Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/vqRNrH3_JjumsNYz2Ln1paI_8oY.roa
File: vqRNrH3_JjumsNYz2Ln1paI_8oY.roa (raw, json)
Hash identifier: 7Jg0/9NquudUI6FpZCdaDOT3fhyXbCxO0WfErjdHrVs=
Subject key identifier: BE:A4:4D:AC:7D:FF:26:3B:A6:B0:D6:33:D8:B9:F5:A5:A2:3F:F2:86
Certificate issuer: /CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Certificate serial: 018364F6768B4291A04D43A279C9F1F2B6E7
Authority key identifier: C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/vqRNrH3_JjumsNYz2Ln1paI_8oY.roa
Signing time: Thu 22 Sep 2022 11:30:17 +0000
ROA not before: Thu 22 Sep 2022 11:30:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208815
IP address blocks: 45.84.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:64:f6:76:8b:42:91:a0:4d:43:a2:79:c9:f1:f2:b6:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c738807abb9ce15b7a892592b6f003f1a3e16b60
Validity
Not Before: Sep 22 11:30:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bea44dac7dff263ba6b0d633d8b9f5a5a23ff286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4b:9a:d4:40:ab:50:31:5e:57:73:01:d6:34:
81:08:fd:18:a4:b3:29:7a:52:01:ea:44:7b:0b:35:
f9:77:be:14:ca:64:40:17:03:31:c7:5f:68:b6:bc:
1c:cb:0c:0b:ef:73:b2:e0:ab:4a:38:f2:aa:9a:60:
7c:96:49:59:51:d3:b8:ee:6e:70:86:a1:b9:7f:03:
97:b2:ad:cc:04:4e:11:fd:26:28:bb:0a:8d:39:03:
77:a9:a8:98:d3:75:6b:60:1f:29:7a:39:c0:f4:84:
4f:aa:be:95:a0:08:31:cc:ca:8b:30:1d:d6:52:3a:
b9:23:d0:91:76:88:7c:19:4e:22:be:d8:aa:db:bd:
fc:9d:e8:58:66:16:d0:2a:a9:0f:7a:7a:27:e3:d2:
93:c8:10:f3:09:d2:1d:f2:58:89:35:0a:4d:93:48:
73:fb:88:21:70:2f:7c:4f:65:51:c8:9a:c5:cc:ab:
48:eb:fb:c0:14:9f:ad:f4:92:2c:e1:fd:f4:a7:b3:
d5:7a:91:57:12:74:18:a9:a1:d4:fc:8f:15:63:e0:
ed:5d:a2:d3:13:3f:b6:cc:f5:34:ca:26:7c:7b:d5:
fa:4e:50:77:26:0e:83:de:16:6b:85:a4:03:57:1b:
40:3d:d8:56:6d:1e:f9:5d:93:6c:eb:9b:04:d2:7f:
46:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A4:4D:AC:7D:FF:26:3B:A6:B0:D6:33:D8:B9:F5:A5:A2:3F:F2:86
X509v3 Authority Key Identifier:
keyid:C7:38:80:7A:BB:9C:E1:5B:7A:89:25:92:B6:F0:03:F1:A3:E1:6B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xziAeruc4Vt6iSWStvAD8aPha2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/vqRNrH3_JjumsNYz2Ln1paI_8oY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1f45e9-e839-467b-b5ab-3d1f30e0923b/1/xziAeruc4Vt6iSWStvAD8aPha2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.36.0/24
Signature Algorithm: sha256WithRSAEncryption
71:5e:7b:11:b0:96:8b:c0:ad:14:6f:4b:d8:8f:91:3d:44:a1:
4c:74:1c:c9:30:5a:d4:23:ac:5f:4e:e9:55:ff:ff:98:c3:64:
80:e8:b1:51:f0:21:44:2b:78:69:f5:7f:df:fb:b6:7e:31:2d:
b4:9e:35:6d:1e:95:01:9f:18:34:64:53:ed:42:18:fa:c1:b6:
ca:50:70:76:50:9f:39:ed:0c:cd:f8:e8:47:1c:35:8f:da:ef:
af:18:19:d5:08:65:0c:15:1a:2c:b1:aa:60:f8:c5:04:49:d8:
b3:fd:42:14:9f:90:4d:2a:02:da:ae:e6:55:26:92:1d:2c:b4:
d1:15:dd:63:27:bd:a8:dc:cf:91:52:b6:d0:48:d0:ed:3b:9f:
83:68:ed:be:09:c0:01:c8:47:1d:f9:e0:75:1a:e5:18:c5:22:
5f:2a:e8:25:c8:d0:d0:e6:98:ab:a7:4a:64:60:70:25:fa:25:
0a:01:98:0b:ba:78:80:8e:4c:ef:32:33:ce:1c:ab:04:ca:a0:
b2:28:57:80:c0:a0:e4:fa:80:46:17:b2:7f:22:73:0a:7d:ce:
8a:9e:8c:6c:60:05:05:ee:0b:9c:9b:ca:84:0b:a3:6f:ee:39:
c1:28:b6:11:ac:b2:b7:42:f3:29:58:bb:77:66:ef:6b:77:4a:
8c:b0:6e:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:50 2024 by rpki-client on console-ams.rpki-client.org