Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/A8V6FaaGH0_eBRtMEcGfoytGBIQ.roa
File: A8V6FaaGH0_eBRtMEcGfoytGBIQ.roa (raw, json)
Hash identifier: QGbVxyaX82VQnh+eWk30aNsJh8JDPMcIWIgowvuwKKs=
Subject key identifier: 03:C5:7A:15:A6:86:1F:4F:DE:05:1B:4C:11:C1:9F:A3:2B:46:04:84
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 067E6128
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/A8V6FaaGH0_eBRtMEcGfoytGBIQ.roa
Signing time: Sat 01 Jan 2022 07:00:54 +0000
ROA not before: Sat 01 Jan 2022 07:00:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211585
IP address blocks: 45.65.112.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108945704 (0x67e6128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jan 1 07:00:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03c57a15a6861f4fde051b4c11c19fa32b460484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1a:2a:4f:71:23:17:3a:94:af:2b:6b:51:42:
93:1b:10:f5:e0:3e:91:73:63:b3:40:b4:c5:68:c7:
da:b5:4a:ec:c4:f2:3d:4d:69:d1:d1:39:de:a6:3d:
6f:96:2c:ae:59:68:40:1e:22:c8:15:a4:f7:22:a2:
54:cb:52:34:20:33:0a:62:98:78:b3:36:a6:98:69:
01:98:6b:3c:53:89:67:fe:25:d9:fd:43:b9:54:21:
4e:fa:91:dc:42:1f:f6:f7:18:07:1f:55:73:c1:9b:
af:85:51:02:89:78:5c:f1:69:ad:b1:49:0f:a4:11:
68:80:c4:e1:58:7f:46:24:66:e5:97:94:fb:7f:7c:
2a:d3:fe:1a:7a:92:b4:29:49:c2:85:64:c7:14:15:
2d:53:41:e6:8e:e4:18:5a:1f:e7:86:23:7d:e6:18:
04:3a:4e:d2:d6:26:5b:36:c4:33:79:0b:87:dc:2c:
95:d4:eb:6f:ab:32:0c:70:47:4d:ea:4f:1b:c5:e2:
f7:3b:fc:49:0e:5e:c0:e4:e1:58:a6:0f:88:e7:25:
53:26:db:51:4b:2c:69:ef:59:b6:be:78:67:d9:61:
ee:20:4b:59:06:02:80:5e:b4:9e:dc:29:64:0b:a0:
06:7d:a2:c1:0f:01:3f:e5:9d:52:d9:15:73:6a:25:
d7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C5:7A:15:A6:86:1F:4F:DE:05:1B:4C:11:C1:9F:A3:2B:46:04:84
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/A8V6FaaGH0_eBRtMEcGfoytGBIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.112.0/22
Signature Algorithm: sha256WithRSAEncryption
09:d7:f5:4f:aa:ad:46:f9:04:5e:88:70:1a:75:52:4a:7d:2b:
83:85:e8:1a:68:ec:44:2c:1c:6f:bf:c6:de:78:19:2d:4e:1a:
ad:f7:07:91:de:80:d9:78:b0:a8:7e:15:00:ea:36:00:a9:5c:
12:59:41:18:61:51:df:ef:ab:c6:38:e2:5a:ec:56:fe:dd:91:
ec:da:d7:51:6f:5a:9f:a0:2b:03:52:68:ed:d6:d2:54:d9:26:
df:62:23:cb:d4:5f:89:19:94:bb:23:1b:48:c2:56:5c:c3:c0:
bb:e0:fb:35:b9:63:58:c3:b4:fc:e3:54:1d:86:7c:90:8e:31:
98:5c:87:fb:c5:86:fb:20:81:7a:b1:73:68:c2:2d:e6:f6:d2:
bc:e0:49:7a:f4:a0:1c:66:e3:a7:1f:c4:dc:74:9c:45:99:55:
09:57:d1:a6:80:1e:92:51:06:b6:76:33:15:66:1e:f0:e5:31:
04:b0:a4:85:d6:16:ce:9c:e0:55:9e:89:97:4b:6b:f8:a9:43:
7e:4a:c3:40:5d:13:6f:e8:a0:c5:b3:c1:5f:2d:8e:ba:8b:df:
6a:3c:19:24:1c:c0:de:18:8a:46:33:d2:86:6e:60:1f:ba:77:
41:ef:8b:b7:c4:4b:b5:d9:eb:16:04:45:d2:94:4e:e0:22:1c:
9d:f0:b0:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:54 2024 by rpki-client on console-ams.rpki-client.org