Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/cftqxPTRPsbANy3ipgu3KaOSelw.roa
File: cftqxPTRPsbANy3ipgu3KaOSelw.roa (raw, json)
Hash identifier: IBj4gbZmgfPciF9sBKwE5g7jqFTjcaXIavu3gEjzEms=
Subject key identifier: 71:FB:6A:C4:F4:D1:3E:C6:C0:37:2D:E2:A6:0B:B7:29:A3:92:7A:5C
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0974BEA9
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/cftqxPTRPsbANy3ipgu3KaOSelw.roa
Signing time: Fri 14 Jan 2022 08:25:11 +0000
ROA not before: Fri 14 Jan 2022 08:25:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210360
IP address blocks: 45.131.64.0/24 maxlen: 24
45.137.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158645929 (0x974bea9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 14 08:25:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71fb6ac4f4d13ec6c0372de2a60bb729a3927a5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:e9:1e:f5:57:d5:f2:77:b1:25:78:9f:29:5a:
e7:ef:b3:eb:b2:85:01:fc:3e:fe:fa:33:d5:8e:db:
9b:20:09:e3:86:b0:95:9c:bd:b1:28:d0:8c:6d:5a:
bc:1f:85:a2:dc:0d:ac:ff:59:c5:78:7c:06:8a:ad:
e7:62:c0:95:8f:f4:56:79:82:ac:e5:fe:1b:d0:3c:
ea:52:96:32:e1:f9:7e:1d:d0:90:14:c8:42:f0:af:
77:1b:f5:26:50:a5:18:ed:5f:c5:86:cb:c7:aa:77:
fd:e7:07:47:47:99:df:79:0f:d8:b3:28:93:30:c7:
a1:9c:f4:57:b5:3d:8d:ad:5b:c7:66:d6:02:4a:d9:
9d:44:75:60:3d:2c:90:b8:10:6d:ba:d3:a9:21:7b:
fa:18:58:7f:8d:4b:3b:ea:14:52:ce:38:25:82:1b:
93:e8:a7:0e:2b:4c:65:a6:3a:f0:a6:d6:c6:1f:dd:
b0:80:a5:10:e4:d0:7a:e2:dd:0f:3f:b7:02:e8:ad:
dc:e4:c7:ab:32:ad:da:b7:74:85:88:72:46:4e:fc:
0d:c1:21:c0:b9:93:f2:bc:49:b2:7a:a3:c5:43:e2:
20:c7:27:c8:0e:44:07:ca:2b:1f:ee:a3:bd:fa:26:
3c:35:9d:88:f0:2e:78:72:b3:a3:f2:a2:de:0a:61:
b1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FB:6A:C4:F4:D1:3E:C6:C0:37:2D:E2:A6:0B:B7:29:A3:92:7A:5C
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/cftqxPTRPsbANy3ipgu3KaOSelw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.64.0/24
45.137.203.0/24
Signature Algorithm: sha256WithRSAEncryption
83:7c:27:2c:de:d6:8c:09:a0:b6:a6:06:11:59:f7:68:41:ba:
5c:ad:d8:df:6a:8e:b6:a3:ba:19:f9:ea:50:2b:3b:9c:a6:22:
78:66:37:3e:be:89:67:78:9f:44:fc:cc:50:69:21:a0:d1:ed:
a0:07:63:4a:4e:bc:5c:53:74:68:97:9e:71:fb:cf:b2:8a:69:
72:65:47:33:50:6d:44:0d:b5:80:55:fb:e3:23:c2:e5:0e:76:
c5:fd:fa:ad:fb:de:ed:9b:ee:f5:5b:9d:b6:70:75:71:8f:e9:
14:d9:19:e7:1c:4a:56:24:a3:a1:57:47:6c:fb:47:c0:d7:80:
2b:66:fa:2d:ae:95:12:1a:6a:66:e7:26:40:44:01:6e:60:31:
2e:4c:7a:b2:b7:5a:77:cc:33:54:e1:01:2f:a3:31:72:b0:45:
a2:29:38:8f:ae:4f:60:91:5f:6b:b2:32:e2:79:4f:08:f0:b4:
20:9b:0a:35:70:cb:ce:ac:52:c4:5c:e8:12:d6:b4:39:4e:b2:
bf:69:31:55:ff:7d:69:90:17:f7:73:93:be:41:63:7c:32:ab:
db:ea:f6:c3:b8:c1:ed:71:94:98:5b:26:2a:5d:73:90:48:cb:
f8:fc:ed:03:c0:d6:2c:2b:98:69:93:e2:03:86:ed:7a:c6:3c:
da:8a:e3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:13 2024 by rpki-client on console-ams.rpki-client.org