Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/wkq2Bu3FZy55a7u2TSKvTLnxTYI.roa
File: wkq2Bu3FZy55a7u2TSKvTLnxTYI.roa (raw, json)
Hash identifier: 6UbEWkWRnxObeDRnhYk7EPmydOgL2CsoOpm4Oo+zTxk=
Subject key identifier: C2:4A:B6:06:ED:C5:67:2E:79:6B:BB:B6:4D:22:AF:4C:B9:F1:4D:82
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 0181ED5B43629C39FE0BEA3457307F584E5E
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/wkq2Bu3FZy55a7u2TSKvTLnxTYI.roa
Signing time: Mon 11 Jul 2022 13:03:09 +0000
ROA not before: Mon 11 Jul 2022 13:03:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140947
IP address blocks: 45.80.31.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:ed:5b:43:62:9c:39:fe:0b:ea:34:57:30:7f:58:4e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Jul 11 13:03:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c24ab606edc5672e796bbbb64d22af4cb9f14d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d5:e7:37:03:30:29:ad:42:96:a3:9f:f0:e7:
70:22:0c:c3:fc:cf:90:d2:69:63:32:51:b1:4b:31:
6f:1b:9b:d6:c8:e2:05:0c:60:f3:38:40:6b:02:53:
e2:0d:58:3e:d0:71:f1:eb:0b:5f:13:fc:ff:9e:98:
ec:81:63:68:eb:53:ee:c9:19:b2:19:64:c9:53:2c:
f9:dd:56:62:a1:54:40:2b:bf:8d:86:3d:e1:03:58:
4a:78:64:88:2e:e5:4b:33:65:0e:8d:94:3b:1b:8e:
c0:26:bf:ef:7d:3e:97:3a:b3:60:2a:b8:1d:26:3c:
e4:b0:4f:e3:88:68:95:4e:34:f3:65:e1:6a:22:5c:
98:6e:7d:9d:f2:4e:6d:37:8f:78:fb:d2:0e:2c:3c:
65:fd:01:fd:c1:e3:47:20:9e:c3:7f:ac:4f:c3:7e:
6a:b1:86:8b:98:54:a4:f6:0e:3f:95:c6:cf:56:f2:
c5:af:e7:3f:5c:60:0b:e5:ab:30:52:c0:1c:ec:ac:
28:3b:b0:88:7b:8f:eb:2b:6b:77:fe:fa:ca:ed:e9:
9d:9d:c3:6b:12:c4:d6:b4:b9:0a:5a:1f:0a:3f:77:
39:f6:a0:8e:d2:08:19:d2:33:c8:39:a2:2d:52:74:
91:cb:89:c0:42:f1:58:e0:91:af:12:a9:68:9e:e4:
7e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4A:B6:06:ED:C5:67:2E:79:6B:BB:B6:4D:22:AF:4C:B9:F1:4D:82
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/wkq2Bu3FZy55a7u2TSKvTLnxTYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.31.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:e6:48:be:52:d8:f9:12:d7:2d:01:24:32:2b:8f:ad:72:d3:
f7:3a:8d:b8:95:c4:d3:3f:d7:42:08:72:33:a4:fc:58:11:af:
db:29:80:df:62:43:c2:ef:21:13:4f:5a:79:51:c9:89:bc:5e:
ca:8a:c4:29:e7:f6:43:20:e6:55:b1:9e:14:67:35:5c:99:30:
2d:51:87:4d:39:f2:9f:f5:bd:46:8e:78:76:5d:1d:e3:9d:23:
30:27:6a:8f:ea:6a:da:79:29:ae:ef:1e:7f:64:21:bb:cb:30:
57:c1:c5:70:44:27:cf:03:3c:d9:6a:f9:dc:5e:fc:79:39:1e:
c7:7f:92:8d:6b:0f:4a:42:73:bf:91:b7:b7:83:62:c4:c2:7f:
3a:ce:0e:7d:2a:76:bc:b0:9e:b5:78:ce:62:75:60:a1:60:36:
8c:05:d7:b3:56:2d:d7:f8:9f:94:0e:db:4f:f6:e4:6a:34:49:
69:d1:e9:3b:ef:50:0d:a9:0f:55:89:3b:46:61:d6:15:0c:b9:
9e:24:03:3d:65:8c:e9:be:18:81:86:df:b7:c5:1c:72:ba:7a:
0d:fc:ea:9e:8e:bf:0f:bd:c6:b3:38:53:0c:34:ac:17:64:c9:
a1:b0:26:8b:b6:e3:9c:72:c8:50:3b:e3:89:b9:12:82:6f:5f:
78:fd:2a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:39 2024 by rpki-client on console-ams.rpki-client.org