Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/FYwa36zoIYRsJQXNlYQC4jhWERY.roa
File: FYwa36zoIYRsJQXNlYQC4jhWERY.roa (raw, json)
Hash identifier: qHi+9I0Qwp88WcjUykkv0AgqFdFDCeld6UK+XbSv2qw=
Subject key identifier: 15:8C:1A:DF:AC:E8:21:84:6C:25:05:CD:95:84:02:E2:38:56:11:16
Certificate issuer: /CN=4191e5826270f49eae999d489e85deccc847738b
Certificate serial: 024756E4
Authority key identifier: 41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/FYwa36zoIYRsJQXNlYQC4jhWERY.roa
Signing time: Sat 01 Jan 2022 10:05:12 +0000
ROA not before: Sat 01 Jan 2022 10:05:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57763
IP address blocks: 45.90.24.0/22 maxlen: 22
2a06:3cc0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38229732 (0x24756e4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4191e5826270f49eae999d489e85deccc847738b
Validity
Not Before: Jan 1 10:05:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=158c1adface821846c2505cd958402e238561116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:60:74:22:de:2a:b5:a4:e5:f9:d9:c2:0e:02:
21:2e:1a:25:1e:50:76:01:0c:d7:ab:1f:a5:1f:ea:
f6:3d:fb:eb:f9:55:17:17:56:ea:39:c1:6d:10:ef:
82:1f:7c:30:b4:ab:a3:b7:a2:f0:e8:74:c4:09:54:
bb:c6:ba:94:2d:59:e8:57:75:67:41:79:e8:23:65:
61:b1:42:9f:f1:dc:73:0e:46:e8:da:82:8d:11:45:
e1:30:da:51:38:ca:58:5a:d5:84:55:3c:fc:dd:5a:
89:b3:d8:5d:61:0a:c6:be:95:19:d7:68:fc:69:e4:
1f:7c:e6:1e:04:28:ec:a4:f0:be:5b:70:b3:ff:64:
86:4b:f2:f0:75:94:d5:45:04:e8:b3:8c:d1:04:cb:
8f:5a:34:cd:b2:90:eb:45:dc:40:aa:ca:0e:8b:73:
ea:2a:94:4f:e8:dc:5b:f4:32:f0:ec:c8:14:bf:19:
cd:7e:60:47:86:71:0e:a6:fb:7c:ed:8c:38:a7:d2:
22:ad:46:73:62:78:dc:8b:0a:47:b1:99:ad:1c:8d:
05:62:54:3d:56:dc:bb:40:07:ff:80:82:73:2d:51:
44:91:b0:98:52:ad:d1:19:24:27:12:ab:51:4f:2a:
32:2f:1c:82:6d:6f:eb:ba:5e:a4:1d:fe:cc:22:ca:
0c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8C:1A:DF:AC:E8:21:84:6C:25:05:CD:95:84:02:E2:38:56:11:16
X509v3 Authority Key Identifier:
keyid:41:91:E5:82:62:70:F4:9E:AE:99:9D:48:9E:85:DE:CC:C8:47:73:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZHlgmJw9J6umZ1InoXezMhHc4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/FYwa36zoIYRsJQXNlYQC4jhWERY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/51bac7-9806-41e5-9936-7dfdacfa6511/1/QZHlgmJw9J6umZ1InoXezMhHc4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.24.0/22
IPv6:
2a06:3cc0::/29
Signature Algorithm: sha256WithRSAEncryption
c2:75:c0:aa:fd:a7:b3:40:ec:4a:8b:eb:66:0f:53:44:e7:a0:
29:9a:24:01:55:78:3e:79:f7:33:dc:fd:93:3c:92:62:2f:b3:
16:46:87:80:a9:6e:c8:37:00:b7:a8:7f:ba:a0:0d:0b:36:ad:
5f:55:2a:62:41:28:b4:36:bd:68:73:11:cd:e7:78:22:73:8d:
4b:6b:a7:0b:db:b1:9b:1c:f8:86:24:1d:d6:39:1a:e2:87:5e:
41:ec:8c:c4:fb:13:6b:de:13:8e:76:cc:12:63:47:2c:e0:2f:
f2:3d:46:05:09:6e:d3:8f:d1:97:95:fc:fb:05:a0:3b:d5:dd:
ec:a1:03:3d:29:f5:71:a0:7d:95:70:1e:a7:b9:df:47:80:0f:
2a:c3:a5:78:2b:52:33:7b:65:99:3a:bf:8e:cc:d7:d0:e7:7d:
f4:e4:a0:55:2d:2d:b7:1d:3d:99:36:20:06:41:a0:03:87:83:
18:44:de:20:7b:d1:4b:db:94:06:de:fe:6e:05:43:fc:07:58:
76:3f:64:49:a4:46:f4:1b:f0:46:f1:e5:a0:07:7a:02:60:f6:
7b:2c:e6:b5:0a:8c:18:36:56:ff:c0:18:5f:80:64:bd:77:0f:
4e:51:4b:b5:9d:f9:57:68:eb:cf:b3:90:c3:09:56:2c:64:2d:
62:62:e7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:19 2024 by rpki-client on console-fra.rpki-client.org