Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/kNAUqVQSaBXGjgsrZOWfneX7jZA.roa
File: kNAUqVQSaBXGjgsrZOWfneX7jZA.roa (raw, json)
Hash identifier: R8V/TuemQ9gZBiselusuXNB4aLGYJQ4zjzCqACEAKJ8=
Subject key identifier: 90:D0:14:A9:54:12:68:15:C6:8E:0B:2B:64:E5:9F:9D:E5:FB:8D:90
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0767941A
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/kNAUqVQSaBXGjgsrZOWfneX7jZA.roa
Signing time: Wed 02 Feb 2022 15:50:36 +0000
ROA not before: Wed 02 Feb 2022 15:50:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 45.9.30.0/24 maxlen: 24
45.144.215.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124228634 (0x767941a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Feb 2 15:50:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90d014a954126815c68e0b2b64e59f9de5fb8d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:a6:18:39:08:d7:b4:3e:69:7c:2a:4e:e1:
16:98:9a:16:92:e3:e8:87:5f:ec:9e:58:d4:07:a3:
d6:21:b4:36:06:91:7c:9d:b2:2b:ff:99:11:cb:2c:
9f:65:c3:6e:83:2f:07:65:84:b2:2a:5c:5c:d6:31:
9d:7a:df:55:e6:d1:1c:46:a8:0f:9c:4e:fc:02:e9:
72:98:22:70:23:20:09:aa:b9:e6:18:03:15:3a:72:
be:bb:da:04:09:88:da:b0:bf:5f:86:2e:a5:ea:eb:
fb:5f:a8:8c:2f:e0:ee:34:d6:01:b2:49:15:af:67:
18:b7:ed:61:06:2b:a4:c8:c1:c4:44:bf:00:89:99:
04:4b:53:6d:c4:1a:ea:0d:0a:3b:ac:ba:b2:cf:00:
54:ef:42:36:1d:24:d3:3e:9c:27:f8:59:a4:24:08:
7f:3f:9f:18:87:f1:45:15:fd:68:21:2e:3d:2e:87:
bf:ed:d9:e4:24:2f:0b:f3:b4:bd:fa:86:d3:c2:cd:
b8:7a:69:74:b2:d9:f1:c6:8f:c6:1c:ed:8f:68:4c:
5c:a5:05:43:17:a1:96:f0:f3:46:d3:84:1d:73:fe:
5e:d0:3f:32:91:86:e6:24:e9:1f:66:52:72:7b:06:
fd:81:4d:b6:16:4d:8a:da:9f:46:b2:65:17:c3:30:
b3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D0:14:A9:54:12:68:15:C6:8E:0B:2B:64:E5:9F:9D:E5:FB:8D:90
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/kNAUqVQSaBXGjgsrZOWfneX7jZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.30.0/24
45.132.180.0/24
45.144.215.0/24
Signature Algorithm: sha256WithRSAEncryption
03:3c:da:8d:d5:cd:13:73:31:58:cd:32:c3:29:e5:8d:8c:39:
cd:99:ed:cf:9c:ef:9b:28:9f:e9:1b:15:dc:dc:1d:f2:27:e8:
42:0f:88:52:a1:9e:37:b6:ff:9c:e0:a5:4b:24:76:d8:03:05:
34:ba:f7:e8:de:b8:7a:e8:ec:6d:2d:0d:af:e6:f6:a3:a1:cb:
4d:d9:5d:1d:17:c2:ec:6d:f3:7c:05:81:0a:2b:4d:e8:db:07:
b4:8d:6c:03:44:17:f6:5f:17:76:70:56:fb:19:2e:87:fe:94:
2f:91:a3:3f:7a:ed:fe:9d:11:4a:d9:1b:df:e9:25:0d:04:b2:
b4:08:a6:d0:35:7e:2f:26:5a:b8:55:16:92:2e:01:92:8c:15:
6d:dc:de:7a:4a:28:f0:f3:b4:a1:7d:36:77:61:2f:2c:12:ce:
31:23:d5:70:4c:13:d1:16:e0:a4:8f:b7:f6:20:9f:cb:6e:e5:
4a:02:32:2b:2c:eb:36:2b:e7:38:79:b0:17:80:22:03:cb:b9:
db:78:e3:5f:e1:5d:de:c5:fc:0d:79:5f:e5:60:b3:aa:d2:54:
52:18:40:61:df:94:1c:00:45:9a:cf:5c:17:57:a1:b5:9c:f1:
25:ed:14:53:7a:84:72:22:98:30:a1:44:d5:28:05:0e:e8:57:
5f:51:c6:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:32 2024 by rpki-client on console-fra.rpki-client.org