Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/yLa_GdhLKiY3zLvO4RIBCV079eI.roa
File: yLa_GdhLKiY3zLvO4RIBCV079eI.roa (raw, json)
Hash identifier: 2/kHFfhEbdK8Z7EmSdfiVxKy2XXbepvFPaUJte+bVwk=
Subject key identifier: C8:B6:BF:19:D8:4B:2A:26:37:CC:BB:CE:E1:12:01:09:5D:3B:F5:E2
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 094DC377
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/yLa_GdhLKiY3zLvO4RIBCV079eI.roa
Signing time: Sat 01 Jan 2022 06:00:39 +0000
ROA not before: Sat 01 Jan 2022 06:00:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212794
IP address blocks: 45.86.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156091255 (0x94dc377)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 06:00:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c8b6bf19d84b2a2637ccbbcee11201095d3bf5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c9:75:90:42:92:30:64:fb:79:9b:2f:65:5a:
1f:83:f3:9c:30:7c:2f:fd:04:ab:3e:6c:38:a0:2a:
43:7d:ef:ce:b7:82:e2:45:1b:e6:13:44:23:94:ba:
9c:66:1a:8e:e1:4c:0e:ac:16:eb:eb:c8:a8:a1:c4:
1d:50:25:80:c7:b2:24:f9:2d:34:aa:06:b1:c9:45:
fe:27:ff:1e:85:6a:3a:b1:75:e6:d4:54:a0:7a:c1:
c7:da:0f:04:02:a8:b8:f3:4e:27:07:6e:a9:3f:db:
b3:c6:82:59:40:86:f3:bb:75:5f:a9:66:a0:5a:49:
17:98:d6:84:4a:70:b0:6c:27:1f:80:4c:39:2b:0e:
30:a1:6c:c5:da:1f:a4:84:19:c7:f9:a0:68:5d:69:
4a:b7:e1:a9:bb:48:36:19:8a:bb:77:b1:39:66:7d:
23:f6:2c:16:7d:3d:1b:8a:be:2c:cb:dd:d2:ef:bc:
b1:64:16:3e:57:64:b8:ab:c3:9d:35:41:06:c6:37:
fd:8d:b3:43:1f:35:f5:89:99:e2:66:70:3c:77:f6:
7f:bd:4e:be:b6:f4:f4:63:27:ac:05:96:e0:fc:af:
c3:33:51:1c:c9:46:88:4d:97:b2:96:bb:c2:d8:7d:
ad:a6:69:92:36:6b:b5:bb:a2:d2:69:a4:c7:56:7d:
43:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B6:BF:19:D8:4B:2A:26:37:CC:BB:CE:E1:12:01:09:5D:3B:F5:E2
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/yLa_GdhLKiY3zLvO4RIBCV079eI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.152.0/24
Signature Algorithm: sha256WithRSAEncryption
41:7e:c3:32:a7:c5:6e:07:b1:2e:52:6c:e7:9c:09:f8:c2:8d:
dc:3b:51:67:e3:06:32:23:ca:57:d1:b0:76:fd:73:88:46:32:
a7:95:5d:50:fa:f4:6a:d7:77:dc:49:d6:bb:73:60:dd:ac:84:
cd:15:35:0a:30:31:6d:04:30:c6:27:f8:ed:92:8f:7a:25:92:
82:2c:69:6b:c6:5d:3c:f7:73:a4:7a:d3:57:da:fe:a8:be:0a:
e2:00:a4:aa:83:62:26:95:8a:b7:45:9a:7b:23:d4:9b:d5:b5:
1b:53:13:06:6e:41:93:9b:e4:27:72:af:6a:20:eb:a4:75:e7:
bc:f7:3e:46:70:ca:22:c2:a7:bb:98:f6:1f:b5:99:35:ed:30:
02:41:ea:85:4c:19:fb:36:8b:37:e1:5d:1a:ca:74:af:19:72:
ab:41:05:68:44:3d:2d:11:34:9a:e1:6d:33:68:53:ce:c0:91:
4b:60:e3:ca:38:7a:dd:73:48:86:a8:47:28:03:1a:10:be:48:
1e:e1:75:4a:e7:1a:d5:57:7c:85:9c:a9:11:32:a0:36:74:3a:
d0:f7:44:83:4d:17:f6:ac:b4:b0:05:71:40:d8:4e:d3:fe:1c:
16:e6:6c:96:69:88:f2:ae:2d:c6:53:52:a5:cc:35:97:2d:08:
03:f9:93:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:14 2024 by rpki-client on console-ams.rpki-client.org