Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/_Bn7im0wiBpSWMhwuBsTF0kplqc.roa
File: _Bn7im0wiBpSWMhwuBsTF0kplqc.roa (raw, json)
Hash identifier: ZVEyUOUZOl36p5RYzqpz6S9YZ/b7AGjJEw7aLa0DfxI=
Subject key identifier: FC:19:FB:8A:6D:30:88:1A:52:58:C8:70:B8:1B:13:17:49:29:96:A7
Certificate issuer: /CN=2f6f0ea0127a6e392195696380be5bb0474b01df
Certificate serial: 07764F04
Authority key identifier: 2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/_Bn7im0wiBpSWMhwuBsTF0kplqc.roa
Signing time: Sat 01 Jan 2022 02:59:41 +0000
ROA not before: Sat 01 Jan 2022 02:59:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 553
IP address blocks: 45.90.132.0/22 maxlen: 22
2a0e:3c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125193988 (0x7764f04)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6f0ea0127a6e392195696380be5bb0474b01df
Validity
Not Before: Jan 1 02:59:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc19fb8a6d30881a5258c870b81b1317492996a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d8:9b:af:af:42:b2:90:52:49:c0:7c:59:18:
ec:4a:9f:39:f5:2c:c4:a9:2a:98:c7:a4:34:0d:2c:
d2:cd:5c:2b:13:22:7c:cc:b0:0e:e5:90:6e:12:9a:
b8:b5:c4:f2:35:16:cc:68:7a:26:17:9a:ea:82:b8:
62:cb:ec:5c:4d:1b:b6:4c:af:37:ad:b1:d1:76:eb:
2a:fe:74:75:d6:02:d5:6c:0e:45:0b:22:af:8d:e7:
c6:b3:77:fc:b0:77:85:3a:94:44:e1:8c:b6:f6:34:
33:66:db:2f:88:66:ea:4f:f5:5e:cc:7f:2c:4f:06:
77:ab:48:d5:72:3e:7a:00:00:af:90:63:44:bf:40:
e1:d8:b8:a1:18:2c:bd:1f:39:6c:01:73:de:dc:03:
ee:38:43:c6:61:fd:ed:25:50:7f:db:de:62:94:e6:
6d:72:c6:92:5c:0d:f5:50:21:b8:ff:7a:79:d8:23:
37:d4:16:f7:9d:4c:97:78:b5:4e:5f:c2:df:2c:2f:
4a:c2:28:dd:75:b3:8c:9b:9a:85:07:65:6f:df:0e:
c8:2c:7c:0e:b9:ff:f9:51:7e:a6:10:88:b1:aa:5e:
ab:7c:c8:72:94:ea:5a:bd:2c:33:48:c5:a2:13:5e:
90:f1:62:20:4b:0a:40:70:29:33:bf:05:64:3f:1e:
58:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:19:FB:8A:6D:30:88:1A:52:58:C8:70:B8:1B:13:17:49:29:96:A7
X509v3 Authority Key Identifier:
keyid:2F:6F:0E:A0:12:7A:6E:39:21:95:69:63:80:BE:5B:B0:47:4B:01:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L28OoBJ6bjkhlWljgL5bsEdLAd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/_Bn7im0wiBpSWMhwuBsTF0kplqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/62641f-cf99-4514-b7d7-b2a23246e614/1/L28OoBJ6bjkhlWljgL5bsEdLAd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.132.0/22
IPv6:
2a0e:3c0::/29
Signature Algorithm: sha256WithRSAEncryption
8d:f6:85:57:4d:ca:0a:1d:cc:d2:90:bf:2d:c4:77:7e:33:e2:
81:65:46:c7:12:7c:e6:a6:6b:8f:1d:14:15:bc:b6:6b:22:cc:
9c:9c:70:89:f4:db:1a:d6:b9:08:66:6d:61:6e:f1:b7:8e:da:
01:3b:63:6e:26:bb:b4:6a:40:5a:0a:48:41:1d:fa:8d:84:c8:
57:76:ec:ba:d9:0a:68:7e:5f:32:5b:75:eb:b9:a5:de:ae:72:
71:1d:d9:31:ba:39:92:c7:12:b5:c3:f3:a7:99:3a:bc:8b:88:
d0:bf:bc:4e:ce:7d:7e:84:ce:0a:f8:27:c0:23:ef:b4:10:e8:
92:12:63:98:2b:b4:8d:4a:64:90:04:b0:01:ee:da:86:fa:c7:
22:fc:40:07:9d:2e:62:40:52:f2:76:49:5a:5d:41:1d:55:43:
d0:bd:04:1a:95:35:dd:40:e2:d0:02:ee:ca:25:b6:4f:d5:d5:
32:f2:b7:eb:ae:57:e9:8c:fc:ed:69:55:d8:ca:0f:41:87:35:
5b:f8:53:03:c1:b1:f5:48:ff:10:42:c8:1a:46:ee:8a:01:7b:
bb:82:4e:ae:95:a5:96:3d:24:b0:7f:9a:63:5a:d5:de:3e:7c:
f8:07:20:f2:60:dd:3c:46:b5:ad:b3:2d:88:cd:4a:a3:fd:11:
5b:db:d8:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:00 2024 by rpki-client on console-fra.rpki-client.org