Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/AQoRo5XdSYHnvqs7d9QvLzh6D1A.roa
File: AQoRo5XdSYHnvqs7d9QvLzh6D1A.roa (raw, json)
Hash identifier: +z3IEJMEOYpaEl+sJYxLvskQgoRAI/5YXHvnR/f41KU=
Subject key identifier: 01:0A:11:A3:95:DD:49:81:E7:BE:AB:3B:77:D4:2F:2F:38:7A:0F:50
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0182B1E3BE26E1DFC5184867E0B81E5AD1A5
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/AQoRo5XdSYHnvqs7d9QvLzh6D1A.roa
Signing time: Thu 18 Aug 2022 16:57:48 +0000
ROA not before: Thu 18 Aug 2022 16:57:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203363
IP address blocks: 45.134.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b1:e3:be:26:e1:df:c5:18:48:67:e0:b8:1e:5a:d1:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Aug 18 16:57:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=010a11a395dd4981e7beab3b77d42f2f387a0f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:04:b6:a2:79:1f:b6:ec:ac:d3:fc:49:26:01:
e5:09:dd:29:07:39:20:b2:d2:a5:a7:45:cc:f4:97:
b3:47:cd:85:c0:a9:32:91:dc:c4:c9:c7:45:dd:98:
bf:19:54:e6:b6:9a:03:b9:28:18:47:3b:9e:a2:29:
e7:62:5d:d8:c5:f6:04:d8:43:49:5c:d9:9a:40:06:
a2:e7:c2:da:c9:d1:7c:01:91:5f:1e:72:ab:15:04:
ad:c0:4d:07:06:f5:d0:55:43:22:3d:39:15:91:1f:
5e:8b:1a:82:3c:64:33:36:be:d3:d6:d2:91:ea:fe:
cd:cb:4f:23:2b:d4:7d:27:77:76:74:da:e2:cb:78:
85:cb:96:48:d4:f2:55:a8:42:b0:07:f0:d9:b3:4d:
95:7b:a9:42:a3:78:4b:53:24:ce:df:92:2a:b2:57:
c1:13:5a:1e:c2:40:37:4c:08:90:b3:17:ea:5d:1b:
86:e8:66:a3:3b:08:aa:a6:db:7d:29:34:cc:58:78:
dc:61:45:60:c4:97:6d:c4:80:76:ea:44:5f:5b:9b:
09:b2:43:40:12:e0:1d:17:f1:0d:fd:f5:78:24:23:
b4:6f:a8:f5:3e:a2:3b:fd:43:0e:5f:5f:c2:df:e0:
b0:ee:ee:a3:64:91:cf:75:14:bf:88:89:18:34:dd:
50:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0A:11:A3:95:DD:49:81:E7:BE:AB:3B:77:D4:2F:2F:38:7A:0F:50
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/AQoRo5XdSYHnvqs7d9QvLzh6D1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.36.0/24
Signature Algorithm: sha256WithRSAEncryption
67:b0:f6:c4:20:ae:0b:f5:79:ea:3c:fa:ee:c6:95:60:5c:3f:
86:c0:84:13:85:40:fe:db:32:7a:ad:3c:a8:5c:5e:da:42:1f:
84:5d:9b:d2:04:92:d8:3c:1f:92:89:65:ad:8c:98:73:d5:5c:
cc:aa:c1:41:36:0e:3e:e3:fa:14:eb:72:75:c2:f3:41:0f:bd:
f0:92:89:9f:db:d7:bc:79:18:f5:54:75:53:d4:47:e9:e4:b3:
5d:07:5b:b5:8b:82:7d:df:d3:b0:61:39:30:d1:2c:d8:be:c1:
00:b9:13:c2:22:0e:95:58:5f:75:24:3f:2a:8c:fb:82:df:4e:
45:62:c1:59:29:07:20:f6:b9:7b:2f:9b:fe:62:d8:93:c0:bb:
ae:0b:a9:8b:d5:01:a9:9b:24:8b:b1:31:20:00:ed:74:87:ef:
2b:fe:21:08:8b:73:3f:18:83:e2:90:f5:13:c8:a1:a1:91:b1:
93:c2:33:78:4e:d6:9b:9f:10:0a:36:e0:00:dd:76:01:90:9b:
de:c2:1e:43:8d:55:47:5f:f1:77:44:a7:9f:0c:27:d5:82:72:
c9:8c:54:e2:9b:52:3c:00:7e:8d:b5:2f:2b:4a:44:5b:02:77:
de:79:9c:d8:52:78:ca:a2:3b:fe:63:7e:d2:99:80:70:9e:71:
a4:80:ab:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:13 2024 by rpki-client on console-ams.rpki-client.org