Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/1-g9OuvI0PFrP9Mm70HCkoFG0lUI.roa
File: 1-g9OuvI0PFrP9Mm70HCkoFG0lUI.roa (raw, json)
Hash identifier: 7CHhpD3DhJz0RnZlOLhXDkROB0ps9oYdmdNiUGUE/nM=
Subject key identifier: FA:0F:4E:BA:F2:34:3C:5A:CF:F4:C9:BB:D0:70:A4:A0:51:B4:95:42
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 01826E07386C99998FBD8BD51659A01A0245
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/1-g9OuvI0PFrP9Mm70HCkoFG0lUI.roa
Signing time: Fri 05 Aug 2022 12:42:23 +0000
ROA not before: Fri 05 Aug 2022 12:42:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 63023
IP address blocks: 45.80.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6e:07:38:6c:99:99:8f:bd:8b:d5:16:59:a0:1a:02:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Aug 5 12:42:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa0f4ebaf2343c5acff4c9bbd070a4a051b49542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b5:5e:74:3d:a1:8e:50:1b:81:8e:7a:f9:98:
55:f1:b5:06:b4:a3:78:4a:1a:00:8d:58:f4:05:4f:
a8:90:67:c5:88:8e:c4:35:3d:a5:81:f0:04:5a:d2:
32:15:e3:c1:f9:f9:b0:7d:95:58:82:4b:2c:93:94:
be:aa:b1:4e:c8:fc:cf:32:ef:19:f5:4e:f5:cb:0b:
4a:a5:43:fe:26:36:9d:ef:ed:ec:57:d0:0a:b0:87:
63:d0:a9:67:87:77:de:43:38:ce:ef:72:73:c3:15:
98:58:88:86:4c:57:89:83:6f:04:77:7b:30:13:69:
64:aa:83:b3:03:67:1b:9d:44:7f:f9:f1:95:96:c7:
22:57:34:d9:07:a3:b9:a1:64:a3:6a:ad:53:3d:9c:
f7:ca:ad:f4:aa:c8:21:6c:ef:40:31:f5:a0:35:19:
71:bc:3e:46:65:b3:70:70:7f:75:52:1c:d1:b8:a1:
ff:71:bf:ca:f0:e9:ad:19:6c:4a:f3:ac:f1:d4:d4:
cf:14:09:1d:7b:54:50:97:05:b8:f0:15:90:68:0e:
83:31:29:27:59:2a:59:c8:99:8a:87:54:e7:e4:e8:
36:ce:e4:61:ed:d7:ad:84:f0:1f:f4:7c:5e:e4:b0:
bb:0e:77:2c:1f:be:e7:4d:72:56:13:93:32:ad:f1:
96:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0F:4E:BA:F2:34:3C:5A:CF:F4:C9:BB:D0:70:A4:A0:51:B4:95:42
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/1-g9OuvI0PFrP9Mm70HCkoFG0lUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.30.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:e9:7a:d1:d8:69:8d:86:2b:72:5e:b4:ef:dd:29:ed:1e:0a:
fe:c1:d1:01:2f:c5:c1:8c:30:f9:d0:3e:95:74:a8:9f:fc:19:
ad:cf:e1:bc:fb:3c:6a:6d:11:b1:86:c3:91:0d:49:41:00:0a:
17:07:f9:33:5d:2e:cc:5f:7b:bd:3e:4c:c4:0d:80:d7:8d:e0:
a6:bb:cd:a4:0e:89:6c:87:7c:e6:1a:9e:08:36:7d:4a:dd:b8:
53:5d:3d:18:ee:6c:98:f0:f0:ed:65:2b:d2:38:c0:6c:4c:ec:
a9:c2:86:de:ae:35:99:e9:88:12:ed:03:4c:43:d7:79:6a:76:
5c:aa:20:74:16:23:be:94:5d:08:72:a0:bf:05:a7:0e:c4:1f:
91:f3:2c:55:bc:a8:06:c4:04:b1:1a:a0:cc:9f:1a:e1:31:99:
1e:7b:78:ee:73:71:67:79:e0:6d:a1:aa:1c:eb:76:a5:1a:9d:
8c:73:9c:21:7d:33:4c:c7:d0:fa:ac:cb:60:af:77:02:e8:01:
9d:ea:2d:26:ca:ba:9d:04:5f:00:aa:25:c6:66:01:21:dd:9a:
89:59:32:4d:e6:e9:f6:80:28:c1:e2:69:3f:e4:ad:d7:62:5a:
dd:e3:68:90:c0:95:3b:63:16:23:8d:65:9d:2d:2b:e2:d8:77:
ac:e3:a1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:38 2024 by rpki-client on console-ams.rpki-client.org