Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/lg9n3jx9v1a5CHQ6delq7JDVfrQ.roa
File: lg9n3jx9v1a5CHQ6delq7JDVfrQ.roa (raw, json)
Hash identifier: eNI5TNZIZTgfkq7og0N8SMai0iU3D1GdmwXYM2JXCtw=
Subject key identifier: 96:0F:67:DE:3C:7D:BF:56:B9:08:74:3A:75:E9:6A:EC:90:D5:7E:B4
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 09C15C15
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/lg9n3jx9v1a5CHQ6delq7JDVfrQ.roa
Signing time: Wed 06 Apr 2022 03:31:41 +0000
ROA not before: Wed 06 Apr 2022 03:31:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 24875
IP address blocks: 45.93.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163666965 (0x9c15c15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Apr 6 03:31:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=960f67de3c7dbf56b908743a75e96aec90d57eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f6:04:b0:27:71:87:a6:a0:6b:80:9c:6a:7c:
98:e7:70:08:b4:58:d2:3b:09:1b:c2:4d:e6:3d:63:
6b:9b:88:66:c2:88:67:bb:a8:94:98:9a:73:90:3a:
05:69:ce:58:7c:a6:e5:be:25:03:3e:54:3c:a0:a9:
af:b6:2a:8a:c8:36:8b:67:0b:4a:04:52:ce:b2:c1:
3b:df:e7:5a:97:84:c5:84:79:a6:e8:8b:f7:1c:7c:
73:4d:8e:38:c4:37:41:b3:83:cd:de:58:02:e0:fe:
b7:fd:c0:52:8a:2a:ad:7d:8d:d6:4c:cc:7e:89:0b:
e3:da:66:74:8d:73:4f:9b:c3:de:71:43:6f:54:bf:
48:0a:96:94:51:67:7d:02:53:12:b1:40:f9:4a:e2:
0c:b8:c7:77:a8:dd:6d:54:d9:4f:17:cd:b7:d9:b0:
78:f7:1e:25:dd:77:1b:f0:d7:be:f2:89:f0:69:3c:
9d:ee:80:7d:4b:09:4b:b0:c7:b9:1d:93:80:ac:17:
0f:dd:a3:87:ca:17:e8:81:e3:74:a7:60:56:2f:45:
8d:25:b1:8a:7c:41:cf:3f:07:08:a8:04:45:e6:65:
e1:25:66:c8:1b:12:b2:55:f5:0a:7a:0c:84:5f:3a:
36:7f:e7:92:cf:8e:01:b7:64:6d:69:61:99:b0:cc:
d1:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:0F:67:DE:3C:7D:BF:56:B9:08:74:3A:75:E9:6A:EC:90:D5:7E:B4
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/lg9n3jx9v1a5CHQ6delq7JDVfrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.17.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:67:71:ea:79:6b:30:68:1d:10:51:29:c7:de:e0:5d:9d:28:
be:22:d5:27:5d:2f:bc:6c:b7:f1:b0:39:28:81:5a:35:41:9d:
b6:88:e0:2a:96:5b:63:71:86:7a:5d:26:aa:f3:38:77:46:28:
25:6b:94:67:4f:bf:94:27:17:43:38:6a:05:49:bb:99:71:a7:
4f:df:59:4a:17:91:ee:6b:8f:d3:66:60:09:42:5d:f3:54:0d:
18:c5:94:6c:7c:40:be:26:a9:65:b8:7c:0b:db:8c:d6:31:5d:
59:25:6a:b6:d3:ed:82:79:e7:d0:b9:0b:a1:46:7e:72:4a:6f:
e4:f0:be:11:f1:c7:20:67:56:05:a2:2d:26:b6:18:80:96:8e:
e3:97:e3:9e:8f:60:4b:a0:59:b1:50:41:cf:0d:8b:3e:21:d4:
87:27:48:ff:a2:53:ec:80:b5:9f:c0:93:b7:42:d8:f1:f7:c0:
34:3c:80:de:07:61:f7:f2:df:c8:1a:f8:c0:e0:96:bf:f8:33:
96:d5:ae:91:66:d9:77:4b:83:c9:d8:8e:aa:12:ee:98:1f:ca:
de:50:90:ab:32:6f:03:5b:a7:6d:81:5e:c4:ec:03:44:8a:4b:
21:01:26:38:83:81:14:a4:f8:1b:a9:ff:e0:e2:5e:0d:a3:60:
7d:65:e1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:04 2024 by rpki-client on console-ams.rpki-client.org