Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/1nFHLq0c8UgGae5pWE81QZLGPn8.roa
File: 1nFHLq0c8UgGae5pWE81QZLGPn8.roa (raw, json)
Hash identifier: yo6pqRnbofv6oF2RwFI43tUKz8NCjKRdBCrdyVPoaI8=
Subject key identifier: D6:71:47:2E:AD:1C:F1:48:06:69:EE:69:58:4F:35:41:92:C6:3E:7F
Certificate issuer: /CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
Certificate serial: 01838E881CE0C1226A9B6CA956D517B27E65
Authority key identifier: 74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/1nFHLq0c8UgGae5pWE81QZLGPn8.roa
Signing time: Fri 30 Sep 2022 13:13:48 +0000
ROA not before: Fri 30 Sep 2022 13:13:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202548
IP address blocks: 45.130.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:8e:88:1c:e0:c1:22:6a:9b:6c:a9:56:d5:17:b2:7e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7488ac3ce7e91e240caff219cbe38fcf023bf2b6
Validity
Not Before: Sep 30 13:13:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d671472ead1cf1480669ee69584f354192c63e7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d3:36:c8:93:00:d4:9f:e7:9e:c6:14:fb:83:
d4:da:9e:e4:73:84:7c:4c:40:af:20:0e:8d:b7:29:
3e:a4:23:6c:28:8b:c3:36:fb:47:c4:ff:0e:ed:fb:
19:41:53:0f:c6:a0:7a:f5:0d:2b:16:10:62:ed:fa:
f1:9b:0d:71:5b:f2:6a:24:48:77:63:06:b6:48:2a:
83:30:0b:92:6b:2d:be:9f:7a:16:b2:f6:47:ed:3d:
a5:48:59:fe:3e:de:84:88:38:89:d9:78:63:b6:a2:
35:d8:c8:bf:cc:26:f2:30:50:41:93:d7:6d:ee:f1:
2b:37:30:a9:28:5c:34:05:93:a3:8e:4f:a7:cb:15:
c7:0a:4b:9e:1a:c3:b2:36:af:2b:de:cd:b4:45:3a:
3d:ce:4f:f9:7a:b8:b2:6e:9d:f8:50:75:97:2f:a8:
82:7b:5a:cb:b2:88:a8:4a:71:7d:6b:be:86:b2:2a:
2a:96:55:a2:68:ea:d9:80:49:d0:0d:2a:a0:8c:2a:
01:c1:b3:19:47:f9:b9:96:0c:e4:75:69:74:1c:2a:
d2:06:61:20:56:0b:04:b3:49:db:63:70:41:e8:82:
55:d6:f7:2f:35:e7:7d:98:64:67:2c:4f:7d:0f:a9:
ed:c2:da:06:dc:c7:f4:2d:80:53:be:8e:61:c8:d1:
63:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:71:47:2E:AD:1C:F1:48:06:69:EE:69:58:4F:35:41:92:C6:3E:7F
X509v3 Authority Key Identifier:
keyid:74:88:AC:3C:E7:E9:1E:24:0C:AF:F2:19:CB:E3:8F:CF:02:3B:F2:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIisPOfpHiQMr_IZy-OPzwI78rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/1nFHLq0c8UgGae5pWE81QZLGPn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e2e3d6-f226-4a7e-840d-d5763fecd605/1/dIisPOfpHiQMr_IZy-OPzwI78rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.45.0/24
Signature Algorithm: sha256WithRSAEncryption
29:8d:42:be:c3:38:eb:36:e6:35:fa:4c:f7:25:4f:7e:be:99:
1b:37:54:29:cf:32:8e:f8:aa:bc:2f:6f:6f:27:8a:da:fd:1a:
a4:44:30:62:70:f3:b1:cb:51:1e:00:2a:e9:5f:54:7e:49:af:
13:24:3c:10:25:c4:8f:64:6a:6b:aa:9a:6a:2d:96:9d:4d:92:
34:9f:e1:0d:8d:76:30:14:6d:ab:dc:59:ea:71:2a:02:15:51:
c2:93:19:07:35:2c:7e:d2:a9:9c:6f:65:5b:c3:67:d2:bb:59:
c0:51:0c:df:89:48:90:ca:24:af:84:b7:df:68:48:09:a5:16:
fa:aa:ea:bd:f7:c7:52:66:a9:de:f7:a2:9e:ba:d0:07:94:7b:
4c:34:d5:82:7b:78:3c:77:f2:85:3a:27:75:42:dd:07:14:15:
f5:41:1b:88:28:8d:31:76:cf:69:c1:fc:8b:8b:a9:20:02:ad:
d6:80:19:37:c5:e8:26:15:8f:07:1e:f4:17:e3:79:7e:eb:d9:
7e:07:54:18:d3:cc:88:ae:3a:a5:ea:6a:fe:a9:85:aa:08:e6:
d5:fa:00:f3:16:66:b7:7e:45:15:a0:94:45:ac:db:af:83:45:
c8:ab:53:26:23:aa:0f:c4:44:29:86:66:f1:5e:0a:2d:c8:1b:
a1:6d:1e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:41 2024 by rpki-client on console-ams.rpki-client.org