Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/RsKfqb3sQ2LMeTnlu5zviCauN-g.roa
File: RsKfqb3sQ2LMeTnlu5zviCauN-g.roa (raw, json)
Hash identifier: tfH6rVmOfUckGvEykgukxPCrHBAwuUFynbDT7oQzmXQ=
Subject key identifier: 46:C2:9F:A9:BD:EC:43:62:CC:79:39:E5:BB:9C:EF:88:26:AE:37:E8
Certificate issuer: /CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
Certificate serial: 2C9CAD
Authority key identifier: 17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/RsKfqb3sQ2LMeTnlu5zviCauN-g.roa
Signing time: Sat 01 Jan 2022 01:58:03 +0000
ROA not before: Sat 01 Jan 2022 01:58:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210412
IP address blocks: 45.150.57.0/24 maxlen: 24
2a12:b380::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2923693 (0x2c9cad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
Validity
Not Before: Jan 1 01:58:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46c29fa9bdec4362cc7939e5bb9cef8826ae37e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e1:e8:9d:37:b1:b5:86:c9:e5:09:54:41:78:
2e:c6:30:a8:9d:aa:d4:4f:a9:4f:ce:75:99:7c:96:
86:2b:d0:89:7f:9b:46:3b:e3:98:af:93:46:e2:33:
c8:9b:02:53:a5:d0:4f:ed:ff:a9:92:e3:55:7a:03:
c2:60:ec:b9:cf:3e:5c:83:aa:74:a3:13:55:91:24:
f3:13:01:3c:64:c3:ed:7a:6f:c2:d3:c5:01:3e:95:
c6:0f:aa:d3:c0:83:6e:bd:27:54:1a:7a:bf:70:cf:
93:6f:24:70:c2:e9:52:95:1b:5d:b5:92:c0:73:f9:
8b:0e:3c:33:7f:66:62:b7:10:d4:23:f5:f7:01:36:
10:b8:cd:28:0b:82:ed:2f:1d:c3:93:fa:38:02:0c:
65:51:b6:db:d6:79:57:c2:56:f4:17:08:d0:42:4c:
1b:15:94:70:48:36:66:86:e9:7e:0d:f0:51:0c:1f:
58:d6:01:a2:9e:6c:67:4f:f3:5c:eb:c0:84:fc:d0:
2f:6b:1a:0d:9b:bf:ce:6d:45:26:8f:ea:1a:05:e5:
6b:3e:ab:52:6e:31:d5:e4:43:ce:46:29:ea:01:ca:
12:d9:17:dd:b6:c4:ba:0e:47:c9:f4:7a:0b:8a:4a:
04:6e:64:18:39:81:9f:73:b2:27:56:37:f0:7b:a5:
4d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C2:9F:A9:BD:EC:43:62:CC:79:39:E5:BB:9C:EF:88:26:AE:37:E8
X509v3 Authority Key Identifier:
keyid:17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/RsKfqb3sQ2LMeTnlu5zviCauN-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.57.0/24
IPv6:
2a12:b380::/29
Signature Algorithm: sha256WithRSAEncryption
6c:bb:0c:41:a7:78:8b:20:85:0a:b1:10:eb:36:b5:56:63:a5:
ba:5c:d0:60:5f:c5:9f:8a:99:bd:49:0b:13:96:14:fd:02:83:
a3:5e:53:75:23:a8:80:f4:f6:3c:cc:30:22:af:ab:a0:0a:e7:
89:13:9b:91:1a:63:4b:75:db:c2:29:c2:2a:4e:21:b8:0f:69:
64:9a:8f:a8:68:7e:38:02:e2:ee:c2:ec:f8:ae:7b:c8:98:67:
b7:d9:d5:fe:27:fe:88:27:ab:eb:ee:03:19:62:f5:58:91:6f:
01:43:81:3e:62:6e:67:e0:9c:52:63:0f:60:39:89:75:87:92:
24:87:1d:a4:4c:32:4f:2b:f6:07:5a:49:15:87:a5:0b:d6:fa:
cc:14:01:06:d6:4e:39:b1:58:9f:7a:38:e0:6a:5a:0a:b4:5d:
86:28:7c:1c:54:80:83:6b:eb:87:f2:cb:21:6f:25:ff:7d:25:
70:6e:07:cb:39:55:04:a6:7c:a2:f4:b5:97:cc:cf:3f:46:53:
69:80:11:7e:d0:35:de:0b:17:22:fb:d4:20:88:d8:35:6f:a5:
f6:17:34:5e:d7:85:17:3a:16:3d:5c:12:71:d6:5d:70:9c:fc:
60:a9:c4:8b:9f:59:b6:86:e6:bd:58:24:84:32:bc:41:dc:20:
15:68:a2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:03 2024 by rpki-client on console-fra.rpki-client.org