Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/4ggdmpF5F9-Td9dUWZ7A14M2VZ0.roa
File: 4ggdmpF5F9-Td9dUWZ7A14M2VZ0.roa (raw, json)
Hash identifier: 2bLQnrkSdfw5nM+uoBdmAJxjLHRDK7yPUtq1gCeRYKE=
Subject key identifier: E2:08:1D:9A:91:79:17:DF:93:77:D7:54:59:9E:C0:D7:83:36:55:9D
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 0184CA16775F1E15825FC36B1EB32A90D120
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/4ggdmpF5F9-Td9dUWZ7A14M2VZ0.roa
Signing time: Wed 30 Nov 2022 19:49:40 +0000
ROA not before: Wed 30 Nov 2022 19:49:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3399
IP address blocks: 45.159.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ca:16:77:5f:1e:15:82:5f:c3:6b:1e:b3:2a:90:d1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: Nov 30 19:49:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2081d9a917917df9377d754599ec0d78336559d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e4:c8:27:6d:19:66:f1:f3:af:c9:c6:d2:99:
8c:2d:02:86:15:38:1b:97:71:0c:c8:08:fd:97:d1:
ec:4e:69:cb:c1:24:e1:91:3a:39:3a:38:79:19:1c:
1d:af:7f:6f:f6:78:57:61:1a:af:c5:c4:d4:fc:26:
5b:30:4a:16:8b:84:20:43:67:e3:3f:10:2d:64:26:
52:93:de:b3:55:77:4f:de:b7:3f:68:94:8a:ab:50:
b6:6e:f5:13:0a:90:54:58:f6:4b:36:e9:82:74:78:
7c:46:86:bb:36:8b:81:f0:17:6d:cd:34:36:a3:aa:
9b:84:d1:ad:7b:f3:12:83:b0:d6:47:b1:99:96:68:
0a:7b:02:3c:49:28:8c:26:b5:31:a5:2a:e8:24:6b:
3e:a5:52:e9:82:e1:ac:9c:71:83:74:77:37:ca:ed:
bd:b3:b3:81:b9:e3:61:1e:44:f1:f1:70:a9:0c:14:
dd:13:09:f1:16:3d:75:6e:a5:42:c8:42:e9:1c:94:
ee:f9:b1:6c:d8:02:69:e1:1e:a7:25:15:c7:79:52:
73:d0:b9:4d:3a:56:5d:02:15:fe:c0:22:36:0b:72:
96:9d:09:0b:e1:6b:e8:cd:86:83:1f:80:30:92:f6:
d0:77:1e:bd:79:71:8a:07:a0:c5:69:7d:e2:b4:98:
70:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:08:1D:9A:91:79:17:DF:93:77:D7:54:59:9E:C0:D7:83:36:55:9D
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/4ggdmpF5F9-Td9dUWZ7A14M2VZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.13.0/24
Signature Algorithm: sha256WithRSAEncryption
25:79:0c:9b:b5:25:7e:f6:66:dc:6f:e9:15:73:c6:1d:22:3d:
74:3b:36:2e:b6:e6:fb:ae:8e:39:99:3d:d8:f5:9d:d0:b2:67:
2c:63:e4:70:c3:52:a3:42:14:ce:1f:14:8e:53:05:01:5f:f5:
40:1a:e9:e4:2f:8c:51:87:7e:8e:60:5b:c3:8e:e1:85:bb:ce:
f9:b0:8c:f0:68:d1:84:bf:f7:ff:1f:c3:1d:bb:d7:a7:8e:1d:
90:f6:a8:15:fa:62:20:16:43:40:a9:bd:4a:19:01:34:12:08:
51:b2:73:22:67:fa:cd:9d:1c:bc:f9:7b:17:2e:ae:b4:4b:47:
5b:0d:0d:5d:14:22:9b:29:77:ec:7c:20:5e:ff:78:4d:1f:e6:
16:6f:2f:dc:40:dc:c1:9f:e5:03:3d:e2:1b:13:c7:1f:74:0f:
0b:34:6e:fc:dd:68:88:f0:d8:60:3a:22:c9:af:8a:11:7f:ce:
ba:68:3f:68:01:06:80:7b:9a:ad:50:c0:17:9d:e6:b1:5b:89:
bb:dc:d2:ac:eb:be:a5:64:e6:85:78:3f:4c:f4:f1:1c:a3:97:
f5:5a:72:0b:58:d0:f8:e9:26:84:7b:74:01:e2:01:a7:3d:18:
e7:1c:48:7e:d8:3a:cd:df:d5:7f:85:f1:94:99:32:d5:23:a7:
e9:ed:dc:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:33 2024 by rpki-client on console-fra.rpki-client.org