Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/BB07e3GbAw6JU7envTq7gnEyPas.roa
File: BB07e3GbAw6JU7envTq7gnEyPas.roa (raw, json)
Hash identifier: /OqF+D3d/PX0XFsa51dkEYFRvBzPshCqKaeGGnG82kU=
Subject key identifier: 04:1D:3B:7B:71:9B:03:0E:89:53:B7:A7:BD:3A:BB:82:71:32:3D:AB
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 06E5CCF0
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/BB07e3GbAw6JU7envTq7gnEyPas.roa
Signing time: Wed 16 Feb 2022 21:41:29 +0000
ROA not before: Wed 16 Feb 2022 21:41:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 45.154.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115723504 (0x6e5ccf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Feb 16 21:41:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=041d3b7b719b030e8953b7a7bd3abb8271323dab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:89:4f:90:21:2f:67:1c:0c:cc:16:aa:5c:e8:
6b:08:c0:7e:6c:8a:bc:ec:8c:dc:35:0a:70:9c:ff:
d5:fb:a7:fa:36:f3:87:d1:db:46:f8:06:a1:53:b8:
8d:15:f9:63:19:48:d0:e9:42:81:22:56:8b:41:fd:
70:9c:f2:9e:84:cf:76:56:64:53:96:c5:1e:78:34:
f1:37:b8:ed:76:ca:92:ab:da:8f:0f:19:71:93:ea:
35:79:ac:b2:be:bd:0f:f0:55:bc:ae:e0:fc:da:a5:
10:ad:01:2b:68:5c:59:c7:7b:e0:96:d8:f6:c4:35:
1a:68:61:8a:27:7e:f1:a9:46:3c:f9:fd:14:96:24:
d9:33:0c:0b:6f:67:32:a0:3d:75:ab:50:4d:75:22:
2f:6d:59:32:cf:4d:26:57:a7:c3:9a:1d:db:4a:1d:
26:36:af:12:7d:34:42:e3:7c:f0:a5:14:f1:4f:7a:
ea:95:9b:aa:1b:f8:cb:45:9c:45:e6:cf:33:61:68:
2e:ec:5f:4b:4b:dd:d5:5c:46:14:d8:a1:dd:f9:15:
09:e0:a5:c7:fd:eb:c9:de:8d:80:c4:ef:b2:c8:83:
df:ae:f3:e4:a6:7c:33:28:af:0b:80:f0:4c:fa:3e:
95:55:ee:71:bf:29:ba:a7:e5:e7:9a:84:cd:92:95:
9c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1D:3B:7B:71:9B:03:0E:89:53:B7:A7:BD:3A:BB:82:71:32:3D:AB
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/BB07e3GbAw6JU7envTq7gnEyPas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.159.0/24
Signature Algorithm: sha256WithRSAEncryption
23:19:b9:6e:f2:26:d9:d4:02:4f:bb:aa:cf:35:04:07:aa:07:
c7:a3:96:29:74:06:e5:e7:5f:76:26:7e:7e:de:46:ba:85:84:
b8:bb:dd:06:e8:47:bd:cc:8e:d6:b0:8d:43:32:12:4d:cc:09:
32:7b:e9:b6:13:a5:76:3f:94:16:8b:0d:99:15:58:4d:6c:54:
6a:5b:22:32:6f:19:2f:73:29:e1:bc:c7:9c:d8:a7:23:63:77:
b0:ed:a2:7b:d6:db:49:70:9e:6e:88:f7:fc:95:0d:bf:ea:8b:
2b:ad:af:2c:3d:14:a4:12:22:b8:a3:13:4a:7e:65:09:68:85:
98:27:99:ab:2c:45:09:bc:a9:d7:1a:bc:ea:06:5c:8f:bd:76:
a5:65:51:68:62:c9:77:fd:60:a4:d3:67:83:28:67:84:81:19:
48:e4:23:51:e6:0e:47:40:5f:49:78:da:22:c5:43:14:58:0c:
b2:fb:9a:9f:f2:24:13:b6:0e:32:dc:8a:ae:52:ea:af:5a:00:
f4:c8:6f:38:38:f7:91:aa:50:9c:fe:71:7a:12:fd:53:60:46:
c1:8c:f4:6d:4c:f8:fe:24:bc:7a:36:c3:37:1b:dd:b0:da:dc:
42:bd:6b:26:ea:12:7f:f0:eb:72:bb:cb:65:31:17:86:5c:06:
e1:7c:5f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:59 2023 by rpki-client on console-ams.rpki-client.org