Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/2-i7h1VgDZiHDbZBToZiKd8wJKo.roa
File: 2-i7h1VgDZiHDbZBToZiKd8wJKo.roa (raw, json)
Hash identifier: lSwv8P9bHiRTgao6eRTjeZVyOhuurHl2mf5mHX4ubt8=
Subject key identifier: DB:E8:BB:87:55:60:0D:98:87:0D:B6:41:4E:86:62:29:DF:30:24:AA
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 06FD6CBF
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/2-i7h1VgDZiHDbZBToZiKd8wJKo.roa
Signing time: Sat 01 Jan 2022 03:54:09 +0000
ROA not before: Sat 01 Jan 2022 03:54:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43624
IP address blocks: 45.144.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117271743 (0x6fd6cbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 1 03:54:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dbe8bb8755600d98870db6414e866229df3024aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:66:56:03:7a:ca:04:4d:b4:0e:4b:b2:bc:c1:
86:a4:51:e4:5b:62:3e:77:14:20:ba:df:83:cf:b9:
65:1c:78:cc:04:b6:7a:f0:8f:1f:c1:8d:23:0f:8e:
47:1b:2c:ab:2f:2a:ea:c7:87:cc:e8:78:3d:4a:78:
5a:55:06:e5:e0:8f:4f:7a:a5:14:16:ed:53:6c:98:
04:d1:bc:60:8f:16:1e:09:59:f8:3c:44:12:c0:08:
6b:94:b8:6e:69:f8:cc:24:5a:6b:79:83:61:b2:52:
30:93:94:06:af:47:57:ce:1f:d2:b4:68:f2:72:b0:
af:30:4c:aa:59:9d:ec:75:cd:bb:f5:e3:27:32:b9:
1b:a0:d8:b5:e8:18:a7:4a:67:10:1f:45:09:8e:6e:
42:0a:33:88:7a:64:f7:93:e7:57:1b:86:4e:2a:20:
3e:08:1a:4a:e8:18:95:b7:2c:51:98:e8:59:7d:b1:
58:ef:ef:8a:70:fa:d9:29:1c:06:b9:59:47:18:db:
a1:43:13:1b:9c:cf:0b:8b:dc:6e:d6:b1:0e:99:cc:
e2:db:c3:9c:88:71:b7:4d:27:e8:21:7b:4e:d5:76:
d7:2d:82:59:f6:6a:e1:a4:f2:63:d7:6a:6c:6b:2b:
44:49:90:51:fe:62:48:4c:ef:0b:d4:0e:7b:78:f4:
63:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E8:BB:87:55:60:0D:98:87:0D:B6:41:4E:86:62:29:DF:30:24:AA
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/2-i7h1VgDZiHDbZBToZiKd8wJKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.213.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:91:0f:a3:a1:c5:dc:33:c6:67:9a:20:53:8e:6e:99:91:51:
a0:c8:cc:ea:da:98:06:a8:da:ae:a2:f1:15:3c:dc:a7:02:62:
15:68:fa:7d:1d:1c:22:42:71:2d:5f:a1:03:b8:8d:45:52:35:
a5:75:5d:0c:1e:56:ce:8a:f3:06:de:74:a0:af:96:55:80:8b:
6a:45:3c:05:ae:dd:16:0d:4d:69:4d:b0:f4:14:2f:30:de:45:
2f:93:e4:52:0e:6e:c2:4e:a7:06:29:22:d4:8d:73:e7:29:f4:
79:88:fd:33:7f:4c:d2:ab:c4:cb:f7:58:be:00:fa:4b:de:c1:
8e:46:9f:0e:fa:62:7a:65:39:19:2d:79:32:a2:67:0a:d8:d0:
20:ec:88:a4:5c:41:b5:a9:bc:7d:d0:a1:2d:3c:eb:21:0f:d4:
1d:84:23:8b:65:b4:76:61:f0:ba:76:94:be:23:e2:4c:96:0c:
02:ac:25:29:00:1b:b8:58:bf:8c:4e:69:1e:d8:6e:06:4a:c5:
67:80:74:ef:77:4b:48:54:5b:1f:4e:c1:83:9c:47:56:f5:4b:
02:43:46:e2:39:10:d8:40:87:44:35:3b:94:b0:87:83:1c:32:
c6:85:f7:b8:ca:dd:00:9d:56:b4:21:37:1e:59:d6:03:fc:dc:
b1:39:fd:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:17 2024 by rpki-client on console-ams.rpki-client.org