Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/J0O1Re0CFZog-V9KVQCqRNf0sRs.roa
File: J0O1Re0CFZog-V9KVQCqRNf0sRs.roa (raw, json)
Hash identifier: fzPZV84VctLGPpPBLx1qCaOtNYl9PO0NrMQnF7JsJ6I=
Subject key identifier: 27:43:B5:45:ED:02:15:9A:20:F9:5F:4A:55:00:AA:44:D7:F4:B1:1B
Certificate issuer: /CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Certificate serial: 0182A166F45452E2A862E916D71F9988F5AC
Authority key identifier: C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/J0O1Re0CFZog-V9KVQCqRNf0sRs.roa
Signing time: Mon 15 Aug 2022 12:07:35 +0000
ROA not before: Mon 15 Aug 2022 12:07:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210162
IP address blocks: 45.143.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a1:66:f4:54:52:e2:a8:62:e9:16:d7:1f:99:88:f5:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c12ac9b14fd261a8d2763aad417432bebc49a0d6
Validity
Not Before: Aug 15 12:07:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2743b545ed02159a20f95f4a5500aa44d7f4b11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:05:52:11:97:1c:fc:4d:48:53:73:f3:60:4a:
93:8b:17:a4:80:35:33:7c:2c:62:41:91:b3:a3:d7:
9d:63:81:38:5b:d7:4e:2f:12:f4:4e:32:b9:00:ab:
fa:87:72:3a:ab:c6:1c:e9:7d:35:13:6a:f1:14:37:
11:ba:54:76:c4:3b:59:a2:65:4a:77:ba:6c:7a:eb:
33:05:88:d7:46:9b:68:99:6b:0c:ad:ae:3e:d8:e1:
96:29:9f:47:5b:b8:b0:1c:d5:c5:77:24:09:bd:40:
be:bd:71:ea:dd:d5:08:cf:14:f4:6c:cc:36:90:95:
83:dd:6f:48:1e:33:8e:0b:fb:af:91:7b:56:78:1c:
ae:23:ea:e5:49:cb:d5:0e:ad:4c:9b:f4:14:7d:d6:
0b:db:da:4b:bc:13:9e:51:e5:8f:b2:9b:cf:8a:30:
25:a0:ae:d7:69:a7:92:d5:d4:8d:1b:1b:ea:61:5d:
b2:5d:6c:aa:65:4f:dc:af:8f:13:df:41:8b:d2:89:
d3:8e:87:85:cc:74:41:d8:72:79:91:8e:e5:ca:02:
2d:9c:4b:58:76:4f:90:58:30:4d:02:b4:1e:d8:86:
12:18:33:c6:7c:37:89:be:d8:01:6c:6b:06:41:9a:
21:ab:b3:30:41:5f:fa:16:72:40:da:a8:da:d1:65:
aa:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:43:B5:45:ED:02:15:9A:20:F9:5F:4A:55:00:AA:44:D7:F4:B1:1B
X509v3 Authority Key Identifier:
keyid:C1:2A:C9:B1:4F:D2:61:A8:D2:76:3A:AD:41:74:32:BE:BC:49:A0:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSrJsU_SYajSdjqtQXQyvrxJoNY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/J0O1Re0CFZog-V9KVQCqRNf0sRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/7011dd-c2d9-4341-9236-2167cf01cf4a/1/wSrJsU_SYajSdjqtQXQyvrxJoNY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.31.0/24
Signature Algorithm: sha256WithRSAEncryption
50:a2:63:03:82:2a:64:a8:65:e8:a2:36:49:0e:ee:67:94:3d:
11:28:80:be:ff:89:f9:fd:d1:a9:d1:1a:1a:29:ef:bb:2d:ba:
76:88:7a:ef:71:bb:10:29:3d:f4:5d:48:b1:e1:aa:87:99:ec:
a5:c6:6c:8d:74:ab:5a:8c:dd:ac:ce:da:46:99:c2:b6:25:57:
77:b7:12:90:36:29:01:d3:84:f9:0c:31:53:f4:47:80:62:eb:
e5:da:88:d6:78:e8:bb:9e:96:b2:85:75:35:16:64:8f:39:bb:
25:cf:92:a1:84:c8:2d:32:db:e6:f2:87:43:5c:9c:24:7f:14:
0d:c3:57:85:bb:80:a6:b3:b5:3c:8f:f6:e8:9c:78:c8:1e:fa:
27:6a:58:59:52:70:92:ad:6f:79:48:8a:64:e2:ee:43:bc:30:
9c:7c:78:09:e5:49:fa:e8:4b:27:68:dc:66:22:c4:f6:25:3d:
7c:65:e9:a9:e3:3c:7d:e1:62:69:81:cd:ec:8b:0f:4e:bb:5d:
b9:0f:9f:2c:95:fa:be:51:3a:11:86:9c:49:ba:9d:f1:a1:d9:
27:56:e4:bc:f4:0c:db:ae:0c:58:a4:8a:95:2f:46:58:3f:1e:
a0:a4:19:44:0c:c1:ae:95:24:26:4e:cc:97:87:d1:dd:be:3a:
fc:4e:35:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:55 2024 by rpki-client on console-ams.rpki-client.org