Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/byOnBGrMEigPnQeETk5OnbN3e9c.roa
File: byOnBGrMEigPnQeETk5OnbN3e9c.roa (raw, json)
Hash identifier: JIfhh1HBZn2KCm2VwQLdmHnUwv1pNGoKBLC696JYG3I=
Subject key identifier: 6F:23:A7:04:6A:CC:12:28:0F:9D:07:84:4E:4E:4E:9D:B3:77:7B:D7
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 0184AA85912FE1ED8D1D13B9C70D668BD1DA
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/byOnBGrMEigPnQeETk5OnbN3e9c.roa
Signing time: Thu 24 Nov 2022 16:43:10 +0000
ROA not before: Thu 24 Nov 2022 16:43:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48678
IP address blocks: 45.139.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:aa:85:91:2f:e1:ed:8d:1d:13:b9:c7:0d:66:8b:d1:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Nov 24 16:43:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f23a7046acc12280f9d07844e4e4e9db3777bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:97:d1:5a:f2:54:c8:47:34:1e:76:54:bd:f8:
e6:ef:1f:fb:51:86:13:6f:28:ac:48:f6:86:9d:3d:
4b:21:3e:5e:05:b1:22:b1:2a:98:b1:64:f4:3d:50:
6c:2e:cb:2d:ee:cb:b1:6d:89:d9:9d:9f:ab:3c:26:
c0:53:6e:c3:3c:c7:2b:05:27:66:8a:ad:e7:15:ed:
d5:b8:a2:07:2c:03:48:2f:6d:fb:da:11:49:93:21:
e7:3b:cd:a4:7a:10:1b:6d:23:86:3c:b5:31:c3:db:
24:e0:f3:4e:c1:9a:34:2e:1c:e5:ec:3d:09:ae:72:
ce:0f:11:d5:db:9e:99:a8:c6:71:63:08:a6:e1:0b:
2e:e6:e6:6d:e9:f1:ef:69:95:35:63:65:f4:6f:e0:
9b:6e:b5:16:8f:37:fc:15:98:b8:f8:9a:c8:b8:eb:
c5:e6:87:3a:eb:90:4f:43:c0:ff:c6:32:bd:6c:ea:
25:96:eb:c0:6b:83:7a:c7:23:b4:3f:3b:60:2e:48:
bd:f9:9a:93:17:84:cd:2b:a5:d2:26:7f:00:fb:93:
f2:f3:37:1f:54:90:c5:db:8d:62:fb:63:ee:f7:ec:
76:51:a0:55:1e:85:55:76:48:87:06:42:4c:29:ac:
6e:11:c0:fe:58:58:fc:05:44:a1:6b:83:93:9c:63:
da:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:23:A7:04:6A:CC:12:28:0F:9D:07:84:4E:4E:4E:9D:B3:77:7B:D7
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/byOnBGrMEigPnQeETk5OnbN3e9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.198.0/24
Signature Algorithm: sha256WithRSAEncryption
80:ad:b7:bf:78:88:16:41:e4:9c:fc:bd:d0:41:6e:b9:c7:a1:
62:62:d9:9b:e3:39:f0:7f:56:ca:da:e7:26:38:1b:f0:f6:e7:
ae:17:1b:e9:41:0f:ad:61:1a:d4:10:4f:44:7d:4f:8d:95:59:
20:8b:01:8c:32:95:eb:72:02:e6:62:04:95:3c:67:80:fe:fd:
18:69:ce:a1:49:1f:e9:21:15:f9:bf:92:8d:53:6f:c6:5b:da:
fe:48:59:cb:8f:59:b1:4f:c2:98:29:48:4c:8b:e0:b5:c7:a9:
e8:40:b7:37:b5:08:bd:f8:28:a5:1c:36:fd:a6:c3:78:f7:5b:
6e:da:b6:1d:ba:ef:6e:5e:c1:41:a0:b8:5a:36:be:8d:ae:90:
68:ec:bb:2b:72:cb:8b:da:24:7e:7c:19:f3:67:37:35:5b:52:
39:74:a6:be:ac:64:a7:a3:53:c1:78:2c:ad:ef:ce:51:f7:aa:
d5:86:69:05:64:87:3b:db:22:33:f3:38:cc:3c:f3:6a:63:df:
c0:10:c0:ba:7e:25:37:f2:52:14:62:39:e6:34:09:3e:97:4f:
d9:ec:19:14:14:94:2b:4e:64:85:2d:ac:f6:da:a4:e1:9f:81:
0c:f1:04:f4:c3:22:8d:76:55:38:16:6e:80:75:85:7e:a2:4e:
20:9d:c4:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:46 2024 by rpki-client on console-fra.rpki-client.org