Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/rQAe_n0e7rTGqn6BC8yiBF1f9Rk.roa
File: rQAe_n0e7rTGqn6BC8yiBF1f9Rk.roa (raw, json)
Hash identifier: x117LhNjRheuXAPeu4VrM34foDIU5bIbFZ6GrfMNCYI=
Subject key identifier: AD:00:1E:FE:7D:1E:EE:B4:C6:AA:7E:81:0B:CC:A2:04:5D:5F:F5:19
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 0182A16F3148103E29C42F82436B2C3388C4
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/rQAe_n0e7rTGqn6BC8yiBF1f9Rk.roa
Signing time: Mon 15 Aug 2022 12:16:35 +0000
ROA not before: Mon 15 Aug 2022 12:16:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 45.10.16.0/24 maxlen: 24
45.10.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a1:6f:31:48:10:3e:29:c4:2f:82:43:6b:2c:33:88:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Aug 15 12:16:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad001efe7d1eeeb4c6aa7e810bcca2045d5ff519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2d:11:b5:20:52:b6:3d:cb:22:2d:43:87:e7:
e2:65:e9:1f:4a:b2:45:6f:d5:77:d8:05:ef:72:8b:
1c:0f:12:eb:41:72:03:d2:a0:67:95:cc:e7:40:15:
ab:34:e2:ea:93:c8:4c:ac:42:88:8b:37:79:d0:8d:
4d:1f:a0:19:5f:a2:21:b6:b2:65:38:08:dd:69:fb:
4c:a4:0f:67:d2:c4:18:81:e9:a2:c7:35:c3:2c:58:
0a:49:51:15:e6:9f:e2:fe:26:49:38:97:df:51:1f:
b6:07:64:32:db:4f:12:7b:c2:fc:38:18:1a:07:36:
88:f8:69:65:0a:86:97:0e:bc:cd:93:58:b7:b9:d5:
c0:6d:70:e9:53:56:cf:32:45:7e:9f:9c:c0:51:bd:
e4:45:43:67:8d:17:8e:49:8f:01:eb:23:ae:53:b2:
35:6a:b3:8e:b3:ad:13:21:96:7f:8c:04:58:3a:3e:
c9:80:04:37:8a:b9:df:a6:fa:f5:1e:cd:07:92:aa:
d7:34:de:13:c2:18:0d:5c:29:9c:7c:ca:b4:d4:4d:
0a:97:43:72:ef:c4:55:e6:a2:f4:54:ec:4e:1b:6e:
c5:2d:8b:6d:38:21:23:e6:50:6a:f0:d2:bb:63:60:
ae:31:18:f1:a2:8e:d7:96:52:5c:ac:c7:f5:2e:c8:
a7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:00:1E:FE:7D:1E:EE:B4:C6:AA:7E:81:0B:CC:A2:04:5D:5F:F5:19
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/rQAe_n0e7rTGqn6BC8yiBF1f9Rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.16.0/24
45.10.19.0/24
Signature Algorithm: sha256WithRSAEncryption
46:e3:3b:f8:e4:e5:70:d9:a4:bc:8e:ea:fc:a9:8d:d0:61:b7:
ec:16:d1:58:27:94:16:25:62:bf:66:4d:be:33:b7:e4:1c:3f:
b9:e9:e4:07:f5:5b:34:25:8b:94:75:49:8d:dd:5b:e4:66:42:
c3:54:03:f5:8b:ac:da:ab:c0:ca:f3:d3:16:63:cc:00:29:d8:
60:ef:d0:74:72:e3:e5:2d:ec:f9:06:d1:c5:36:bf:8e:bc:38:
ea:05:6e:29:95:29:43:1f:d0:7c:10:22:a1:2e:cd:3e:33:59:
47:d2:77:c4:52:23:3e:0a:17:8f:05:43:9e:9d:cc:d1:d2:5a:
f1:95:be:99:16:a7:7a:39:50:3c:c0:09:df:e9:32:ba:c3:67:
b1:bf:be:a1:d9:50:b3:b1:2b:d6:de:b6:9b:f6:4b:ca:aa:d0:
aa:e7:21:68:e8:bc:bb:18:a2:f1:12:a1:57:79:06:c3:3f:fc:
8b:6f:cd:0e:de:ba:09:a0:7e:af:8a:03:a2:14:b2:00:e0:a8:
43:92:4b:5d:5a:8b:70:c8:72:41:dd:16:a1:18:11:ab:38:2a:
a7:04:dc:c7:81:95:19:30:ff:50:14:4e:a1:6e:d1:04:20:9d:
94:62:83:58:9e:53:b1:68:95:be:8c:ad:3f:3d:a8:3b:97:02:
f8:91:3f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:26 2024 by rpki-client on console-ams.rpki-client.org