Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/ce9_6Hni0ztE2u16nQzGcvm27Zw.roa
File: ce9_6Hni0ztE2u16nQzGcvm27Zw.roa (raw, json)
Hash identifier: TwE1IZcjwZ2qTlKEtcjdH5pvGQj/hpcQy8hejDWCFbQ=
Subject key identifier: 71:EF:7F:E8:79:E2:D3:3B:44:DA:ED:7A:9D:0C:C6:72:F9:B6:ED:9C
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 0182EA13DAC12578C52B7AAF5DC693D0FF42
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/ce9_6Hni0ztE2u16nQzGcvm27Zw.roa
Signing time: Mon 29 Aug 2022 14:49:05 +0000
ROA not before: Mon 29 Aug 2022 14:49:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211696
IP address blocks: 45.11.191.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ea:13:da:c1:25:78:c5:2b:7a:af:5d:c6:93:d0:ff:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Aug 29 14:49:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71ef7fe879e2d33b44daed7a9d0cc672f9b6ed9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:34:45:07:c3:96:09:0c:a2:02:d4:aa:86:3d:
9e:2d:35:7d:cb:b6:95:a6:b3:74:6d:32:1f:a1:b7:
b1:21:60:57:80:65:9c:20:43:8b:af:6a:31:37:4d:
e6:9e:8c:d5:27:58:21:6c:e3:37:77:57:fb:51:cb:
21:e6:e4:7e:65:d4:ef:7d:8f:b7:f3:a2:c1:e2:1f:
fe:f4:e0:8e:3a:c3:3a:01:77:77:c0:e0:1c:e8:14:
41:93:0d:34:29:37:a4:88:8b:f1:0e:da:db:52:b3:
ef:d7:e7:0e:ee:9a:42:83:59:45:db:e1:c2:33:1e:
8e:49:1e:41:07:34:9d:66:e7:05:c8:cf:33:a6:88:
de:06:39:47:06:5d:31:32:ca:cd:f3:65:be:0e:a3:
4a:32:cd:0a:33:93:49:ae:89:27:a6:5f:b7:46:c4:
e4:ca:3a:c9:45:21:cd:6d:2a:56:39:b2:d0:d5:f1:
83:c8:26:90:a5:9b:01:d8:ed:87:d4:9e:32:2f:d2:
cc:31:47:e1:d0:bc:a6:8d:67:e2:1b:d2:ba:04:78:
f0:38:f0:90:bb:2c:4c:28:d4:13:94:56:e1:66:2d:
00:85:97:e2:2e:6e:f9:b1:df:46:df:1c:39:0f:bb:
a8:91:03:f1:f6:c5:b7:5b:da:e3:fe:41:22:ee:f6:
58:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EF:7F:E8:79:E2:D3:3B:44:DA:ED:7A:9D:0C:C6:72:F9:B6:ED:9C
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/ce9_6Hni0ztE2u16nQzGcvm27Zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.191.0/24
Signature Algorithm: sha256WithRSAEncryption
94:23:d7:ce:43:e5:6a:a4:e9:22:a1:f4:8d:a8:4c:4b:19:19:
60:f8:96:3f:b6:7c:6d:0c:12:17:9f:33:fa:62:4a:3e:0a:79:
4b:e9:27:46:01:2c:8b:8a:80:44:49:4d:b3:c0:11:a4:77:ec:
9a:94:83:6c:aa:c9:ec:e3:8f:23:08:e2:05:d2:0c:12:d3:ac:
63:97:da:90:3f:c8:6a:cd:66:66:69:65:91:e6:13:12:7c:cf:
66:b9:56:77:f1:82:02:32:27:3a:14:d8:d7:78:4a:02:19:eb:
e6:61:e3:08:f9:26:1f:dc:2f:9c:50:1f:b3:5c:00:d9:2c:61:
60:df:3c:57:89:d2:e5:02:96:12:db:70:22:19:27:25:63:fd:
9f:5e:87:a5:74:ed:15:ab:96:51:fd:5f:e2:96:19:a6:6e:a4:
84:b2:79:dd:3b:d8:47:d9:a0:2c:99:3d:36:d6:7b:5f:3d:b8:
e2:05:59:38:fc:d8:2a:fe:43:7b:32:16:0a:96:37:e2:86:7b:
52:f9:b0:34:3e:f0:40:2c:5c:fc:7e:c9:71:78:a5:4c:b4:87:
9e:f9:cf:b4:2b:e7:df:3a:76:9e:5c:08:70:37:ee:fb:eb:5d:
f9:5c:7e:d5:b1:85:48:6e:60:e5:ec:b0:3a:4f:20:b1:5c:5e:
57:ee:16:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:14 2023 by rpki-client on console-fra.rpki-client.org