Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/cZ2G7y27jtvwmqpbbaA3srWThpQ.roa
File: cZ2G7y27jtvwmqpbbaA3srWThpQ.roa (raw, json)
Hash identifier: UOsWwzeSrH9JkPKFzJtE8qCWtqh45rnwZfpZN5ITuJY=
Subject key identifier: 71:9D:86:EF:2D:BB:8E:DB:F0:9A:AA:5B:6D:A0:37:B2:B5:93:86:94
Certificate issuer: /CN=da980a45fe487366e386b6064c2c652519f9fc93
Certificate serial: 078944DF
Authority key identifier: DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/cZ2G7y27jtvwmqpbbaA3srWThpQ.roa
Signing time: Sat 01 Jan 2022 15:04:46 +0000
ROA not before: Sat 01 Jan 2022 15:04:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209894
IP address blocks: 45.154.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126436575 (0x78944df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da980a45fe487366e386b6064c2c652519f9fc93
Validity
Not Before: Jan 1 15:04:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=719d86ef2dbb8edbf09aaa5b6da037b2b5938694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:61:c1:9d:56:b8:66:05:1e:3f:ac:06:a2:45:
27:a2:d2:7b:00:a6:4d:53:22:53:1d:a0:9b:6a:58:
f9:1b:c9:22:f6:ae:65:2c:7c:70:a8:2d:9f:0f:bf:
ce:f3:ef:dc:d1:1f:3e:81:30:6f:94:1c:50:4d:c6:
7f:ce:24:eb:ca:53:81:44:29:68:8c:82:7d:90:65:
99:ed:ef:da:bf:c0:14:54:88:0c:b0:27:ec:37:50:
00:81:d4:d4:79:95:05:f3:bf:96:dc:9c:a1:da:f4:
56:5d:e0:c6:3e:99:02:22:6c:5b:f4:eb:7e:c7:03:
b0:ec:e6:f6:b7:37:7f:7c:9f:48:30:5d:a0:d5:ea:
26:24:57:42:dc:f3:68:50:71:c5:a7:4a:90:28:cf:
1c:17:b0:90:8a:4d:09:ea:7f:ff:46:a0:57:39:f4:
6f:95:3c:f8:9e:59:35:d4:c0:10:49:0f:14:27:e3:
66:f4:a1:30:85:dc:c2:9a:53:8b:24:36:9b:51:53:
80:50:03:13:62:54:a3:51:70:4d:01:f0:bb:d4:8b:
1c:26:df:1f:9a:93:6e:64:9c:53:1a:09:b5:ff:b6:
d0:d1:65:35:ea:b1:e4:93:8a:87:a6:60:1d:5b:13:
69:79:d6:d2:84:72:33:f6:36:03:22:aa:75:8f:ab:
33:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:9D:86:EF:2D:BB:8E:DB:F0:9A:AA:5B:6D:A0:37:B2:B5:93:86:94
X509v3 Authority Key Identifier:
keyid:DA:98:0A:45:FE:48:73:66:E3:86:B6:06:4C:2C:65:25:19:F9:FC:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/cZ2G7y27jtvwmqpbbaA3srWThpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/410e39-b8a6-46ca-acdc-3f12aff274da/1/2pgKRf5Ic2bjhrYGTCxlJRn5_JM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.111.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:ca:9a:de:71:20:8b:af:7d:9a:ab:91:63:c7:0d:22:2c:b3:
5a:3c:83:cc:2d:c7:55:f5:a5:b5:c0:8e:9f:42:9e:c3:9c:20:
5c:eb:34:fb:ef:c6:6a:a0:b3:ee:a3:e8:51:59:b1:1d:2f:02:
d3:96:26:2a:6f:d1:e7:7e:82:3c:42:84:b9:14:2d:e2:80:04:
f9:ac:7d:25:ac:e9:68:7e:42:37:ea:fe:0c:00:57:dc:dd:48:
d8:5c:43:3f:52:72:4e:61:f1:3b:71:2e:c7:fd:b4:20:0b:29:
18:ad:1d:25:8b:20:4a:68:df:7b:c2:3f:35:c8:94:c1:20:9a:
89:93:b5:53:83:b0:5a:ea:2d:fd:b5:ab:40:4e:1f:18:69:73:
23:44:42:66:4b:90:bf:ef:05:f0:ad:b2:eb:07:7f:0f:4e:bc:
7e:24:a2:2e:dc:55:ae:a5:84:70:63:c5:47:0b:cc:e9:a1:f7:
4e:34:37:e9:c1:35:a2:36:5b:75:da:4e:4c:28:0e:d2:51:81:
1c:81:26:c9:39:cd:de:e4:10:de:af:fa:88:57:19:f8:48:d0:
72:a1:dc:27:9d:79:c4:ff:e5:5e:62:bf:1f:5f:ae:0e:4c:2b:
b0:5a:a7:2a:ad:28:bf:3f:74:48:1e:71:36:f1:1f:34:9a:93:
b6:34:16:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:37 2024 by rpki-client on console-fra.rpki-client.org