Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/iUBrIJK6xr8_s8rVPfRrreP9UuA.roa
File: iUBrIJK6xr8_s8rVPfRrreP9UuA.roa (raw, json)
Hash identifier: odGA8xPF9TheXVEO2zcvL+yMhLA3daTbPOxE/DrAuk8=
Subject key identifier: 89:40:6B:20:92:BA:C6:BF:3F:B3:CA:D5:3D:F4:6B:AD:E3:FD:52:E0
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 086F0D36
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/iUBrIJK6xr8_s8rVPfRrreP9UuA.roa
Signing time: Fri 06 May 2022 12:19:59 +0000
ROA not before: Fri 06 May 2022 12:19:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 45.132.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141495606 (0x86f0d36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: May 6 12:19:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89406b2092bac6bf3fb3cad53df46bade3fd52e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:72:00:99:5c:3e:a2:c9:01:ce:1c:df:7e:
2b:87:b1:b6:42:b3:c3:34:14:bf:cb:06:4b:6c:d2:
db:f6:22:28:60:2a:97:0f:81:8e:df:70:a3:e1:ed:
9d:41:51:ae:8b:23:4c:97:e9:70:18:30:e8:64:75:
9b:ae:da:af:60:60:2e:e4:e3:a8:55:07:d6:08:13:
b5:4c:dd:c7:df:0a:e5:e8:c0:ff:3f:46:cf:32:5d:
a9:b5:d0:4b:41:c2:4c:47:90:b0:3f:72:a7:2b:19:
68:4f:4a:15:ff:67:bc:c5:82:95:eb:db:68:ab:d2:
f0:a2:5b:a6:65:2b:ed:cd:0e:21:52:7d:4a:b2:6c:
6f:87:c5:2a:4e:70:54:2f:ac:e1:19:87:23:90:49:
a8:c1:c3:5f:e7:25:39:f2:09:a3:85:83:ab:c0:e2:
fc:02:17:08:bc:b6:1d:69:2b:df:74:f6:13:65:c0:
b6:2e:61:81:e0:d8:a3:cb:c4:81:4e:f7:61:6e:6c:
35:9d:c6:02:6b:21:1a:da:44:97:e5:cb:7a:ed:3e:
3a:11:8b:57:3a:72:58:f6:7a:c7:53:81:98:20:b7:
d5:9b:87:88:ed:b0:81:d5:1b:9e:52:7a:f5:c4:15:
da:c3:8d:bf:5e:44:b7:57:d4:8c:ba:83:c5:ff:38:
ba:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:40:6B:20:92:BA:C6:BF:3F:B3:CA:D5:3D:F4:6B:AD:E3:FD:52:E0
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/iUBrIJK6xr8_s8rVPfRrreP9UuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.181.0/24
Signature Algorithm: sha256WithRSAEncryption
35:5d:7a:82:22:39:f7:a5:d9:19:f5:c7:51:9f:1f:54:75:24:
51:57:7c:3f:2a:e8:9d:bb:f2:8b:16:40:00:5b:f2:98:21:46:
07:da:ee:1e:f0:28:c6:7c:74:ca:21:24:d6:4e:6e:5a:08:8b:
2f:53:fc:9f:f0:d0:43:9f:7f:30:ea:4a:14:91:ec:11:f3:30:
38:d4:8c:48:f4:37:14:1a:b1:b9:ea:8e:39:b5:af:f4:c5:b5:
c5:99:70:cb:d0:2e:34:c6:09:03:16:a0:74:05:a8:a6:91:38:
10:82:29:52:77:4e:8f:c9:84:90:08:40:7e:61:18:00:5d:67:
96:a8:1c:0a:6f:f4:ec:8a:42:a9:86:75:31:6f:ec:49:b8:c5:
d1:31:9b:70:0b:ac:97:7d:ed:7b:01:0e:c2:c1:d5:f1:e8:e3:
95:9d:69:a9:30:e8:b7:26:df:51:75:d8:fe:23:30:bb:0f:6e:
c1:8f:e5:c2:19:a5:a8:69:94:8a:bc:4e:3b:eb:74:32:e5:5e:
ad:5e:b7:3d:33:01:86:52:2e:52:18:b0:98:fb:d0:3e:72:65:
ff:2b:59:0f:8c:0a:91:10:84:6e:af:a1:0b:07:73:e3:c6:ec:
4f:45:84:a2:b4:3b:92:31:d6:26:ba:24:a5:5c:32:ab:83:6a:
93:12:40:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:21 2023 by rpki-client on console-ams.rpki-client.org