3 Authority Key Identifier:
keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/Odu3RGCeqO_cAWGzRL76JXWtE1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.173.0-45.11.175.255
Signature Algorithm: sha256WithRSAEncryption
77:c2:d0:94:6a:40:4b:e5:47:86:86:76:57:47:69:91:8f:1d:
23:1e:44:bc:a1:95:75:ff:d0:fb:a8:1e:22:60:6e:df:d2:eb:
a5:d3:5f:a6:8c:59:16:95:10:04:c7:84:3d:4e:a6:bb:90:e7:
f4:ed:3c:d6:a2:02:28:20:c2:e1:bb:08:0e:11:9c:5a:0d:13:
dc:70:62:a8:09:68:b0:74:35:64:6b:38:1f:bf:04:9f:38:89:
0e:2a:97:7d:f2:fd:3a:42:ef:f5:01:50:06:60:b6:1d:ab:14:
69:44:4c:1b:2e:b6:1f:e0:bc:5e:e9:50:ed:9c:9c:93:57:ff:
ac:49:6f:47:86:ed:f3:46:ec:0c:ea:bb:fa:41:78:79:85:e1:
3f:a7:ab:13:05:a1:0b:3c:06:23:fc:44:54:46:fd:20:6f:e2:
d3:72:67:bf:0a:d4:4b:a1:b3:ba:4b:53:7f:2a:87:89:88:9f:
9d:a2:5a:0c:0e:e5:dc:ba:09:72:e9:24:3d:39:0d:a1:c0:6a:
01:bb:dd:f9:da:a0:cd:32:64:34:e5:02:81:e7:69:6f:84:a0:
a4:d1:07:a6:4f:fb:38:1e:4b:bb:54:fb:98:1c:43:84:e8:86:
b8:71:a2:3e:c6:b4:86:24:70:97:d5:1f:74:1d:c1:a0:32:f1:
0e:c7:d2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:42 2024 by rpki-client on console-ams.rpki-client.org