Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7qLuXrG2PKkcHPSsi5gxtmLywak.roa
File: 7qLuXrG2PKkcHPSsi5gxtmLywak.roa (raw, json)
Hash identifier: sZM51tUoJb2rZE4PdUFgQDnrIJcYcgxl4Z680yJefuc=
Subject key identifier: EE:A2:EE:5E:B1:B6:3C:A9:1C:1C:F4:AC:8B:98:31:B6:62:F2:C1:A9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 11DBAC9B
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7qLuXrG2PKkcHPSsi5gxtmLywak.roa
Signing time: Thu 10 Feb 2022 09:27:53 +0000
ROA not before: Thu 10 Feb 2022 09:27:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61218
IP address blocks: 45.148.116.0/22 maxlen: 24
2a0f:e400::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 299609243 (0x11dbac9b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 10 09:27:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eea2ee5eb1b63ca91c1cf4ac8b9831b662f2c1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:10:c6:78:35:3a:c8:53:02:f6:c2:78:d6:d6:
ed:13:b9:35:ec:9c:06:3b:4e:0b:8a:91:07:3e:69:
8f:c1:49:42:2e:2c:d3:8a:d8:4b:a8:db:1e:ed:d3:
ef:f7:38:90:84:33:af:0a:ea:6a:37:be:86:57:aa:
d6:35:3e:5f:9a:c1:c2:f6:f3:c1:83:f5:89:38:c2:
1b:ca:24:35:fa:99:ff:65:24:f3:00:c3:6d:20:fc:
32:60:89:8c:ed:22:c6:ad:c6:ee:10:c6:04:44:3d:
fb:9f:f1:e3:8d:86:42:4f:1d:37:5a:72:72:d5:8e:
9e:79:3b:a4:78:af:55:90:33:bf:eb:c6:96:5a:5a:
42:5b:10:42:1e:9c:d9:04:27:8f:a9:75:76:50:d3:
12:05:b0:c5:50:0c:2f:8c:96:da:5e:c9:b7:2c:44:
c1:f7:d0:8d:3f:2d:8f:fb:9a:86:6d:56:dc:09:23:
5c:75:08:09:31:d5:45:42:a8:87:d8:91:9b:a2:eb:
eb:56:57:6c:ef:a4:14:a3:1e:60:29:57:37:dc:c4:
b9:84:35:c4:11:b1:14:ae:83:b4:83:41:80:f1:05:
bb:ad:50:e0:5b:25:a1:23:9a:12:57:c9:9f:48:e2:
af:d8:3b:55:e0:78:1c:88:8d:d4:62:c5:18:a4:93:
5d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A2:EE:5E:B1:B6:3C:A9:1C:1C:F4:AC:8B:98:31:B6:62:F2:C1:A9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/7qLuXrG2PKkcHPSsi5gxtmLywak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.116.0/22
IPv6:
2a0f:e400::/29
Signature Algorithm: sha256WithRSAEncryption
03:cb:5b:20:e3:e5:46:dc:ee:50:06:60:cf:2c:4b:1a:aa:82:
30:30:c0:1b:a2:2f:e3:54:43:77:c7:8f:80:de:cc:c8:8a:62:
ff:fd:b5:43:27:ad:2e:a5:45:0b:48:87:b1:4a:88:56:e0:87:
4e:5b:80:39:3a:d6:24:78:19:44:e1:f9:2b:73:5d:20:de:7b:
fa:89:f8:a2:b9:23:a2:ad:c4:c4:64:8a:c2:89:b4:38:df:41:
41:ff:af:4e:fd:2e:91:88:63:e0:35:87:29:1b:bb:cb:f0:25:
82:d0:54:39:15:25:87:1a:d2:c0:80:23:78:87:78:df:33:6e:
05:ca:8e:3b:de:3a:2f:a8:3c:25:03:fc:e0:27:db:00:4f:5f:
73:34:ad:31:21:6a:ec:1d:a6:8b:61:00:eb:f6:78:63:ba:9a:
13:0f:57:cb:e9:ae:23:6a:e6:79:c7:4c:fb:be:dc:69:40:0a:
45:97:3a:05:37:96:6e:62:34:c0:28:72:da:a7:5a:c6:34:09:
93:19:c9:5e:88:e4:5f:01:fd:e2:87:5e:0c:68:70:a4:6d:b3:
0a:d4:1a:f3:2b:6b:c9:62:2c:cd:89:41:58:f8:99:88:38:db:
7a:2d:5c:81:44:7e:44:ad:f3:f7:a4:8c:6e:1e:6b:7e:56:3e:
e0:3f:7f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:23 2024 by rpki-client on console-fra.rpki-client.org