Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/7Z6KInlWNuQzZYovq1o5nIUPO6I.roa
File: 7Z6KInlWNuQzZYovq1o5nIUPO6I.roa (raw, json)
Hash identifier: m6ubDGg1cZGuX4H4s0S+KDYZ8iuELht2M2/s/y74Uuw=
Subject key identifier: ED:9E:8A:22:79:56:36:E4:33:65:8A:2F:AB:5A:39:9C:85:0F:3B:A2
Certificate issuer: /CN=78950ba19b4f17a3473127fd077a9a2002ebea36
Certificate serial: 08157920
Authority key identifier: 78:95:0B:A1:9B:4F:17:A3:47:31:27:FD:07:7A:9A:20:02:EB:EA:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eJULoZtPF6NHMSf9B3qaIALr6jY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/7Z6KInlWNuQzZYovq1o5nIUPO6I.roa
Signing time: Sat 01 Jan 2022 16:06:17 +0000
ROA not before: Sat 01 Jan 2022 16:06:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207044
IP address blocks: 45.87.224.0/24 maxlen: 24
45.87.225.0/24 maxlen: 24
2a0d:f700:1000::/38 maxlen: 38
2a0d:f700:c00::/38 maxlen: 38
2a0d:f700:800::/38 maxlen: 38
2a0d:f700:400::/38 maxlen: 38
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135624992 (0x8157920)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78950ba19b4f17a3473127fd077a9a2002ebea36
Validity
Not Before: Jan 1 16:06:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed9e8a22795636e433658a2fab5a399c850f3ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c5:43:99:97:e6:ab:51:f2:bf:a1:70:80:27:
1e:57:1d:24:eb:4e:8d:d0:00:29:fe:b9:d4:45:cb:
13:88:74:80:f7:2d:c8:a6:07:0d:96:52:73:98:45:
ed:67:ac:0b:85:2e:dc:ff:ac:10:7b:60:34:9f:41:
1c:9a:8b:60:77:4b:2d:6a:6e:63:86:6b:5f:0b:47:
67:33:fd:41:cb:21:91:d2:a1:1f:2f:fe:8b:7d:17:
45:e2:89:b3:56:b4:3f:e4:59:f7:68:91:aa:b0:25:
03:48:c2:ea:22:f8:e1:2d:f6:3f:4f:a9:8e:d4:48:
1e:b3:11:b2:f3:9b:2d:8d:d2:58:76:1f:23:1b:28:
3c:38:38:27:71:e4:83:7d:45:91:ed:cb:f4:0b:c7:
be:3d:3a:81:96:19:b3:09:2a:b4:98:71:fd:db:59:
6f:ad:a6:a1:ad:66:a0:d1:a9:ef:82:94:49:af:3e:
77:c4:af:08:bd:29:4c:a4:e0:0c:c9:92:8d:81:cb:
80:d3:7a:64:31:6b:03:2e:bb:35:87:5e:c3:16:ed:
24:ed:82:c1:82:63:c9:93:13:36:a8:51:e1:98:9f:
5a:9e:9a:0e:b8:c1:d3:c8:17:79:79:54:2b:08:fc:
2c:fe:fb:78:83:23:6f:e8:bd:67:f8:d4:67:11:c1:
d0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9E:8A:22:79:56:36:E4:33:65:8A:2F:AB:5A:39:9C:85:0F:3B:A2
X509v3 Authority Key Identifier:
keyid:78:95:0B:A1:9B:4F:17:A3:47:31:27:FD:07:7A:9A:20:02:EB:EA:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eJULoZtPF6NHMSf9B3qaIALr6jY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/7Z6KInlWNuQzZYovq1o5nIUPO6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/80fcb9-ca84-46a2-b1b0-fd5e4465d144/1/eJULoZtPF6NHMSf9B3qaIALr6jY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.224.0/23
IPv6:
2a0d:f700:400::-2a0d:f700:13ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
5b:2b:4c:2c:51:8d:f3:90:44:d1:40:bd:57:f4:a4:ff:ca:8d:
ef:87:7a:11:58:49:25:b4:1e:14:02:6b:19:31:ad:d5:ba:38:
62:25:33:0f:ed:27:f4:f2:98:85:78:88:a1:d0:31:f4:2e:48:
6f:d5:0f:5f:5a:32:d1:02:e2:ce:a7:96:c2:42:81:ea:f6:2c:
2f:83:b9:92:00:b3:72:ba:41:84:56:4d:75:ad:78:34:77:29:
af:0e:a8:58:ff:23:5b:11:f3:ac:55:47:7a:ea:39:d6:3e:29:
cd:be:2f:20:39:40:d4:2d:04:4f:a8:70:8f:9b:cc:2b:7d:7b:
04:b3:ea:43:68:0b:9c:e6:5d:df:40:ea:1d:e9:df:46:35:67:
dd:7b:58:c5:4a:52:f1:be:ea:14:f2:41:57:ac:18:f4:4b:3f:
5d:16:1f:f8:b0:54:9d:0f:5b:9f:4e:59:5a:a8:f0:d1:39:5b:
98:9a:03:9f:44:b4:15:43:4b:72:80:77:9a:a5:9c:b1:a0:1b:
4e:d1:a8:4b:1a:71:e9:b2:be:51:97:19:d8:52:84:dc:1e:37:
b3:f7:92:52:d4:17:86:24:7b:65:0d:c8:93:60:21:9e:15:af:
c4:4f:fb:cb:3a:9d:ca:59:01:e0:56:1a:23:a7:7b:22:18:c6:
52:46:db:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:15 2024 by rpki-client on console-ams.rpki-client.org