Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/tb8oENzcpMjCMch4eHrtzt1Ri6Q.roa
File: tb8oENzcpMjCMch4eHrtzt1Ri6Q.roa (raw, json)
Hash identifier: FAmmLW3u0M2kv5IYYvogTcQqduLbk6dSC7CJZ9/+JpQ=
Subject key identifier: B5:BF:28:10:DC:DC:A4:C8:C2:31:C8:78:78:7A:ED:CE:DD:51:8B:A4
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0184A0BBD97315C1ABC289A1B00577BD2652
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/tb8oENzcpMjCMch4eHrtzt1Ri6Q.roa
Signing time: Tue 22 Nov 2022 19:06:16 +0000
ROA not before: Tue 22 Nov 2022 19:06:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134963
IP address blocks: 45.134.146.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a0:bb:d9:73:15:c1:ab:c2:89:a1:b0:05:77:bd:26:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Nov 22 19:06:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5bf2810dcdca4c8c231c878787aedcedd518ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:44:f5:79:d7:f9:3f:6f:27:94:e4:96:2d:56:
46:98:ee:6a:da:31:56:89:c0:1c:42:1b:74:c9:07:
ed:bd:f7:ac:40:50:43:82:62:e2:d0:17:f9:ec:53:
a3:36:89:f3:64:64:73:b3:60:5c:d2:5c:12:fd:9e:
1d:fa:e9:ce:3c:b2:17:4c:1e:34:1c:b9:04:71:22:
a2:5a:6e:b8:8e:d2:68:eb:82:25:70:aa:fd:22:c3:
2a:86:46:de:7c:2b:de:d9:ca:99:62:96:33:bd:ac:
14:41:e9:61:d2:5e:73:98:31:56:86:d8:0b:cd:3b:
ab:15:c8:4b:1c:7f:81:22:4e:bb:e4:30:74:f7:4e:
27:11:e3:7d:d6:b7:5e:43:ac:31:cb:f5:40:ce:6d:
40:46:8c:18:ca:ee:c6:49:14:8f:98:be:3d:ee:2e:
08:a9:16:23:57:9e:0f:14:cb:70:96:24:58:b5:d1:
89:57:a2:4d:ea:7c:b9:0e:cb:20:9c:1a:4b:40:08:
a5:70:71:88:ca:09:b7:6f:b6:57:fd:03:89:cc:cc:
c4:1f:ac:fc:e1:84:f8:a2:42:21:ff:f1:a8:0f:18:
b0:99:d7:e5:4d:13:c9:df:d0:5b:97:cf:e7:16:ab:
bd:4c:11:4e:24:bd:f3:63:98:18:f4:c6:bd:e8:25:
f5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BF:28:10:DC:DC:A4:C8:C2:31:C8:78:78:7A:ED:CE:DD:51:8B:A4
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/tb8oENzcpMjCMch4eHrtzt1Ri6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.146.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:48:80:28:5c:db:7d:91:83:a6:39:df:b9:c9:b6:77:d5:91:
e7:96:2f:b8:f6:1b:35:23:03:45:8b:62:ff:14:89:3d:a2:38:
57:33:2c:89:9d:62:3a:c8:16:b4:7e:17:06:ba:83:61:9b:09:
09:78:85:41:2d:30:e9:2a:38:58:48:18:d9:6f:67:d0:36:83:
e1:9b:18:88:ed:06:58:d5:e7:09:fd:50:08:08:e0:8e:86:35:
d0:73:20:e6:d4:3b:61:7c:51:0e:bc:43:69:03:f1:53:db:86:
62:ef:7e:6d:6e:6a:a8:88:25:be:be:ad:ea:99:26:ba:30:71:
6e:5c:2f:bb:c3:de:fe:b0:94:3b:71:2c:fb:30:be:8a:04:7d:
43:c1:d2:00:df:4b:45:70:e2:f7:8f:d2:57:f5:a8:41:11:f7:
d6:3a:41:bf:29:28:01:92:bc:88:02:38:52:09:62:44:5a:2b:
05:17:fa:e2:f2:88:cf:82:8e:31:8e:68:ec:69:df:1f:1f:97:
13:5a:96:fc:2e:c6:7b:54:84:53:53:9a:c3:dc:ba:6f:56:a6:
d5:63:eb:5e:6f:f1:77:6c:29:9f:c8:06:04:0a:3b:dc:2c:cd:
75:47:ad:f4:6f:24:c6:4d:5e:7b:f2:39:ac:86:d5:c7:ab:20:
b6:e5:d8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:04 2024 by rpki-client on console-ams.rpki-client.org