Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/KhrA1QCIOt1biyoB_cSSjoonDY8.roa
File: KhrA1QCIOt1biyoB_cSSjoonDY8.roa (raw, json)
Hash identifier: s3tAfYcuPmKniIoYwUtERzNdEal5FBFrmVEDcXyDsq4=
Subject key identifier: 2A:1A:C0:D5:00:88:3A:DD:5B:8B:2A:01:FD:C4:92:8E:8A:27:0D:8F
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 0182795533B1117323C8921FBCC1053C8D11
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/KhrA1QCIOt1biyoB_cSSjoonDY8.roa
Signing time: Sun 07 Aug 2022 17:23:23 +0000
ROA not before: Sun 07 Aug 2022 17:23:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 45.140.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:79:55:33:b1:11:73:23:c8:92:1f:bc:c1:05:3c:8d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Aug 7 17:23:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2a1ac0d500883add5b8b2a01fdc4928e8a270d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:94:52:52:66:99:98:4d:07:d5:f6:a8:07:da:
e4:a7:51:31:01:89:cd:b4:3e:e5:e4:fa:6c:db:0d:
88:8f:89:83:c8:54:62:87:2f:9b:18:18:f8:7e:37:
a7:b8:c3:ce:57:78:a0:7e:70:89:21:47:d5:a9:76:
82:df:1c:da:99:ed:12:d2:1b:3e:b6:1e:5c:b4:88:
ce:2b:9a:47:b6:f0:f8:d8:f4:e1:8e:76:f9:27:ee:
84:3b:86:1f:f1:1c:f5:91:e8:b6:1c:24:09:a8:63:
c6:ae:81:be:66:ac:d5:13:45:2e:17:fc:55:ad:3a:
e2:57:3c:5f:7e:f0:9c:b8:66:27:23:7e:b0:fe:8a:
dd:8c:54:64:ed:a3:d9:73:55:d5:5d:7c:f8:af:c0:
13:91:b4:48:6e:80:f4:df:86:2f:b2:20:79:d8:20:
6a:4e:51:31:61:f5:b6:db:28:f0:c4:8f:62:c5:30:
3b:86:81:e4:fc:85:c8:55:55:0b:f1:c7:17:c4:93:
27:8f:55:97:22:64:47:1d:b9:f4:f2:7b:e0:5e:8d:
1f:6a:7b:4d:d6:52:1d:02:95:64:a6:98:6a:e9:ae:
0d:80:be:a1:ae:5e:9b:e5:01:6e:74:92:ca:e2:2e:
c4:dd:44:83:6c:3c:b0:e9:5e:7b:fd:80:52:01:2c:
f3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:1A:C0:D5:00:88:3A:DD:5B:8B:2A:01:FD:C4:92:8E:8A:27:0D:8F
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/KhrA1QCIOt1biyoB_cSSjoonDY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.246.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:52:bc:48:d0:93:15:e6:f6:1a:9e:52:2c:65:1b:86:41:72:
37:ab:f5:dc:e9:4b:fd:e3:88:3f:fd:b7:da:8c:3f:f2:ab:6b:
cf:67:78:f0:4d:4c:6c:8b:a3:6c:18:60:bb:59:6c:30:21:50:
fd:2c:00:fd:a3:d6:20:35:18:75:17:64:e6:92:5c:13:86:c3:
12:c6:cc:b6:09:5e:8c:a2:d1:ad:f5:60:61:7a:a7:52:4f:46:
2c:66:b0:d5:37:96:fb:a8:fa:be:04:86:95:26:ea:76:18:41:
76:fb:eb:39:ba:5c:7e:83:05:ab:8f:bb:b4:16:94:a0:3f:0d:
ce:e5:59:f1:3d:a5:8a:89:11:79:ab:30:ea:ce:fd:c0:94:32:
b2:ce:9f:98:6a:f2:b0:20:3b:de:65:1b:09:8d:ee:a1:08:a1:
1c:74:c5:c9:b0:81:b7:0b:68:86:a8:30:02:93:84:25:f0:af:
99:fe:62:92:1e:a5:9e:3e:3b:8e:0b:ce:e3:60:f0:43:6d:a8:
66:b4:be:99:d1:08:a3:f8:29:ce:01:36:b3:a4:cd:9a:64:d5:
fc:41:18:40:0e:c8:4d:40:8e:bc:65:40:13:7e:46:4f:5a:63:
33:7c:e4:c4:63:ad:ce:de:77:c8:54:fd:e5:95:40:d3:8b:a5:
e5:d5:4b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:32 2023 by rpki-client on console-ams.rpki-client.org