Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/8CCZxOdckXA-i7bNnKZAJUwVaVE.roa
File: 8CCZxOdckXA-i7bNnKZAJUwVaVE.roa (raw, json)
Hash identifier: hTWL0LX9TnKzrPSnWBK+90IGcxsUlPHYmB5XYmbbAcI=
Subject key identifier: F0:20:99:C4:E7:5C:91:70:3E:8B:B6:CD:9C:A6:40:25:4C:15:69:51
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 0183B47B48D711E10011DFC603E4D6682565
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/8CCZxOdckXA-i7bNnKZAJUwVaVE.roa
Signing time: Fri 07 Oct 2022 22:05:21 +0000
ROA not before: Fri 07 Oct 2022 22:05:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 45.65.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b4:7b:48:d7:11:e1:00:11:df:c6:03:e4:d6:68:25:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Oct 7 22:05:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f02099c4e75c91703e8bb6cd9ca640254c156951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:d0:67:88:8e:53:7c:e5:04:22:39:8e:bb:e5:
f4:75:78:46:e5:42:6b:d0:83:aa:66:59:e2:94:5d:
58:0a:f3:af:b3:ee:d4:0b:6f:29:be:1a:c9:80:09:
c9:db:01:b4:3a:8e:2c:13:60:06:6d:83:d3:cb:67:
96:92:dc:0a:dc:64:ea:79:16:43:11:c7:56:5c:95:
de:0a:72:b1:c6:4e:15:3c:16:41:f5:95:a4:af:53:
01:0b:67:2b:dd:c4:21:0c:33:4d:ef:29:74:87:fc:
4b:d6:f8:2a:d0:45:61:8c:34:72:a8:fb:b8:dd:11:
ed:65:69:30:a6:30:05:3b:a0:59:69:f9:bc:c3:90:
fa:d9:7c:bc:3b:9e:52:20:85:f4:3a:53:45:f4:0a:
4f:75:c8:65:f0:fc:e1:5f:69:0c:32:e2:92:8c:98:
f9:81:33:0c:9c:c6:1f:ec:a2:07:2d:7d:06:92:e0:
fd:16:95:1b:35:60:a0:29:81:ac:0d:04:a2:6e:ba:
a3:0a:ad:a1:db:fc:d1:4e:c9:19:b4:a8:b5:b5:d2:
10:c7:73:27:d9:67:8c:90:c5:50:83:cd:09:2c:17:
5f:e9:97:b4:80:21:3b:d8:37:f5:26:7c:0d:79:92:
e9:0b:86:31:d8:8a:e1:fc:6d:93:22:7f:81:ce:9a:
e0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:20:99:C4:E7:5C:91:70:3E:8B:B6:CD:9C:A6:40:25:4C:15:69:51
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/8CCZxOdckXA-i7bNnKZAJUwVaVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.112.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:d2:d4:26:a8:9c:e5:27:ed:06:ba:eb:7d:91:3a:dd:3b:53:
20:52:34:3e:78:4a:4f:6a:27:3f:b6:23:30:04:41:7a:ed:d2:
e6:50:b9:91:82:49:a3:4b:ff:61:71:ba:85:54:b0:9a:ce:d0:
27:86:f4:b9:22:f6:f8:b8:10:aa:bb:39:c9:e2:88:9a:26:68:
b8:6f:9f:b0:95:47:02:4e:a3:b7:08:2a:47:0e:2d:39:f1:1b:
29:38:81:e9:13:56:01:bb:9b:58:ab:4b:78:98:3a:6b:ba:a8:
5e:c0:6f:7a:53:ce:8d:f0:5d:c4:4d:26:06:bc:25:24:b0:a5:
33:e8:55:86:36:aa:5f:c5:ec:40:cf:35:57:3a:8d:15:2a:52:
9f:85:76:0f:0e:db:19:02:ac:fd:76:6d:fa:d4:ea:94:62:4e:
a8:78:fb:37:2e:60:d2:f5:ae:ba:4f:0d:71:db:79:b0:60:50:
49:e1:97:71:99:86:36:f7:2b:f4:f3:01:c8:ea:eb:28:60:f3:
75:91:06:fa:73:53:d1:71:c4:20:0d:99:eb:f6:06:7e:fd:84:
21:2c:e0:6e:9a:3c:9a:de:fa:77:45:0f:d8:cc:47:0c:3c:cb:
72:85:87:f7:d8:96:95:21:e3:c2:88:fb:9e:ed:e5:00:92:66:
c0:7a:1a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:54 2024 by rpki-client on console-ams.rpki-client.org