Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/LdKg9J-VL--WgVz6Ck1Quma9JB4.roa
File: LdKg9J-VL--WgVz6Ck1Quma9JB4.roa (raw, json)
Hash identifier: ZqAb2yQEawUx4ITCCYKGUTRJ8ouXUrILvTMvFTSuZCI=
Subject key identifier: 2D:D2:A0:F4:9F:95:2F:EF:96:81:5C:FA:0A:4D:50:BA:66:BD:24:1E
Certificate issuer: /CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Certificate serial: 0925EB46
Authority key identifier: B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/LdKg9J-VL--WgVz6Ck1Quma9JB4.roa
Signing time: Sat 01 Jan 2022 14:05:00 +0000
ROA not before: Sat 01 Jan 2022 14:05:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31287
IP address blocks: 45.66.44.0/24 maxlen: 24
45.66.47.0/24 maxlen: 24
45.66.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 153480006 (0x925eb46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0dfafd36730396fe338e772dadbe4c3c85cd952
Validity
Not Before: Jan 1 14:05:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2dd2a0f49f952fef96815cfa0a4d50ba66bd241e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c5:04:44:fa:ac:aa:70:92:9d:07:5e:48:92:
ab:8d:7a:8e:3c:4e:7b:31:55:dc:5f:de:95:72:9e:
94:93:a9:f3:64:75:db:0b:71:c5:c8:d2:fe:b1:87:
14:60:59:cc:3c:7a:e1:fb:4b:df:51:f5:a0:c2:17:
eb:7d:f6:e7:41:7c:bd:fd:78:72:e6:e1:bc:9f:4d:
19:b1:f0:ac:8c:15:9e:bb:b2:16:21:14:3f:8d:df:
e3:5d:2f:12:c0:84:af:8b:a7:ef:56:d9:c5:f4:b1:
a6:e5:5e:27:12:55:17:22:bd:7a:36:b6:ac:f7:d1:
7c:ce:b6:b5:79:67:df:16:1a:11:6b:7f:28:f8:54:
9d:00:99:14:da:7f:a9:f2:98:01:b4:d6:02:75:45:
1f:1e:ab:c8:9d:74:d2:9c:03:39:0a:72:35:74:e6:
b4:f6:c4:ef:ab:12:03:36:ca:cf:60:ec:a3:ac:f7:
2a:6a:0f:c8:10:6d:6f:9b:f6:57:93:9a:c5:7d:1b:
8f:c9:4d:8c:10:b7:11:b7:5d:f9:67:13:ba:69:35:
83:c0:83:89:52:73:50:d3:e7:fc:11:49:48:7b:78:
48:3c:13:6c:3e:34:3e:66:ff:4a:11:ba:57:96:6e:
bd:3a:55:d3:aa:01:9f:33:a0:af:f0:52:8a:73:6a:
e0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D2:A0:F4:9F:95:2F:EF:96:81:5C:FA:0A:4D:50:BA:66:BD:24:1E
X509v3 Authority Key Identifier:
keyid:B0:DF:AF:D3:67:30:39:6F:E3:38:E7:72:DA:DB:E4:C3:C8:5C:D9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sN-v02cwOW_jOOdy2tvkw8hc2VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/LdKg9J-VL--WgVz6Ck1Quma9JB4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f696fd-4d9d-4e28-926e-0aa5b46bf8aa/1/sN-v02cwOW_jOOdy2tvkw8hc2VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.44.0/23
45.66.47.0/24
Signature Algorithm: sha256WithRSAEncryption
25:1b:78:34:20:c8:3d:5e:18:2d:f9:b4:b3:3e:da:bd:ab:3a:
00:75:50:21:d7:ec:fe:24:79:cb:8b:38:4f:d1:da:4a:98:94:
77:8c:81:b3:9b:9c:32:e4:e9:54:bc:84:8b:cc:92:2d:03:bd:
05:56:0a:4d:7a:ad:54:ff:20:27:10:be:c6:60:6b:a8:74:88:
e5:60:37:82:58:f6:58:fa:19:9a:30:8f:29:1a:6f:c6:48:40:
7e:c3:d2:f3:fa:10:ca:c9:c5:64:49:ce:18:c8:ec:dd:53:0f:
a7:21:5e:29:3b:0f:af:d1:9d:3f:5e:3f:0b:66:29:41:e1:ff:
c3:cd:aa:f7:bb:34:0f:ac:26:ae:bb:07:02:e0:ac:56:1d:d1:
28:ef:8b:49:cc:18:55:31:a4:34:a1:2e:7d:7c:a3:8e:24:40:
47:ed:e9:32:d8:0c:5d:3d:0c:d4:f2:9e:e8:db:0a:5e:53:cc:
9a:83:dc:d3:8d:06:5d:64:d6:09:a6:5c:17:cc:df:f1:46:a2:
2b:0e:0e:f2:e0:82:50:97:98:1a:21:4b:5a:1a:cf:0e:82:ff:
61:ac:b0:be:ca:72:6d:47:de:79:c5:36:66:d9:fb:dc:99:64:
0d:31:ab:4c:f7:eb:18:4c:7f:52:3f:72:06:9a:60:a8:4a:54:
41:14:41:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:19 2024 by rpki-client on console-ams.rpki-client.org