Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/C7_i-migRMAj1P1tf6fMQIhbt2s.roa
File: C7_i-migRMAj1P1tf6fMQIhbt2s.roa (raw, json)
Hash identifier: TOHYFb95VMsP3KVbXZo36XDaELPHjdi3LaKCOf4I9Xs=
Subject key identifier: 0B:BF:E2:FA:68:A0:44:C0:23:D4:FD:6D:7F:A7:CC:40:88:5B:B7:6B
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 094FB8F1
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/C7_i-migRMAj1P1tf6fMQIhbt2s.roa
Signing time: Sat 01 Jan 2022 06:00:40 +0000
ROA not before: Sat 01 Jan 2022 06:00:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213250
IP address blocks: 45.131.66.0/23 maxlen: 23
5.182.206.0/23 maxlen: 23
5.182.204.0/23 maxlen: 23
2.56.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156219633 (0x94fb8f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 06:00:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0bbfe2fa68a044c023d4fd6d7fa7cc40885bb76b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a8:3f:9e:50:dc:e0:e5:a9:df:23:65:3b:79:
c1:6c:1a:62:e5:0b:92:eb:2c:35:68:38:5b:5f:fc:
4f:8d:44:d9:cf:86:9f:0c:a5:ed:e5:f8:74:de:2f:
9c:fd:65:e9:9e:3d:3a:78:4e:4e:8e:05:06:b5:d4:
59:e3:89:fa:f6:f5:23:ea:f5:ff:f1:80:8a:07:d8:
11:79:9b:30:8b:51:e6:cf:12:ab:65:ca:4e:3c:c2:
09:8c:52:b1:4b:f6:13:15:b5:7a:63:95:bc:3b:0f:
ab:a7:08:5b:e5:a2:1b:fb:73:6c:5b:2a:aa:00:dd:
84:35:c1:38:20:90:f3:7d:64:16:fb:4b:fe:ce:45:
bc:93:9a:d8:96:4e:ca:2d:6a:a7:18:c0:fc:ef:53:
82:6c:90:b6:77:2c:06:3e:ad:94:33:16:58:6e:1b:
56:2e:49:bd:b2:7c:1d:b0:00:50:00:cd:35:49:72:
6b:d1:00:f8:a8:32:ec:5e:02:0c:b3:f8:b2:22:71:
f6:6b:70:ab:b2:9c:05:ce:72:28:5e:58:34:82:cc:
5e:76:e8:6a:c3:fb:e8:63:69:fb:74:56:7b:c4:30:
f7:94:7c:bf:d6:85:bc:03:22:ae:6a:33:43:1c:a7:
13:bb:41:01:b8:fc:96:98:a2:5e:3a:13:72:21:22:
f2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BF:E2:FA:68:A0:44:C0:23:D4:FD:6D:7F:A7:CC:40:88:5B:B7:6B
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/C7_i-migRMAj1P1tf6fMQIhbt2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.245.0/24
5.182.204.0/22
45.131.66.0/23
Signature Algorithm: sha256WithRSAEncryption
40:57:7c:59:ba:72:b9:af:e6:cc:ea:5e:5b:cb:be:c2:23:0c:
92:a3:8d:91:01:27:77:c3:32:65:20:ad:9b:e7:c2:f5:b2:de:
95:8f:33:77:19:72:6d:c5:0d:1d:20:47:ed:57:19:6c:16:6b:
cf:38:f5:7b:cf:45:55:f4:67:e7:9e:4a:e3:b9:01:d4:32:db:
3e:b5:f7:75:e1:52:6c:ea:03:8d:c2:b6:c3:53:ee:08:12:1c:
c5:fe:ad:b0:a9:a9:f9:4a:c1:f5:36:96:9e:e0:4d:bd:b9:59:
f8:e6:86:af:ed:4c:59:33:ed:ef:8c:e5:be:37:d9:b5:a2:e8:
d6:7a:a9:c9:33:10:0e:69:91:bc:2b:05:25:0f:5c:c9:df:b0:
99:03:d9:aa:72:76:67:25:d9:f3:9c:84:27:c4:75:09:a0:d4:
ba:3f:90:fc:06:60:c7:a8:49:21:61:03:d2:85:77:dd:26:b7:
7b:13:e5:4d:9b:39:e4:ed:9c:07:b7:f0:9a:ce:d6:a9:39:d4:
c4:0f:b5:7f:f8:48:98:81:08:5f:11:af:c8:e0:5e:93:f8:21:
a1:e4:0f:46:47:09:92:97:37:ca:3c:80:13:08:85:83:36:4b:
58:48:a0:8d:e2:3a:85:73:71:49:bb:7b:8a:79:e7:66:d5:2f:
dc:35:ff:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:28 2024 by rpki-client on console-fra.rpki-client.org