Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/rD85NdP3DZfsWT8Eb3aiTMxkh4c.roa
File: rD85NdP3DZfsWT8Eb3aiTMxkh4c.roa (raw, json)
Hash identifier: QDDDaY3FxqbpyozvOxgrul8CdbHGP6DKpVpE7yF7bzM=
Subject key identifier: AC:3F:39:35:D3:F7:0D:97:EC:59:3F:04:6F:76:A2:4C:CC:64:87:87
Certificate issuer: /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial: 0184BFD027E6F09BD7D0E36A37A9E201055B
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/rD85NdP3DZfsWT8Eb3aiTMxkh4c.roa
Signing time: Mon 28 Nov 2022 19:56:40 +0000
ROA not before: Mon 28 Nov 2022 19:56:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3320
IP address blocks: 45.81.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:bf:d0:27:e6:f0:9b:d7:d0:e3:6a:37:a9:e2:01:05:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Validity
Not Before: Nov 28 19:56:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac3f3935d3f70d97ec593f046f76a24ccc648787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6d:18:fb:9a:1c:74:7e:cd:8d:d8:0a:81:69:
f0:b6:fb:4b:cd:7f:c4:7b:80:19:4f:ba:4f:16:3b:
d8:be:33:3c:14:c9:6d:ff:67:5d:55:63:36:ed:07:
43:21:3b:8c:41:ef:03:d9:0e:c2:5c:f0:f1:c5:a0:
61:94:65:40:d2:77:97:da:63:cc:1a:e4:b2:31:a6:
73:f6:bf:a7:4c:ca:d8:2f:f7:13:52:92:d5:33:ab:
bd:17:d6:b9:68:71:e1:84:4a:41:dd:95:5a:c5:6f:
e2:6b:e9:a4:6d:5e:19:43:01:c6:5c:b3:93:6f:36:
fb:ac:41:ab:56:bd:6d:ca:43:35:fc:17:3f:57:c5:
99:83:ec:cc:c2:9f:66:c6:2e:8b:06:94:0a:c4:c4:
0d:f5:68:67:33:8f:b9:88:3b:28:fb:95:60:90:1c:
66:ef:c5:af:19:9d:a6:74:6d:aa:a7:42:d7:f5:d7:
08:1a:5f:52:ac:0c:7f:cd:8a:51:53:8c:ff:a4:2a:
a0:35:5e:17:fe:31:12:82:19:e1:32:3d:9f:d7:51:
3c:b2:55:04:d6:b9:be:a5:0d:33:21:1c:f4:ac:01:
6b:f0:21:94:1e:fd:9e:9e:09:44:6b:03:07:28:1d:
33:62:93:d9:45:26:30:d0:d3:09:a3:27:a8:9d:17:
1a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3F:39:35:D3:F7:0D:97:EC:59:3F:04:6F:76:A2:4C:CC:64:87:87
X509v3 Authority Key Identifier:
keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/rD85NdP3DZfsWT8Eb3aiTMxkh4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.255.0/24
Signature Algorithm: sha256WithRSAEncryption
57:89:4a:77:00:ca:cb:02:0f:33:25:27:c0:7d:f3:40:8a:e2:
e2:28:83:db:0c:80:97:53:ca:e2:cb:7c:89:e5:ee:d0:e2:ab:
99:c7:89:66:d1:65:ff:50:a3:98:fc:b0:54:76:5c:d8:36:c3:
a8:d4:82:61:0d:20:78:a8:91:ba:45:25:73:f7:29:9c:97:88:
5b:59:f3:72:53:4c:f3:67:72:e2:20:1a:dc:5a:0b:d3:34:f0:
0d:0c:00:6e:e8:1e:63:c7:10:ec:7d:8d:de:b4:bd:8c:ef:4a:
c0:e0:7d:93:36:83:8b:ac:24:c5:1d:63:44:97:57:d0:cb:1d:
4e:2d:bf:c6:7e:c0:c9:cb:23:a2:ff:22:d1:99:2d:0b:aa:10:
93:64:ba:19:38:48:f8:80:80:c6:04:7f:37:8d:4f:f7:a4:02:
84:c7:d9:06:82:84:d5:0c:a8:80:56:38:4d:17:7c:88:60:ce:
1b:d0:08:f0:74:08:59:a7:95:53:80:ba:09:fb:80:37:db:e9:
31:b1:ff:b9:0f:ed:aa:88:70:28:d0:e9:a5:f6:98:53:d2:6d:
e9:30:a3:1e:58:1f:d2:f3:86:ae:7a:0c:bb:6d:69:0d:4b:cc:
e7:87:38:48:f0:92:46:95:46:ad:73:3c:1d:ce:93:de:27:4c:
37:04:2f:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:15 2024 by rpki-client on console-fra.rpki-client.org