Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/almkfAJSUoX8qOelBaoe6Vni3LE.roa
File: almkfAJSUoX8qOelBaoe6Vni3LE.roa (raw, json)
Hash identifier: Mc3Bkn+tOJNLal553yblSwsFezesqfBiG9ugJxV77/c=
Subject key identifier: 6A:59:A4:7C:02:52:52:85:FC:A8:E7:A5:05:AA:1E:E9:59:E2:DC:B1
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 139E64AC
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/almkfAJSUoX8qOelBaoe6Vni3LE.roa
Signing time: Tue 04 Jan 2022 16:54:44 +0000
ROA not before: Tue 04 Jan 2022 16:54:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203950
IP address blocks: 45.128.20.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 329147564 (0x139e64ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 4 16:54:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6a59a47c02525285fca8e7a505aa1ee959e2dcb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:44:59:40:4d:08:54:75:35:db:13:82:d6:c8:
89:0a:e1:17:de:46:9b:6e:98:98:63:7d:89:d8:6a:
86:63:31:35:be:32:c7:2d:e9:e3:8c:a0:63:eb:0b:
55:f2:04:bf:11:d5:fd:50:a6:2d:d3:12:0a:dc:d2:
46:48:07:13:d0:25:62:9a:41:ac:a2:44:12:92:21:
ff:82:45:cc:7d:81:33:bb:ab:06:39:7e:9c:42:25:
08:d4:3c:d7:34:94:b0:93:fd:b2:fa:83:0f:8a:4f:
a5:f5:c6:c4:71:10:c2:3f:4a:61:e8:67:87:37:b4:
42:a5:ed:ff:67:30:06:10:8d:ef:33:04:ca:7b:dc:
50:a4:83:f7:c1:6a:bc:45:45:45:f1:ff:0c:22:66:
96:49:3b:24:9f:54:8a:ed:80:b7:43:82:c8:6b:a4:
01:f8:35:f9:26:b5:e6:7f:6a:5b:53:3a:87:32:2d:
d5:dc:02:cd:9b:61:8b:20:12:d9:aa:07:d6:82:d5:
c1:e7:67:ea:21:52:32:ab:17:ab:d5:68:2f:74:87:
d7:ca:42:e9:50:ed:f3:78:51:7b:88:b7:75:5d:b7:
50:05:dc:f3:a1:49:55:9a:70:4d:aa:f2:51:26:cd:
b5:4d:d6:f7:fc:47:60:3e:a8:49:f1:00:70:e1:3f:
23:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:59:A4:7C:02:52:52:85:FC:A8:E7:A5:05:AA:1E:E9:59:E2:DC:B1
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/almkfAJSUoX8qOelBaoe6Vni3LE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.20.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:0a:fb:c8:bc:fe:c0:9d:59:7e:27:a4:2b:3f:00:11:3d:7d:
53:63:0d:63:ac:3e:26:a0:f3:82:db:50:0f:33:34:f9:b1:63:
21:29:41:da:5e:65:6e:d2:87:15:50:1e:6d:6e:9b:7f:32:ba:
be:75:19:84:23:f2:0c:bd:16:30:c0:0e:2f:63:0f:2b:2a:e5:
c4:a1:c8:d2:23:aa:c9:b9:cb:69:f8:b2:78:c2:ec:90:48:b9:
ba:f5:dc:74:13:0b:d4:dd:1e:6c:f9:45:5d:76:4e:e8:f6:4b:
8e:00:0a:29:e6:99:3e:ca:50:72:79:32:13:0f:40:11:0d:9a:
75:ac:e6:32:3d:83:44:cc:ee:19:78:7c:40:16:39:eb:e8:8f:
03:64:ca:94:f8:4b:db:ce:1a:aa:6d:5d:46:87:6d:2c:0d:1a:
ab:b8:bb:f3:64:0d:62:fd:65:1f:f4:e9:5c:dd:eb:5a:56:c4:
54:70:a0:d5:fa:96:78:9d:4e:72:f4:30:ee:d0:65:c3:c6:e2:
60:34:d7:eb:88:b2:6a:b9:56:88:87:ea:16:df:8f:46:47:07:
f9:f2:39:85:ca:85:71:76:30:c2:7f:12:68:4b:7a:55:9b:94:
ad:eb:73:13:65:6f:3b:2e:dc:53:05:d1:5e:ab:e1:28:47:ff:
f3:d5:47:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:26 2024 by rpki-client on console-ams.rpki-client.org