Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/8GOg_0k1a1lAIwaUF5vluQbae6s.roa
File: 8GOg_0k1a1lAIwaUF5vluQbae6s.roa (raw, json)
Hash identifier: Lrx4A3ImoQkWUhW85en/4YnWeJmXMQU+S4mdf311ZCE=
Subject key identifier: F0:63:A0:FF:49:35:6B:59:40:23:06:94:17:9B:E5:B9:06:DA:7B:AB
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0A4CFCAE
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/8GOg_0k1a1lAIwaUF5vluQbae6s.roa
Signing time: Mon 04 Apr 2022 09:12:56 +0000
ROA not before: Mon 04 Apr 2022 09:12:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 148996
IP address blocks: 45.142.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172817582 (0xa4cfcae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Apr 4 09:12:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f063a0ff49356b5940230694179be5b906da7bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:45:e7:98:68:49:7b:7e:37:12:28:46:00:db:
d8:eb:1c:37:21:ba:4a:05:54:af:01:3d:96:9e:fd:
20:79:22:f2:bd:90:b1:13:c8:5a:02:ee:80:25:4b:
48:43:7d:6a:1d:47:98:9f:45:09:cf:2e:f1:93:ef:
9b:d6:89:4b:57:a0:4a:1e:7f:04:1f:dd:2a:ea:0d:
47:82:87:37:0b:02:a9:5e:ac:2c:2c:a4:d0:ad:27:
ac:13:44:10:aa:42:3b:41:72:c8:a8:76:8c:41:e7:
43:ae:64:a7:a9:92:dc:53:04:2e:b7:cc:41:eb:b3:
f1:98:80:22:0a:2d:b6:81:1f:86:11:1c:75:0f:61:
ff:43:dd:59:6d:5d:d2:ba:f8:ca:65:17:f7:c0:08:
65:0e:5a:e7:ac:25:30:8e:f1:47:6c:71:51:6c:34:
62:1d:36:c3:7a:ec:77:c0:13:f0:75:6e:77:28:e3:
46:da:64:b1:15:4e:d5:f6:ce:37:25:65:99:66:32:
8b:9f:aa:5d:2b:3b:94:85:ad:0b:19:63:6b:4c:1b:
73:b3:50:07:f9:25:45:83:c9:55:ed:d9:4d:ff:27:
92:98:e8:2d:e1:8f:87:00:4d:80:09:ba:ef:6d:5d:
fe:c2:0f:59:0d:b8:2f:a8:2a:e0:23:75:45:39:c1:
4e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:63:A0:FF:49:35:6B:59:40:23:06:94:17:9B:E5:B9:06:DA:7B:AB
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/8GOg_0k1a1lAIwaUF5vluQbae6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.106.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:71:50:71:36:74:bb:bc:27:42:c1:eb:7c:55:63:1f:de:ad:
8a:f2:68:78:fc:63:9a:bb:d5:ed:70:87:e8:d4:ea:3c:8e:f6:
75:17:d5:8b:69:0d:42:6a:00:31:c6:9f:32:05:ef:9e:fb:80:
45:51:cf:84:67:c1:54:9f:a3:a0:26:00:c2:53:fd:c6:a3:1b:
29:34:64:5e:c0:fa:f5:52:d8:9c:c0:85:1d:33:79:b8:3c:d5:
56:d2:71:94:1b:f9:83:4a:7c:a0:47:1d:e6:d8:67:cd:04:82:
29:be:33:0c:85:1b:59:d3:29:df:57:04:c5:ae:b2:41:d9:1f:
36:ce:43:7d:d6:4d:26:b6:69:49:08:57:f2:19:c1:12:d6:c3:
f3:3a:87:a6:c6:69:e3:35:63:82:fb:1f:64:ad:07:e9:34:56:
d2:57:4a:6f:54:40:63:1e:0b:77:23:f6:20:37:dd:0a:00:7f:
c4:e8:a4:fd:48:af:d2:fd:c2:59:d2:4b:a0:98:5b:6b:10:8d:
99:f1:a0:e9:96:80:86:9e:bc:9f:9c:7e:42:df:ad:60:43:c6:
5e:97:f2:d4:11:f3:cd:37:21:44:39:32:ed:ba:94:17:c1:bd:
f9:55:13:db:a4:b7:b6:14:62:61:c6:dd:7f:08:99:9e:98:55:
b9:f8:40:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:13 2024 by rpki-client on console-ams.rpki-client.org