Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/kNRc2Uq-W7aAj54iVUy_crjd3mQ.roa
File: kNRc2Uq-W7aAj54iVUy_crjd3mQ.roa (raw, json)
Hash identifier: FVWEjd0UP5PSyIJfBXwzd10H2hUI3p3jwOJJlf/kuNo=
Subject key identifier: 90:D4:5C:D9:4A:BE:5B:B6:80:8F:9E:22:55:4C:BF:72:B8:DD:DE:64
Certificate issuer: /CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Certificate serial: 02198434
Authority key identifier: 2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/kNRc2Uq-W7aAj54iVUy_crjd3mQ.roa
Signing time: Sat 01 Jan 2022 12:06:01 +0000
ROA not before: Sat 01 Jan 2022 12:06:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29119
IP address blocks: 45.11.64.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 35226676 (0x2198434)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eb4d4de4084f3c8e1a4f6d4d3553907ab0c808a
Validity
Not Before: Jan 1 12:06:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90d45cd94abe5bb6808f9e22554cbf72b8ddde64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:89:7c:a4:e8:66:14:76:2a:a9:4f:24:a8:28:
95:b5:87:b8:e1:3c:67:19:be:03:f9:41:55:5a:fc:
72:c3:a0:ff:6d:e4:67:41:3c:ee:df:ea:11:b9:ca:
99:89:87:04:5c:4e:d9:e9:89:52:6a:c1:b5:9b:e4:
79:b5:20:ba:66:eb:5d:86:4c:b5:7b:8c:c4:3d:f5:
33:83:b2:98:5d:4f:53:16:89:ff:81:83:94:94:7a:
b7:31:0c:94:09:1d:74:b5:62:53:df:7d:a6:fe:f9:
b5:d2:a6:b6:ea:28:2b:0f:f9:7a:a8:71:51:11:b1:
43:ec:9d:9b:15:03:7d:ef:4a:40:71:b6:b8:66:99:
cc:a2:f8:03:88:2c:ca:8b:09:3e:34:b2:61:cd:63:
b9:17:07:8f:d1:f5:46:ba:b2:11:96:99:86:38:1f:
24:b1:68:8d:7f:ac:42:2e:e3:54:0c:aa:e7:4e:3b:
7c:e7:83:24:94:9e:f2:ad:ff:7b:3d:13:0b:36:01:
11:1d:07:1c:02:37:8e:12:90:87:11:46:98:20:1b:
6c:11:b3:a8:51:68:32:c2:d7:da:79:db:7f:cf:fd:
bb:35:79:7f:7d:c6:6a:0b:a6:8a:be:23:65:25:1d:
62:e0:c0:fe:5b:66:c2:73:d6:1c:e1:df:77:13:78:
f2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D4:5C:D9:4A:BE:5B:B6:80:8F:9E:22:55:4C:BF:72:B8:DD:DE:64
X509v3 Authority Key Identifier:
keyid:2E:B4:D4:DE:40:84:F3:C8:E1:A4:F6:D4:D3:55:39:07:AB:0C:80:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LrTU3kCE88jhpPbU01U5B6sMgIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/kNRc2Uq-W7aAj54iVUy_crjd3mQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/7cfc68-47b8-4628-b42f-9529bccbbb14/1/LrTU3kCE88jhpPbU01U5B6sMgIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.64.0/22
Signature Algorithm: sha256WithRSAEncryption
18:57:b3:94:5c:56:54:6f:3c:d9:49:2f:46:68:dc:47:11:87:
6e:fe:48:33:2b:9b:30:70:76:53:a5:9d:b1:1d:a4:45:be:82:
b8:39:2e:b5:25:93:81:6f:e9:9b:26:a7:c3:7f:d7:87:01:5a:
ba:85:1f:61:49:0f:ab:02:e0:e7:cb:c7:e4:94:26:b8:b8:82:
37:ed:38:03:b5:b1:82:fd:70:12:3a:33:48:12:92:b3:2d:ee:
0f:6f:c1:b6:0a:c7:22:0d:76:52:9c:0e:b0:0f:28:1f:cd:69:
8b:5c:a6:b4:64:5d:af:37:98:dc:df:91:b4:f4:20:bc:0c:96:
35:db:1a:e7:b1:55:aa:e2:03:aa:29:45:f5:47:89:21:03:48:
63:69:e2:fb:6b:ec:cc:3a:5c:0c:2e:b4:94:a5:8d:0e:5c:2d:
2b:96:84:9c:31:b5:6f:dd:ca:ab:4d:9a:ed:70:46:03:92:14:
29:fb:f2:8e:fb:0d:b3:25:50:29:c6:89:f5:aa:fe:58:4d:47:
19:a5:af:82:9a:9f:0a:ef:5a:86:04:4a:2c:4d:3e:99:f0:e3:
65:98:40:05:c7:03:83:a3:34:4a:49:4d:42:4b:0b:5d:a7:39:
ba:69:bc:e8:c3:df:e4:6d:a6:d5:0d:fa:e2:7a:ef:ed:5a:c8:
db:f6:58:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:33 2024 by rpki-client on console-fra.rpki-client.org