Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/8PaXcaQkNHNUoGzpJpyw7pLicUE.roa
File: 8PaXcaQkNHNUoGzpJpyw7pLicUE.roa (raw, json)
Hash identifier: J26BJfSPbNaSEx3jR4RsSoRCyNhooXss3ukbXErkGVA=
Subject key identifier: F0:F6:97:71:A4:24:34:73:54:A0:6C:E9:26:9C:B0:EE:92:E2:71:41
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 0182EA14C606BDE4739CCF9D971BFF4B768C
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/8PaXcaQkNHNUoGzpJpyw7pLicUE.roa
Signing time: Mon 29 Aug 2022 14:50:06 +0000
ROA not before: Mon 29 Aug 2022 14:50:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 45.154.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ea:14:c6:06:bd:e4:73:9c:cf:9d:97:1b:ff:4b:76:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Aug 29 14:50:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f0f69771a424347354a06ce9269cb0ee92e27141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:27:3a:e6:00:e7:40:43:ca:3f:ac:c0:6d:a2:
2b:11:72:8e:71:44:67:cd:66:e6:74:51:2e:6b:52:
d3:f2:e1:f6:37:6d:6f:9e:21:78:c3:8a:22:f4:78:
df:f5:15:6b:81:fb:e7:7b:f1:73:0e:44:41:5c:23:
99:49:f5:d5:0a:f5:01:c4:ea:a5:21:eb:5f:e5:c0:
39:b3:e8:79:e2:f7:37:50:07:de:38:ec:80:35:20:
1b:a8:22:a0:f8:66:00:23:54:1b:cd:51:11:e9:2e:
30:5e:db:b1:d6:0e:de:b6:87:eb:78:cf:e1:1d:45:
bc:7e:ff:29:43:42:7b:8b:db:dd:00:da:51:ac:20:
3e:63:ab:49:db:97:09:0d:f1:e0:1b:34:62:d0:bc:
c1:a2:f5:1d:c5:f2:63:6a:ac:c4:39:62:cc:e4:97:
b3:af:6d:c5:04:7b:44:9e:a6:7f:54:69:e8:eb:6e:
cf:5b:a1:50:46:93:d1:ee:ed:53:28:e6:3b:33:c6:
d9:b3:73:08:ba:ca:88:a7:64:da:27:7a:16:c2:ff:
8f:9c:57:6c:be:97:6c:33:b5:63:5e:02:ab:68:24:
15:bf:4a:e2:63:ae:48:77:54:26:59:f7:2a:4a:2b:
73:ad:fe:12:e8:2f:64:9b:1c:ed:75:75:f0:23:72:
c6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F6:97:71:A4:24:34:73:54:A0:6C:E9:26:9C:B0:EE:92:E2:71:41
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/8PaXcaQkNHNUoGzpJpyw7pLicUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.159.0/24
Signature Algorithm: sha256WithRSAEncryption
63:3b:9b:00:72:8c:84:72:2a:90:7e:24:ba:f2:e3:d7:c4:4b:
7a:d7:8e:a2:47:79:92:a8:d1:0b:72:91:0e:79:0b:2d:9f:0b:
0b:6b:15:74:13:78:c6:2f:82:d7:b2:8b:da:4c:6b:2e:82:ca:
23:51:8c:53:51:32:88:d2:62:be:56:00:69:7e:f3:a7:b9:10:
ea:c4:ec:1c:99:12:da:ed:06:4b:75:a3:8d:b2:d1:bb:09:be:
43:17:24:85:34:4a:59:60:2d:73:47:9c:28:ef:1f:b1:1f:45:
e9:fe:38:a1:94:b4:19:34:27:a5:f7:0e:e2:9a:e0:6f:4f:57:
9e:33:32:2e:a7:af:7c:24:41:d7:7f:f0:59:f5:d5:2d:11:b6:
d9:94:24:64:0b:4a:02:f2:7b:96:77:b8:27:f2:1f:01:a5:04:
b0:b0:49:b0:31:34:df:9b:73:6f:a3:c8:cf:7a:a0:b3:1f:38:
b1:73:d6:28:d3:83:53:76:2a:d4:19:27:91:46:f4:a1:a1:47:
06:12:49:a3:72:ac:52:d1:c7:ff:75:5c:66:84:f2:85:0a:42:
50:9c:8e:0a:bd:15:07:3f:55:fb:5f:59:fb:0e:e0:b5:c1:35:
f9:13:16:f3:5f:70:01:29:e1:bd:9b:5c:62:8f:94:22:d7:5c:
aa:73:4a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:54 2024 by rpki-client on console-ams.rpki-client.org