Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/BD-QAxaMiWat3IDAfGM7qNkEslY.roa
File: BD-QAxaMiWat3IDAfGM7qNkEslY.roa (raw, json)
Hash identifier: rISamUuNZepysz61gQDo3q2X9vdb/NYGvX82VHMvr+k=
Subject key identifier: 04:3F:90:03:16:8C:89:66:AD:DC:80:C0:7C:63:3B:A8:D9:04:B2:56
Certificate issuer: /CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Certificate serial: 075F3E9F
Authority key identifier: 40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/BD-QAxaMiWat3IDAfGM7qNkEslY.roa
Signing time: Sat 01 Jan 2022 07:59:14 +0000
ROA not before: Sat 01 Jan 2022 07:59:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 45.129.192.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123682463 (0x75f3e9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40d55b78836a93fb6f9ec9fa7a79ed9b8bea2ba1
Validity
Not Before: Jan 1 07:59:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=043f9003168c8966addc80c07c633ba8d904b256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:94:d2:51:53:96:00:32:23:d5:5f:d3:b2:83:
17:6e:d4:1f:fa:41:b8:1d:1b:f4:d1:f7:1d:9c:88:
c3:dd:18:9a:a2:29:6d:42:6b:f5:d9:72:04:43:0b:
99:14:1c:66:f2:b8:b2:96:bd:23:7b:e1:6f:ae:c7:
08:f0:3f:61:7b:ef:19:e5:6b:b3:1c:c2:37:3f:68:
bc:7f:6d:87:20:8e:e1:0f:dc:6f:85:5a:14:e4:f8:
d6:c9:49:89:c4:79:61:1f:79:9f:b9:90:6a:a4:c5:
ba:22:e5:c5:0b:9d:a9:b5:64:33:f0:3d:b4:52:9a:
60:50:b4:03:3e:fc:e3:c2:52:63:ac:89:0d:c3:78:
2d:4e:24:76:75:2e:c2:3a:5c:68:2a:93:b0:7b:11:
01:23:07:c8:5d:d1:11:85:6b:9e:31:d1:03:57:f8:
9e:a3:51:c3:b0:9a:43:e3:51:2a:a9:01:47:dc:94:
e1:c0:94:ea:99:9e:be:7a:aa:9a:49:d3:68:90:84:
a2:a7:56:a7:b0:37:2f:97:55:ec:f4:12:16:00:a7:
93:e4:36:66:61:c9:84:19:39:0c:c7:2f:37:0e:23:
70:2b:4a:e2:c8:67:c8:a7:f3:43:e1:4e:a2:5e:d2:
f4:8a:84:ec:bc:41:95:f8:73:12:59:c9:28:33:b7:
2c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3F:90:03:16:8C:89:66:AD:DC:80:C0:7C:63:3B:A8:D9:04:B2:56
X509v3 Authority Key Identifier:
keyid:40:D5:5B:78:83:6A:93:FB:6F:9E:C9:FA:7A:79:ED:9B:8B:EA:2B:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QNVbeINqk_tvnsn6enntm4vqK6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/BD-QAxaMiWat3IDAfGM7qNkEslY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c76d85-6864-4b37-bdb3-92e8be6279bb/1/QNVbeINqk_tvnsn6enntm4vqK6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.192.0/24
Signature Algorithm: sha256WithRSAEncryption
58:ae:75:03:d1:f1:b9:92:b7:ea:77:8b:47:0d:78:19:e5:20:
f1:db:a8:82:fb:44:85:2a:05:79:25:81:ee:4d:78:39:6f:5a:
7f:a5:cf:53:00:c4:d3:52:80:7e:d7:9b:f3:56:56:71:35:da:
cb:99:49:8c:58:e9:cc:2e:77:6e:47:42:13:3c:28:b0:ea:48:
6c:65:ce:e8:0d:32:25:77:e3:f7:c2:45:ed:68:e3:76:10:05:
bc:f3:23:d3:68:93:c8:7d:72:47:5a:17:8d:3c:86:1b:88:65:
4d:45:47:3b:04:12:fc:d8:a8:5d:a4:5a:8b:60:f2:42:7f:33:
2f:8b:0c:9e:dc:1f:dd:80:94:35:56:e4:bf:a3:c0:aa:94:5b:
71:3c:8a:12:ee:6e:d7:d9:5b:0b:60:0d:20:79:b2:f3:c8:15:
a0:bc:5b:c6:c5:33:23:99:ad:4b:5b:f5:e8:f5:bb:fb:c0:17:
5c:61:f2:6e:2d:51:c3:7a:ce:9d:15:40:a0:c1:d9:9d:90:4f:
2b:6d:ed:9a:d6:30:e0:66:31:c6:92:63:78:71:77:ca:96:83:
c1:9a:1a:6f:98:e3:d0:26:94:c3:72:0b:91:f5:06:a6:91:71:
c6:0c:e3:ce:24:37:bd:59:52:0f:68:d1:d8:5e:78:6e:dc:cd:
52:83:c4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:00 2023 by rpki-client on console-fra.rpki-client.org