Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/1IpNubYOb3AirfINWSHwJ7KKrvk.roa
File: 1IpNubYOb3AirfINWSHwJ7KKrvk.roa (raw, json)
Hash identifier: H9yDjx4sDEPnDrjiLz2oBXLs+q0g9V1JXUusqlpagu0=
Subject key identifier: D4:8A:4D:B9:B6:0E:6F:70:22:AD:F2:0D:59:21:F0:27:B2:8A:AE:F9
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 06E71EA6
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/1IpNubYOb3AirfINWSHwJ7KKrvk.roa
Signing time: Wed 16 Feb 2022 21:41:29 +0000
ROA not before: Wed 16 Feb 2022 21:41:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 272568
IP address blocks: 45.154.158.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115809958 (0x6e71ea6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Feb 16 21:41:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d48a4db9b60e6f7022adf20d5921f027b28aaef9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:12:cc:9e:35:0d:9d:de:d2:6a:72:73:e3:72:
76:28:1f:92:df:62:66:97:e9:f1:34:67:97:d9:1b:
45:9f:8f:10:70:43:12:02:fe:cb:7c:d8:fa:9e:cd:
e5:aa:65:01:d0:76:e8:d6:f1:32:14:67:67:1b:5e:
2d:55:34:cf:84:89:e6:f0:60:1f:c2:64:14:84:a4:
37:60:88:12:10:a8:d4:51:bd:72:ba:d4:75:26:50:
46:2c:bf:59:e7:91:79:05:14:37:c1:a9:8c:0c:a5:
9e:4f:93:c6:6b:34:3e:17:37:37:e6:a5:af:01:1a:
8c:68:e4:be:0f:02:17:d9:d0:3f:15:93:d3:27:80:
1e:9c:4b:35:02:63:59:e3:6e:fd:1c:31:69:34:0e:
a3:7e:44:de:1c:f5:b6:6b:09:02:00:95:6e:4f:d6:
b8:eb:15:e5:00:af:be:ea:5c:8a:5b:c0:89:ce:19:
ee:35:e4:41:30:fc:cb:5c:91:27:04:75:d1:ab:b9:
21:98:ab:cf:a6:8d:69:55:96:8d:a9:69:0a:df:29:
8a:55:e4:e5:22:a2:7d:82:a8:8c:99:50:ad:d2:af:
fc:48:14:cf:62:91:04:c8:34:55:45:76:2c:15:3b:
56:2a:af:44:01:9f:e1:5c:80:b6:a2:fc:7c:28:d9:
d1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8A:4D:B9:B6:0E:6F:70:22:AD:F2:0D:59:21:F0:27:B2:8A:AE:F9
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/1IpNubYOb3AirfINWSHwJ7KKrvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.158.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:f3:8c:75:05:a7:c6:58:f1:16:b2:e5:e6:e9:d0:04:56:b1:
b8:25:5e:84:dc:29:c4:bb:14:54:b3:00:25:a2:33:ff:fa:41:
e4:91:f8:50:ba:eb:69:71:e1:e8:fe:6a:23:b1:e3:25:c9:59:
d1:cc:48:41:a9:3e:9f:38:36:ed:2f:fa:2a:56:7d:fb:7a:2a:
1c:21:5a:45:58:b6:ef:83:36:b6:43:55:2d:18:24:0a:f4:37:
d4:2b:c6:38:35:94:4a:e2:f4:a5:2d:8a:9d:54:fd:4e:a4:e0:
96:c2:66:f5:34:30:cc:87:9d:9a:0b:4b:82:9f:86:32:20:47:
03:ae:d7:f2:ba:ab:c8:c9:55:a2:43:1c:4f:ec:bc:76:b9:40:
60:72:29:7d:05:99:16:9e:0b:a8:d4:06:03:97:54:93:13:74:
8f:91:67:c5:6e:26:d6:2b:ce:b6:79:70:9a:15:93:aa:e9:49:
39:9b:ea:d1:13:e7:7d:22:d4:07:55:af:36:cf:93:5a:65:47:
05:5d:77:77:6d:24:1a:fa:f9:a7:98:7b:15:b8:05:c1:da:9b:
1c:e0:1e:29:ca:4c:62:4a:9f:32:bc:21:c3:93:b1:b5:f4:4e:
7e:53:2a:e6:52:8a:98:fe:d8:b9:d4:95:37:2b:bc:36:89:4d:
f4:a7:b4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:59 2023 by rpki-client on console-ams.rpki-client.org