Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/9Vv_Z1IrF7iOoDLoqHCAxH_WMvE.roa
File: 9Vv_Z1IrF7iOoDLoqHCAxH_WMvE.roa (raw, json)
Hash identifier: 43aB9hoZjad6ved0vnuTlyWcZXcvh50pTdfgNJQ3mv4=
Subject key identifier: F5:5B:FF:67:52:2B:17:B8:8E:A0:32:E8:A8:70:80:C4:7F:D6:32:F1
Certificate issuer: /CN=72e4baf99ab840129133285fe9ad7b83fd130c39
Certificate serial: 061AB0CF
Authority key identifier: 72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/9Vv_Z1IrF7iOoDLoqHCAxH_WMvE.roa
Signing time: Sat 01 Jan 2022 02:55:52 +0000
ROA not before: Sat 01 Jan 2022 02:55:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 45.11.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 102412495 (0x61ab0cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e4baf99ab840129133285fe9ad7b83fd130c39
Validity
Not Before: Jan 1 02:55:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f55bff67522b17b88ea032e8a87080c47fd632f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f0:7c:fb:b5:52:96:5a:5d:2f:ab:7d:09:81:
91:66:b1:d9:4d:41:6d:ba:89:1c:ea:f0:c2:70:74:
57:fd:ff:3d:40:45:0d:35:2b:7f:d1:bd:1c:28:8d:
bc:a8:da:ca:77:42:99:a3:cd:6d:ed:50:ee:59:1d:
0a:fd:f2:fd:51:de:91:12:6c:b4:1f:cd:c1:43:2d:
99:3e:8d:7f:ef:f6:ad:db:af:95:8d:ea:a1:53:21:
88:f0:e5:90:f2:da:49:3b:7c:5b:07:ef:ae:df:5f:
b3:dd:9e:f4:b8:19:88:8f:ce:49:60:2e:54:7e:7a:
79:f2:dd:06:ab:b8:5c:af:82:5d:9b:a2:f4:72:87:
8b:ca:5f:f1:9f:a6:42:8c:27:73:af:6f:54:f2:37:
71:f7:25:70:8a:bd:62:65:75:a5:97:67:93:1f:9b:
d5:17:f6:1e:c1:c5:0c:4f:99:08:5f:4a:7b:42:73:
ec:6c:63:71:1f:e0:20:2b:0c:c8:e8:11:1c:0e:b7:
d6:32:b4:7d:36:2e:8c:7c:8f:24:c5:ba:32:bc:00:
3e:fc:31:6e:cd:69:f7:5d:2b:a8:50:ac:d3:00:0a:
d5:a0:e7:15:4c:b0:3e:62:72:7d:bd:55:32:46:24:
35:13:78:51:f2:ee:8d:f6:70:d2:57:f0:c4:05:ee:
4e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:5B:FF:67:52:2B:17:B8:8E:A0:32:E8:A8:70:80:C4:7F:D6:32:F1
X509v3 Authority Key Identifier:
keyid:72:E4:BA:F9:9A:B8:40:12:91:33:28:5F:E9:AD:7B:83:FD:13:0C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuS6-Zq4QBKRMyhf6a17g_0TDDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/9Vv_Z1IrF7iOoDLoqHCAxH_WMvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/66b74c-81c1-410e-957d-a8d65dccb96b/1/cuS6-Zq4QBKRMyhf6a17g_0TDDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.181.0/24
Signature Algorithm: sha256WithRSAEncryption
52:86:c2:0d:de:e1:92:6c:50:bb:82:df:d0:84:ee:a7:d4:d4:
7b:32:c5:a3:f7:88:78:78:11:2f:84:ad:ef:71:d9:f4:cf:af:
10:69:66:fd:bb:39:59:bb:a3:8e:38:da:07:72:8e:a4:52:9c:
0b:6b:3f:a8:a9:8e:4b:77:47:64:21:e2:24:f4:44:50:6f:8d:
8c:e4:74:59:2e:89:a4:43:9b:58:6c:24:25:2a:a4:a7:6e:2f:
46:cc:7c:9a:22:f9:ae:0d:10:36:42:a4:65:9e:4d:1d:59:d3:
2a:0c:06:f9:53:0f:1f:b2:be:11:a1:18:05:2a:3e:b4:c8:47:
60:3d:dc:b8:48:ef:8a:7e:cf:f4:a0:75:9f:93:2b:df:fb:e6:
9f:ec:65:4d:f0:5b:9e:e9:0f:b6:53:84:6c:6b:5c:7d:fb:54:
86:67:af:c8:88:f5:23:b6:3f:2c:29:bd:bd:93:6b:3b:5b:de:
93:83:91:07:34:61:b7:52:62:ea:86:fc:db:57:36:01:56:8c:
cf:41:5a:5c:59:ae:fc:96:b9:f6:42:aa:33:7b:f0:50:af:99:
aa:00:94:70:3b:c4:8d:46:c9:f8:6c:f2:3e:6b:5a:d8:3a:4e:
2c:b1:7c:09:29:c2:64:43:da:62:8b:63:d0:9d:0e:bb:03:22:
c7:05:72:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:17 2023 by rpki-client on console-ams.rpki-client.org