Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/4J6wP41hVr2ogtj8V0QOrl18jeQ.roa
File: 4J6wP41hVr2ogtj8V0QOrl18jeQ.roa (raw, json)
Hash identifier: yEP7AIrO7fdQe0xKKMSnJW/2dlem7OyQ4ql8lh9JAoY=
Subject key identifier: E0:9E:B0:3F:8D:61:56:BD:A8:82:D8:FC:57:44:0E:AE:5D:7C:8D:E4
Certificate issuer: /CN=5f7da568ad027b9e249c13e223d322769881a29f
Certificate serial: 0182EF340D7A4BB96F207744FAFD406879DF
Authority key identifier: 5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/4J6wP41hVr2ogtj8V0QOrl18jeQ.roa
Signing time: Tue 30 Aug 2022 14:42:21 +0000
ROA not before: Tue 30 Aug 2022 14:42:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34358
IP address blocks: 45.156.236.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ef:34:0d:7a:4b:b9:6f:20:77:44:fa:fd:40:68:79:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7da568ad027b9e249c13e223d322769881a29f
Validity
Not Before: Aug 30 14:42:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e09eb03f8d6156bda882d8fc57440eae5d7c8de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d1:d7:4f:02:5f:c9:a8:f3:c1:50:7f:3f:3a:
38:84:9c:d2:c1:00:80:46:9c:57:97:6f:8c:1c:8c:
02:6d:3c:8b:e0:70:d7:b7:0e:f3:65:e5:c6:a5:41:
54:66:cc:0f:99:30:45:e3:2e:53:af:68:c2:01:fe:
97:b4:9e:33:d6:1b:5d:31:0d:53:08:d1:3c:72:10:
a9:9d:30:3a:9f:82:11:23:e4:88:9e:77:eb:31:ba:
5e:82:32:bb:5f:79:16:e3:1d:5b:de:bc:45:67:9a:
7e:3b:88:2b:d6:b9:05:38:8f:49:e9:27:73:f9:49:
8d:15:ca:d0:3b:2f:57:e5:4a:18:17:46:6a:95:a0:
b2:43:05:ac:9f:26:20:3d:09:a9:b3:ca:b7:dc:97:
54:49:01:ff:70:ad:52:64:d2:93:53:b7:c2:ce:d5:
5b:c6:f7:01:59:46:ad:22:f2:98:df:58:2a:0b:56:
2b:fb:2b:17:cb:aa:f5:ce:de:22:a1:21:c2:4b:3b:
2d:68:0e:33:1b:31:e7:8c:aa:34:e3:af:94:a4:17:
a9:3e:95:f8:01:f4:44:1c:ee:73:6f:f7:ff:42:ac:
96:d6:49:ed:75:3c:e9:31:d7:07:75:40:19:d2:ad:
bc:45:7e:5b:03:e5:e2:70:32:11:75:e4:7e:02:95:
03:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9E:B0:3F:8D:61:56:BD:A8:82:D8:FC:57:44:0E:AE:5D:7C:8D:E4
X509v3 Authority Key Identifier:
keyid:5F:7D:A5:68:AD:02:7B:9E:24:9C:13:E2:23:D3:22:76:98:81:A2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X32laK0Ce54knBPiI9MidpiBop8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/4J6wP41hVr2ogtj8V0QOrl18jeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/05488f-f4e0-4e6c-94f5-3757539c2ac9/1/X32laK0Ce54knBPiI9MidpiBop8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.236.0/22
Signature Algorithm: sha256WithRSAEncryption
78:62:44:36:9f:c2:a1:4f:68:81:09:a7:d8:09:05:05:05:b8:
f1:c2:a5:2d:0b:c6:9c:26:e1:f0:ab:52:44:f3:fd:c4:1e:ce:
3a:ca:fc:21:28:6d:c5:2a:57:ef:70:20:e2:b6:61:38:77:ee:
a6:78:23:b9:46:39:bd:2f:cd:2d:4a:0c:2d:2f:7e:f2:ea:97:
58:12:6e:56:d5:f2:5a:13:5e:55:ef:ea:45:b0:1e:8f:97:dd:
4b:b4:c2:aa:fe:6e:36:6c:b0:66:76:25:bc:22:6c:33:05:8b:
5e:90:48:2c:84:b4:e3:cd:3e:d7:46:38:58:f4:a7:c3:73:9b:
b2:23:b8:73:fa:b9:15:b5:f0:d7:bd:ff:2f:cf:94:0f:63:b5:
5a:58:e4:72:c3:62:96:3e:23:77:af:ea:67:9d:eb:23:e4:df:
85:8b:b5:a5:38:d9:15:d1:f0:24:ba:0f:16:01:3a:0e:80:d9:
6b:92:55:a2:28:54:e1:7a:fb:94:5d:4f:07:15:b7:ff:af:db:
ba:f1:4e:23:75:62:2c:a8:f0:7a:c2:04:92:9a:eb:7e:ac:fe:
53:db:54:37:db:1d:f3:1b:83:b7:9a:ee:31:56:ff:32:58:2d:
c6:24:e7:e0:07:16:70:aa:76:84:2d:12:5b:6c:7a:84:a3:f5:
93:12:ec:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:58 2024 by rpki-client on console-fra.rpki-client.org