Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/dhEXtNGYTLDqTiGjELMBjtGiUAc.roa
File: dhEXtNGYTLDqTiGjELMBjtGiUAc.roa (raw, json)
Hash identifier: Fl548bKrrx1IVWI5M3Bysrlon1qgUVV+8rtAC8lSTpI=
Subject key identifier: 76:11:17:B4:D1:98:4C:B0:EA:4E:21:A3:10:B3:01:8E:D1:A2:50:07
Certificate issuer: /CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Certificate serial: 059FB088
Authority key identifier: 42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/dhEXtNGYTLDqTiGjELMBjtGiUAc.roa
Signing time: Sat 01 Jan 2022 15:03:23 +0000
ROA not before: Sat 01 Jan 2022 15:03:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 45.86.112.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94351496 (0x59fb088)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=421f108882a9e2d72782db6527da4d9adeeb19cc
Validity
Not Before: Jan 1 15:03:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=761117b4d1984cb0ea4e21a310b3018ed1a25007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:df:2a:3f:ce:8d:94:b4:c6:0a:ed:cd:05:56:
b6:01:5a:8d:c9:63:e5:7a:4e:3f:68:77:41:69:cd:
6e:b5:19:e3:54:f6:ff:1d:98:9b:d2:ca:a9:d6:aa:
03:ff:00:9d:9c:2f:e1:89:2b:32:94:9f:83:38:19:
29:c3:c1:27:05:6e:cb:a2:94:73:fe:40:eb:e2:69:
8d:59:a3:df:77:41:5f:9b:49:d6:f0:9e:41:86:4f:
da:b2:77:84:4f:d4:7f:76:a8:fa:b8:6a:ca:d0:26:
57:ea:01:96:7a:4f:18:fb:b5:a4:8a:37:b5:c9:fa:
b9:f0:d3:4c:85:e0:80:7f:9a:3b:f4:83:f7:6a:ce:
fc:90:ef:a8:b8:da:ea:a2:90:24:78:ac:ab:e2:f3:
16:d8:35:53:86:fc:21:4d:4e:a9:6a:24:90:25:ec:
9d:0c:83:22:87:db:87:7a:58:5e:85:ed:0a:ba:a2:
11:85:84:96:7f:63:d4:9d:0b:db:e6:3f:4a:2d:71:
37:37:e7:a4:ad:75:e1:ba:d6:54:ad:3c:28:48:02:
fb:7a:9d:df:71:01:7d:67:1a:bc:79:2c:41:d1:5b:
fd:62:04:66:74:fb:2a:ca:5e:5c:1a:93:5e:21:7e:
72:0d:46:c2:e2:5e:ea:ea:47:39:9a:0b:d4:4b:54:
3b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:11:17:B4:D1:98:4C:B0:EA:4E:21:A3:10:B3:01:8E:D1:A2:50:07
X509v3 Authority Key Identifier:
keyid:42:1F:10:88:82:A9:E2:D7:27:82:DB:65:27:DA:4D:9A:DE:EB:19:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qh8QiIKp4tcngttlJ9pNmt7rGcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/dhEXtNGYTLDqTiGjELMBjtGiUAc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/21922a-dd79-4f56-83be-0a069dec100a/1/Qh8QiIKp4tcngttlJ9pNmt7rGcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.112.0/24
Signature Algorithm: sha256WithRSAEncryption
48:45:ee:b0:7b:e9:cc:f6:ed:17:22:d5:e4:05:f8:4f:68:5f:
73:f1:87:3f:c5:9b:2e:11:1e:3d:88:42:2e:46:62:43:e3:a9:
07:e8:f9:36:04:4d:d6:bd:a1:df:cb:c8:44:7c:1a:48:85:7d:
e2:72:2b:31:f2:cf:c0:5d:6c:84:0f:f6:cb:5f:75:43:15:1b:
af:dc:d9:b5:7b:be:00:a4:17:94:38:06:5e:70:3a:8a:ac:48:
b7:12:d1:a0:87:ad:a7:c3:e9:a3:4b:98:89:7c:e5:47:3e:f9:
9a:ab:cd:c5:07:f5:c7:cf:2a:8e:2c:ab:d9:bb:9f:8c:7e:f7:
70:bb:b8:e5:7c:60:52:54:9d:b8:7f:90:92:69:10:1a:8a:0c:
54:a2:62:19:65:b4:37:47:7e:77:0a:c4:ab:2e:7c:52:c4:aa:
ae:9c:de:b5:db:3d:8f:0d:a6:76:d1:77:09:41:2b:f8:2e:17:
b2:91:2b:88:e1:33:78:4d:f4:1f:0c:9b:05:35:16:51:88:00:
ee:a4:b5:1c:a4:4f:6c:b7:b8:de:fd:f1:92:63:18:a3:81:1b:
ab:fb:e1:a8:53:9f:85:17:6b:00:f1:84:b3:ff:32:ee:1d:d1:
b5:f0:d5:ea:fe:71:3b:7a:30:3f:51:fd:c4:d9:65:45:eb:60:
a3:2f:32:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:49 2025 by rpki-client