Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/_bJQebf8r-JP33Q7W6_9Xe_Pamc.roa
File: _bJQebf8r-JP33Q7W6_9Xe_Pamc.roa (raw, json)
Hash identifier: Z9mOJTmi05zakS5SN8Ndz5s2coUEA0R8wh38NViPF4o=
Subject key identifier: FD:B2:50:79:B7:FC:AF:E2:4F:DF:74:3B:5B:AF:FD:5D:EF:CF:6A:67
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0930352B
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/_bJQebf8r-JP33Q7W6_9Xe_Pamc.roa
Signing time: Sat 01 Jan 2022 06:00:22 +0000
ROA not before: Sat 01 Jan 2022 06:00:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 45.140.152.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154154283 (0x930352b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 06:00:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fdb25079b7fcafe24fdf743b5baffd5defcf6a67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:12:fd:dc:af:df:84:34:2d:39:21:04:8a:72:
c2:60:98:79:99:1f:ac:89:be:bd:2f:96:9d:b5:7d:
0e:91:db:d9:29:f9:cf:3a:68:17:34:dc:3b:fd:dd:
3f:7f:8b:96:1e:32:32:ba:e1:46:25:39:84:13:a8:
2b:3c:20:c0:52:65:bd:5a:a1:d7:16:14:a6:0a:47:
1d:b2:b5:27:5e:e2:65:b3:c2:aa:83:a2:4e:7f:06:
47:92:ad:26:ac:c1:c6:22:54:20:e4:46:e9:d9:a6:
20:2b:a8:cc:06:8b:2a:25:7b:49:9e:a8:21:cc:bf:
26:4c:08:c2:d1:8a:27:7d:b4:cc:2d:69:ff:3b:4b:
11:5b:55:fe:e6:23:9b:75:e4:7b:e4:53:22:2c:71:
a4:11:1e:75:b4:22:2f:72:24:f6:f1:7d:6a:cb:c1:
4e:8a:5f:8e:3a:68:3a:ae:e6:88:52:cc:4c:54:9d:
34:b6:10:19:86:da:f8:e7:61:cd:51:1b:b2:e1:6e:
a4:57:f7:47:97:52:a2:68:60:ec:00:a6:11:c1:b1:
23:ed:95:2b:86:a3:d8:54:87:40:e4:d0:13:f0:62:
2c:cc:a0:4c:e8:8e:7f:9f:c0:ed:99:32:c9:ef:63:
9a:1f:34:8f:1f:c7:1c:53:20:11:3d:ca:36:9f:2e:
fd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B2:50:79:B7:FC:AF:E2:4F:DF:74:3B:5B:AF:FD:5D:EF:CF:6A:67
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/_bJQebf8r-JP33Q7W6_9Xe_Pamc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.152.0/22
Signature Algorithm: sha256WithRSAEncryption
17:cc:14:41:69:86:a3:af:85:b7:3b:fd:4d:c1:96:32:f2:55:
e0:70:68:fa:95:ef:83:51:c9:d7:85:4f:f7:7d:48:f4:ff:15:
63:af:ff:6e:47:8b:81:bc:38:a9:d0:18:51:b4:3a:b5:21:9f:
77:d2:7c:46:19:6b:62:9e:43:4b:a4:56:99:75:4f:dc:f5:78:
d9:c8:d9:2b:50:a1:4e:ad:6d:18:0d:22:88:01:6f:eb:1e:86:
62:25:8d:5a:87:fc:95:7e:ed:82:82:75:c4:9c:73:9a:63:f2:
00:c3:00:b9:ec:ba:f5:2b:7c:3d:da:1f:22:97:fe:0e:14:7d:
d0:7a:4f:e6:e5:7e:e6:d4:03:0e:16:8f:b9:55:10:27:99:3f:
47:42:38:39:35:6a:45:18:26:d9:8b:52:3f:03:b7:5c:25:7e:
72:61:75:22:e7:4f:c5:27:1b:6d:04:f2:94:3d:91:a6:16:d8:
14:fd:0b:9d:e2:11:b6:b1:05:d3:68:5c:d9:da:2e:3a:5c:90:
e9:3d:19:b0:04:04:7d:16:e8:96:6b:96:a4:e4:c7:c1:cb:b0:
10:c5:28:c2:2a:2c:91:46:7c:36:fb:29:b5:27:a5:d8:ca:1b:
ab:48:da:97:cd:3b:51:40:bc:a2:87:65:53:7d:68:c9:c2:1a:
fa:cd:02:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:28 2024 by rpki-client on console-fra.rpki-client.org