Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/SxjElBAfazmF5tycxVTuIo4I9hg.roa
File: SxjElBAfazmF5tycxVTuIo4I9hg.roa (raw, json)
Hash identifier: +BH0D3FaKmAPdU2Kqjw4aTC3VrlU+1npLZgqWaQBvc0=
Subject key identifier: 4B:18:C4:94:10:1F:6B:39:85:E6:DC:9C:C5:54:EE:22:8E:08:F6:18
Certificate issuer: /CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652
Certificate serial: 102E6B52
Authority key identifier: 92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/SxjElBAfazmF5tycxVTuIo4I9hg.roa
Signing time: Sat 01 Jan 2022 06:54:51 +0000
ROA not before: Sat 01 Jan 2022 06:54:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60670
IP address blocks: 45.155.109.0/24 maxlen: 24
45.155.108.0/24 maxlen: 24
45.155.111.0/24 maxlen: 24
185.180.184.0/24 maxlen: 24
185.180.186.0/24 maxlen: 24
185.180.185.0/24 maxlen: 24
185.180.187.0/24 maxlen: 24
2a0a:ad80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 271477586 (0x102e6b52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652
Validity
Not Before: Jan 1 06:54:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4b18c494101f6b3985e6dc9cc554ee228e08f618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1a:68:86:02:53:f1:3d:bd:ad:5f:d3:bd:77:
c6:9c:8b:14:24:c9:88:f4:4b:61:27:ab:5b:d8:ea:
da:81:86:61:21:e1:2d:0e:2d:50:ec:1c:5e:cf:a3:
96:92:c7:67:20:de:a1:12:df:8d:60:34:1d:88:42:
22:47:a8:57:b9:03:91:a9:b8:ee:9d:96:b8:6c:26:
22:f1:a5:0d:11:c7:bb:e3:1f:48:89:4d:ad:93:d8:
7a:e2:e3:06:43:46:3d:f0:fa:9f:f3:3a:98:69:3c:
28:79:52:89:fa:45:23:6c:4d:a5:d3:d3:6c:be:06:
67:23:d2:cc:f6:36:41:82:d5:0f:09:0e:bd:7d:9a:
25:13:a4:db:e7:bc:57:15:71:c5:bb:d8:85:27:32:
19:f9:2d:0d:fb:17:9a:a5:d8:5f:aa:26:a5:d4:fe:
50:77:88:5c:78:ea:41:48:f4:9d:7b:db:09:8b:04:
4f:37:06:b0:4e:a2:f2:26:b5:b2:f6:d9:20:0b:04:
fd:bb:6b:69:e1:df:24:57:05:18:de:9e:21:99:2c:
aa:78:27:36:7c:ad:38:db:48:a2:b9:34:cb:07:9d:
b6:f3:fe:01:c7:c8:46:c0:c8:30:27:77:b9:42:bd:
68:e6:45:bb:b0:ef:35:2b:e4:ab:21:bd:06:a3:d0:
ad:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:18:C4:94:10:1F:6B:39:85:E6:DC:9C:C5:54:EE:22:8E:08:F6:18
X509v3 Authority Key Identifier:
keyid:92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/SxjElBAfazmF5tycxVTuIo4I9hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.108.0/23
45.155.111.0/24
185.180.184.0/22
IPv6:
2a0a:ad80::/29
Signature Algorithm: sha256WithRSAEncryption
5b:b4:37:3f:31:21:18:76:62:47:5b:ee:2d:5a:90:22:ef:7a:
c7:dc:95:59:6d:3e:a1:51:03:c7:1a:c0:26:d6:03:59:d9:38:
59:9d:20:e0:39:9b:d9:85:45:1e:f0:05:14:7d:12:6b:db:03:
7a:ab:d4:32:12:73:94:c9:92:0c:1c:a3:86:de:b3:d5:37:b8:
36:4b:b0:00:90:39:fe:0e:45:97:f3:d5:10:47:b4:67:e9:c5:
a2:61:a3:04:94:4a:e7:7c:8e:cf:90:6b:0a:dc:0f:4a:a1:05:
cb:4c:95:02:4b:3f:7c:b5:1a:a9:d7:7a:e7:0c:bc:2e:dd:2d:
c7:f1:75:09:9b:b9:a5:2e:a0:6c:01:96:0f:06:2c:15:2b:39:
2f:eb:66:14:6a:05:5c:df:01:df:75:1a:cb:60:99:e5:42:2b:
0c:45:c7:89:5d:ae:04:2c:e7:ea:5c:c1:90:33:af:e9:c9:3a:
03:59:ec:4f:57:2d:82:9a:c1:27:49:13:97:02:0f:34:30:19:
76:97:ca:3e:24:36:84:3b:0f:88:19:04:c4:65:53:f1:60:6a:
30:7a:94:05:1f:bc:ea:fc:61:f3:8b:77:c2:7a:f3:5c:27:3b:
a8:d1:71:46:59:6e:42:e6:4f:af:27:57:24:2a:d6:75:29:77:
75:83:87:c6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:14 2024 by rpki-client on console-ams.rpki-client.org