Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/yCZZtEZY_jiNwheSSRnb9Gn8wYU.roa
File: yCZZtEZY_jiNwheSSRnb9Gn8wYU.roa (raw, json)
Hash identifier: SBv73eQzRl9bmC2I9c0hOh3Y6LKqxinFr0xB1j1jn5E=
Subject key identifier: C8:26:59:B4:46:58:FE:38:8D:C2:17:92:49:19:DB:F4:69:FC:C1:85
Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Certificate serial: 09DDB812
Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/yCZZtEZY_jiNwheSSRnb9Gn8wYU.roa
Signing time: Sat 01 Jan 2022 09:54:40 +0000
ROA not before: Sat 01 Jan 2022 09:54:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207348
IP address blocks: 45.142.8.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 165525522 (0x9ddb812)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Validity
Not Before: Jan 1 09:54:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c82659b44658fe388dc217924919dbf469fcc185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:54:bd:bc:2a:0f:32:9a:01:9f:21:34:5b:a6:
b8:ab:6b:2c:c2:56:67:0f:d9:b8:ac:f1:ef:06:6c:
c3:85:f5:19:54:14:33:9b:dc:6e:9e:da:6d:c5:ad:
a3:5b:fa:0c:89:a6:65:40:8a:c0:43:71:1a:27:75:
23:5d:93:49:c8:60:5e:08:8a:e7:96:a7:cc:52:e8:
dd:1e:75:83:d1:a7:b9:14:8f:3f:8a:da:3a:f2:32:
4f:93:71:7a:aa:a2:e9:6b:00:3f:3b:1d:1f:bc:8c:
b1:b5:a1:89:88:a0:0d:c6:c3:55:a0:aa:88:76:0b:
de:eb:61:c8:b5:e4:62:40:5a:38:72:55:cd:ac:02:
08:e3:a7:a6:67:99:6f:f8:c5:dc:69:cb:ec:8c:d5:
3b:c8:ae:b4:49:48:fb:73:b7:59:09:99:ff:6b:f1:
6a:70:97:94:32:b2:c0:43:e7:fe:b0:37:be:9e:8f:
d0:8d:25:23:52:a1:66:fb:36:e7:4d:c4:bd:e5:37:
dc:10:b0:0b:2d:21:3a:7c:9a:9d:00:b2:05:63:8f:
2e:5e:1f:cd:27:60:7e:12:bf:11:d5:06:5e:d3:6a:
91:43:5c:00:21:d0:fe:d0:5f:83:d6:0b:aa:27:a9:
f1:82:a9:e5:a1:c8:bf:ef:97:4f:19:8e:ba:2f:16:
aa:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:26:59:B4:46:58:FE:38:8D:C2:17:92:49:19:DB:F4:69:FC:C1:85
X509v3 Authority Key Identifier:
keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/yCZZtEZY_jiNwheSSRnb9Gn8wYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.8.0/22
Signature Algorithm: sha256WithRSAEncryption
38:01:04:1b:a5:7a:d8:89:73:fc:31:6a:4f:40:f3:55:26:9c:
51:ab:30:ac:6f:8d:47:81:bc:fe:25:d0:ee:77:75:1c:a7:fb:
01:c9:b0:da:f3:a5:5a:6c:48:07:17:e9:16:be:61:23:d3:0e:
5e:20:6c:cc:d1:d0:bb:d1:d2:3d:b4:42:ac:d7:3f:ff:98:12:
46:28:ed:97:41:a1:9d:b4:2d:94:7d:97:27:80:39:3d:7e:28:
3e:76:36:a7:b1:7b:a0:6a:ea:18:90:d6:54:85:b9:28:69:18:
11:59:b5:7f:96:89:08:69:51:e6:2a:b2:6d:86:27:e2:23:80:
74:53:d6:92:9f:dc:b9:02:c5:1d:37:d1:87:b4:2e:ce:c2:05:
e3:22:0c:27:25:86:a2:8a:d8:b5:d4:fc:83:23:58:00:c6:8a:
0f:10:7f:2c:67:10:0a:1d:b7:8b:98:66:f3:7f:cd:d1:cf:7c:
47:7f:31:2b:e6:5e:3c:66:58:2e:0b:a8:7c:b0:cb:ff:ac:ed:
4f:a1:3f:41:af:1d:6b:44:53:f6:93:97:60:c1:41:36:92:4a:
68:b2:30:4c:34:93:44:4c:3b:45:33:c2:fa:ff:cf:2a:b4:75:
a5:dd:c0:ca:2b:f7:21:3c:b7:83:df:45:ec:6e:d5:45:1a:62:
ec:6d:32:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:05:33 2024 by rpki-client on console-ams.rpki-client.org