Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/UiQO3O2nkC6SfkLteEa1nbmxf7Y.roa
File: UiQO3O2nkC6SfkLteEa1nbmxf7Y.roa (raw, json)
Hash identifier: eZDO8ZSwxnuPpEdJfZoEuS9+sABnk+377kdU74dBfwE=
Subject key identifier: 52:24:0E:DC:ED:A7:90:2E:92:7E:42:ED:78:46:B5:9D:B9:B1:7F:B6
Certificate issuer: /CN=6a0f5830dbc4bbabb682777ebd3843d750489ec8
Certificate serial: 07B34421
Authority key identifier: 6A:0F:58:30:DB:C4:BB:AB:B6:82:77:7E:BD:38:43:D7:50:48:9E:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag9YMNvEu6u2gnd-vThD11BInsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/UiQO3O2nkC6SfkLteEa1nbmxf7Y.roa
Signing time: Sat 01 Jan 2022 12:03:12 +0000
ROA not before: Sat 01 Jan 2022 12:03:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.145.120.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129188897 (0x7b34421)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0f5830dbc4bbabb682777ebd3843d750489ec8
Validity
Not Before: Jan 1 12:03:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=52240edceda7902e927e42ed7846b59db9b17fb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ab:40:e4:fb:a9:2e:ac:b7:cf:8a:03:a2:82:
40:90:d5:26:4d:ff:63:20:b1:6f:58:34:65:81:2c:
8f:5c:77:2b:99:f7:64:1f:25:35:96:db:04:f2:02:
f5:b2:8c:16:6b:99:9c:7e:03:1a:84:31:43:00:a3:
27:29:95:03:1a:3f:47:26:bd:ce:7e:ed:56:ff:45:
59:19:9b:ec:19:92:53:45:1f:e0:f2:78:23:33:7d:
f6:f3:fc:1f:a9:1c:0f:00:e1:ab:81:44:af:9b:16:
aa:e9:e5:d6:b5:73:05:e2:67:61:a3:a6:c1:c8:fa:
fb:ad:04:57:55:b7:09:22:cf:f2:e7:06:52:62:fa:
87:1f:46:fb:cd:57:e8:21:ea:a6:08:58:d6:50:12:
9a:c2:d1:d8:e7:d2:ac:01:63:07:6b:f2:09:72:f1:
88:20:7b:b5:c7:f5:2b:35:ff:ce:a9:d1:41:11:94:
c5:54:6d:51:c0:bf:77:6c:c1:66:72:19:5f:cf:7e:
b9:69:58:0d:02:10:cb:ea:0b:a1:47:96:1b:f0:c3:
34:bf:f6:05:26:01:a3:92:1a:e2:b4:c8:7d:66:f9:
1a:b4:3c:4f:e1:0d:c7:5f:0b:f6:0f:74:b3:39:6a:
d6:91:e8:72:29:a9:95:d0:8e:68:c5:d0:d9:9e:7a:
15:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:24:0E:DC:ED:A7:90:2E:92:7E:42:ED:78:46:B5:9D:B9:B1:7F:B6
X509v3 Authority Key Identifier:
keyid:6A:0F:58:30:DB:C4:BB:AB:B6:82:77:7E:BD:38:43:D7:50:48:9E:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag9YMNvEu6u2gnd-vThD11BInsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/UiQO3O2nkC6SfkLteEa1nbmxf7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8a30b8-1c1d-41c2-994e-5666c283b306/1/ag9YMNvEu6u2gnd-vThD11BInsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.120.0/22
Signature Algorithm: sha256WithRSAEncryption
73:b6:6e:af:6c:e7:be:7b:e9:b5:cb:90:76:41:42:7e:92:b9:
fc:d4:65:50:52:16:4c:28:3f:1e:fe:cd:33:cd:47:89:06:af:
18:72:36:a5:b9:1e:d9:c8:d8:af:8a:d9:be:e7:28:90:8f:24:
9a:5e:56:a3:55:c5:a7:30:ce:bb:f3:be:af:8e:b0:b9:ff:7a:
49:3f:2c:e5:95:66:07:2f:dd:35:f4:8e:b4:17:aa:01:2a:12:
70:20:a9:28:78:95:14:5a:41:17:fd:9e:4a:3d:41:53:f2:bd:
23:7b:dc:90:5b:d0:e5:d4:3e:cb:ee:0f:39:e1:22:33:82:c4:
9f:6d:56:0d:b4:84:91:f4:6f:4a:64:b6:e6:51:d0:f8:d4:dd:
38:41:84:8f:86:72:32:97:59:68:22:77:ce:1f:c9:1e:e2:9a:
3b:45:cb:21:71:93:7e:33:1e:d0:a5:d7:02:62:bb:5d:47:f9:
a0:5b:26:5f:51:f0:3d:e1:c8:ac:fe:30:b0:5f:17:56:40:07:
ea:51:3e:9d:97:e0:2f:93:e9:3f:e3:c8:6a:be:71:54:57:68:
cc:0b:7f:9b:4c:76:2a:6f:73:5f:97:7c:52:91:80:01:3c:a0:
39:c3:68:19:7d:29:28:34:83:4a:db:3a:29:6f:2b:2e:0f:5e:
23:b2:9c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:07 2023 by rpki-client on console-ams.rpki-client.org