Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/7xl5Qe5tZNZhwy_tYHSEtEJRRkA.roa
File: 7xl5Qe5tZNZhwy_tYHSEtEJRRkA.roa (raw, json)
Hash identifier: haPXr6WMbYJsghnG2EFeXlGVM5RY5lC+kjOL/Oubij4=
Subject key identifier: EF:19:79:41:EE:6D:64:D6:61:C3:2F:ED:60:74:84:B4:42:51:46:40
Certificate issuer: /CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Certificate serial: 02C72D3E
Authority key identifier: AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/7xl5Qe5tZNZhwy_tYHSEtEJRRkA.roa
Signing time: Sat 01 Jan 2022 06:05:56 +0000
ROA not before: Sat 01 Jan 2022 06:05:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202272
IP address blocks: 45.152.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46607678 (0x2c72d3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Validity
Not Before: Jan 1 06:05:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ef197941ee6d64d661c32fed607484b442514640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:28:99:b9:35:7b:7f:b0:f4:c9:97:7b:cb:07:
fc:06:10:95:0d:7e:73:8a:68:c3:26:92:40:02:28:
d1:3c:82:50:bf:5b:53:5f:2f:be:bf:6e:fe:ac:c5:
7c:6e:ee:43:f1:ac:af:74:fd:69:6f:76:f2:8d:3a:
a6:5e:46:47:71:4b:e2:4e:4c:47:8b:78:88:49:de:
5f:83:40:e4:ab:20:c9:d1:2c:ae:c6:7f:25:d9:7a:
b4:82:c7:bb:c4:e1:23:5b:5b:cb:c4:90:af:a8:61:
e5:bb:c0:76:70:7e:3d:29:d8:b5:1e:96:48:70:75:
b3:22:d9:fa:47:f8:f7:05:58:06:2b:c8:2f:7b:c5:
09:a5:70:ca:f7:c1:23:b7:54:2b:9a:1d:46:43:17:
24:9f:c7:3d:4a:dd:ff:b3:ec:30:f6:89:46:f4:c9:
68:d4:eb:1d:71:f2:af:fd:4f:e3:f1:ae:ba:ff:91:
bd:93:2b:f1:fc:bb:89:23:9f:c1:f0:22:c0:18:be:
61:fd:9b:49:48:36:e2:02:e5:2b:f3:d1:c0:3e:71:
68:39:ef:77:f9:5b:57:df:dc:0a:fe:cf:c0:a0:83:
27:62:16:78:3c:c8:35:df:ae:8f:07:a1:dc:00:d2:
5a:c0:e7:f3:a8:d2:75:71:52:cf:28:cd:50:d3:6c:
f1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:19:79:41:EE:6D:64:D6:61:C3:2F:ED:60:74:84:B4:42:51:46:40
X509v3 Authority Key Identifier:
keyid:AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/7xl5Qe5tZNZhwy_tYHSEtEJRRkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.68.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:c1:af:5c:fa:2f:8b:b0:1a:8c:cb:b4:c4:56:40:98:46:a2:
33:b0:92:14:da:93:2e:a4:0e:d8:f2:9e:8b:1c:24:19:20:15:
5b:02:3f:48:9b:7f:ea:77:70:95:b0:4d:7b:62:2a:d2:69:dc:
24:96:52:ba:b3:1f:ca:4f:e5:d1:57:3c:33:08:a3:12:da:e1:
99:32:5b:8a:f4:5c:72:0b:8e:73:a1:b3:6b:80:69:94:19:56:
d9:81:ef:ee:da:68:f8:ae:7f:2c:e9:d4:9c:3c:13:4d:0d:99:
b4:3d:49:90:b3:93:17:1d:2b:de:47:93:4c:6e:26:df:60:b7:
96:4e:83:d6:7f:78:ae:e4:f6:ea:2b:02:8e:1d:f1:68:b0:20:
18:8e:51:61:31:88:cb:01:6a:90:1f:38:bf:da:1d:50:b6:37:
0c:5d:21:ed:b0:d9:3e:5c:be:08:be:4e:f4:7c:63:7f:8c:42:
15:07:4c:7c:4f:4a:d0:01:9b:df:92:25:89:d8:45:5f:3a:11:
6a:aa:04:a9:81:f9:84:b9:cf:09:f4:42:7d:bb:8c:33:4f:7c:
10:ba:73:63:6e:cc:7b:30:7c:9a:d2:95:f9:ea:44:15:13:b5:
0e:de:fd:06:27:fe:a3:98:cb:3e:90:f3:1a:fb:a7:94:ec:d2:
1c:7e:a6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:13 2024 by rpki-client on console-ams.rpki-client.org