Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/5h3N864OBkJc1QwlG9ZOYgEf-Sw.roa
File: 5h3N864OBkJc1QwlG9ZOYgEf-Sw.roa (raw, json)
Hash identifier: v2ePdAIHlFMNiFP3R+FetA5jwFufvreJzpXoua7RfeY=
Subject key identifier: E6:1D:CD:F3:AE:0E:06:42:5C:D5:0C:25:1B:D6:4E:62:01:1F:F9:2C
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01839E75D5C72286B58686984EE70D2BC10B
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/5h3N864OBkJc1QwlG9ZOYgEf-Sw.roa
Signing time: Mon 03 Oct 2022 15:27:45 +0000
ROA not before: Mon 03 Oct 2022 15:27:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60781
IP address blocks: 45.11.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9e:75:d5:c7:22:86:b5:86:86:98:4e:e7:0d:2b:c1:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Oct 3 15:27:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e61dcdf3ae0e06425cd50c251bd64e62011ff92c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4e:32:a6:ff:93:6c:37:27:ed:6b:aa:0c:a2:
61:37:0d:cc:95:d9:50:14:8d:7c:3c:d3:ff:dc:73:
36:d4:b7:d0:ca:cf:08:e8:da:dd:10:a6:ac:a8:19:
41:d7:b7:f7:b5:84:8c:bf:51:0f:05:54:01:91:27:
da:74:99:81:95:75:e3:c1:0c:2b:cd:cc:a4:11:45:
33:94:b4:a7:3d:00:07:b7:b5:21:03:2a:bc:4b:a9:
f0:b4:2f:12:ac:98:44:4a:ea:d0:53:8b:77:39:63:
71:1a:b7:4a:9f:5d:e8:75:25:0f:ea:f8:84:bb:a0:
e5:5b:50:89:4e:82:89:10:c6:30:e2:ed:ab:7e:b9:
63:c0:cd:15:e5:8e:db:86:c3:fc:8c:0d:0b:b0:5c:
89:f2:76:a0:97:94:5b:fb:a6:89:a4:dc:50:5f:39:
f5:af:5b:a5:30:82:9f:86:5c:31:f4:22:a2:87:71:
40:5c:7d:d3:f9:5b:e8:7b:27:dc:6c:a4:7c:0a:a1:
9d:bf:7c:de:81:7b:a9:b8:a4:aa:c5:0c:1e:25:b1:
8f:4c:3c:cf:8a:4b:f7:cb:03:92:8f:b6:64:5d:f1:
d0:52:3d:1f:2a:46:4d:dc:d9:0d:24:a4:bd:f1:81:
44:95:cc:1f:5b:e2:a6:76:2d:c3:bf:73:fe:42:52:
be:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1D:CD:F3:AE:0E:06:42:5C:D5:0C:25:1B:D6:4E:62:01:1F:F9:2C
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/5h3N864OBkJc1QwlG9ZOYgEf-Sw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.190.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:2b:ee:16:9e:7a:cc:81:c8:72:6e:84:be:6e:4c:68:af:aa:
df:67:88:56:67:52:78:9c:af:1f:08:3b:4b:db:63:c5:22:d3:
b2:cc:4d:43:8d:43:5c:3a:e1:89:49:4a:42:54:ad:45:38:94:
1f:4f:d8:72:1c:e4:4d:2b:c8:d0:1e:5c:58:20:c2:31:9b:66:
ad:da:e2:88:b1:77:ec:83:d2:04:bd:b9:c6:95:fe:d5:fe:3f:
bd:53:61:99:42:c5:67:09:e9:84:11:36:4c:aa:a4:70:74:1a:
ce:43:a5:4b:4e:8e:2d:92:55:8e:56:65:83:0c:fa:29:52:9a:
08:0f:de:10:73:7d:fa:45:04:94:8a:cb:21:f8:5e:62:18:47:
70:1f:2e:8e:ce:9a:8f:7b:57:a8:b3:89:ad:c0:ce:8f:be:82:
ed:43:8c:c9:7e:fc:06:95:a5:13:78:db:69:43:86:2f:72:28:
81:d7:4f:d9:1a:33:1e:51:cb:e6:05:6a:38:dd:8e:ec:54:42:
05:77:81:88:0e:01:ee:c1:ed:ff:8e:4b:84:b7:1c:9c:73:10:
fc:b7:cc:e4:53:bb:48:a1:d0:08:64:52:78:30:99:d5:9c:1e:
18:77:6e:14:85:7f:96:2b:9a:ec:d6:fa:1b:e0:cb:8e:18:58:
b5:91:f3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:13 2023 by rpki-client on console-fra.rpki-client.org