Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/tmsrz5jk7Ae5mHjotmmC-SWTCmI.roa
File: tmsrz5jk7Ae5mHjotmmC-SWTCmI.roa (raw, json)
Hash identifier: BWJWmKjLXLayhzNS+TQJ8J9gb56kvh+MZ8xzIdBeJx4=
Subject key identifier: B6:6B:2B:CF:98:E4:EC:07:B9:98:78:E8:B6:69:82:F9:25:93:0A:62
Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Certificate serial: 0182FE46184D141ED139658BFE9D6227A27B
Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/tmsrz5jk7Ae5mHjotmmC-SWTCmI.roa
Signing time: Fri 02 Sep 2022 12:56:22 +0000
ROA not before: Fri 02 Sep 2022 12:56:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 45.140.244.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:fe:46:18:4d:14:1e:d1:39:65:8b:fe:9d:62:27:a2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1
Validity
Not Before: Sep 2 12:56:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b66b2bcf98e4ec07b99878e8b66982f925930a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ee:5e:1d:46:95:5f:9d:8f:66:90:2c:97:25:
09:26:34:ae:38:0d:bf:28:a9:58:b0:fd:c9:f9:39:
55:2d:3e:cb:3a:6b:4c:ca:d3:7a:1b:43:56:53:44:
ae:0e:75:48:5e:3c:49:a2:59:73:c1:de:ca:f4:94:
90:48:91:6b:e4:68:27:bd:e4:e8:c6:a6:9a:c7:ea:
3d:a2:68:e4:05:7c:7d:2f:e1:54:6c:b7:60:19:6e:
46:d1:06:a5:80:6d:0b:5d:8c:af:c8:7c:5d:35:b9:
e7:b8:48:f2:7e:6a:9e:02:89:5a:81:10:22:f8:60:
e0:d7:3b:ff:e8:81:df:a0:ad:c1:b6:5c:0f:88:85:
36:db:e4:0a:cc:66:7e:7a:f7:68:99:0c:8f:54:aa:
3c:8b:ab:eb:48:63:d9:5e:5b:05:6b:e3:b4:8f:68:
38:5d:ad:5a:c1:68:34:39:7c:20:62:29:02:97:01:
69:05:b3:8e:e4:be:04:7f:c8:6e:da:43:c0:5e:30:
7b:e0:26:1d:af:cf:13:db:9f:8f:09:4d:e1:c2:d1:
47:de:4f:da:8a:5e:e1:94:ed:4a:75:74:c2:ac:e8:
3c:6e:0a:70:c7:e5:10:b9:37:ac:15:e3:66:c5:37:
c4:35:24:16:ee:84:4a:2e:99:d8:8c:89:2a:5b:42:
64:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:6B:2B:CF:98:E4:EC:07:B9:98:78:E8:B6:69:82:F9:25:93:0A:62
X509v3 Authority Key Identifier:
keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/tmsrz5jk7Ae5mHjotmmC-SWTCmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.244.0/24
Signature Algorithm: sha256WithRSAEncryption
00:76:2c:43:bd:8b:ea:8b:c0:f9:75:02:80:be:79:67:9e:fd:
0b:c6:88:8a:27:69:44:85:9f:16:c1:f0:4e:4e:ae:4f:17:a1:
14:f9:43:df:ff:ca:c7:b4:31:b9:da:37:42:7a:9e:3d:52:5c:
a8:40:fa:11:da:43:9f:d3:da:a6:1a:c0:3c:8b:b2:06:f1:9b:
16:f3:a7:6f:e7:df:87:25:d2:4b:39:83:70:cf:90:89:06:72:
33:bc:72:ee:f7:9b:0b:ed:ec:09:0f:3c:a6:27:c9:4b:43:53:
1d:22:7a:4f:f2:3b:73:59:32:c8:cf:1c:b4:de:a6:9c:26:f7:
14:6e:9a:af:18:04:f1:f2:43:c9:50:c8:10:14:c4:e6:a7:01:
37:4f:6d:16:6b:69:5f:34:c3:d2:24:73:8a:55:97:13:60:de:
de:d5:1f:34:4a:0b:9a:f7:cf:d3:9b:9f:65:22:f9:df:3c:9d:
ca:94:a6:03:f8:0f:c7:e6:32:c4:8d:1e:70:72:74:10:ad:f4:
05:b4:5f:20:ef:b1:90:22:da:10:86:42:18:48:96:4c:6d:a4:
87:17:82:00:c8:a8:b6:5c:1c:6b:38:c1:fc:1f:ef:91:06:f2:
e7:13:e7:cd:76:d3:cd:a5:80:67:c0:06:fe:c7:c9:e2:a1:84:
1f:bd:f3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:03 2024 by rpki-client on console-fra.rpki-client.org