Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/K_0P7FvJLDGTimIujdzbXYewZQ8.roa
File: K_0P7FvJLDGTimIujdzbXYewZQ8.roa (raw, json)
Hash identifier: 0trDNYr3kI7U70SuN6vcAlOvcRwheCPUcV5WbMRdW8I=
Subject key identifier: 2B:FD:0F:EC:5B:C9:2C:31:93:8A:62:2E:8D:DC:DB:5D:87:B0:65:0F
Certificate issuer: /CN=e8d062a969d2142bb8506a571180b45bd0fab934
Certificate serial: 088F1532
Authority key identifier: E8:D0:62:A9:69:D2:14:2B:B8:50:6A:57:11:80:B4:5B:D0:FA:B9:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/K_0P7FvJLDGTimIujdzbXYewZQ8.roa
Signing time: Thu 05 May 2022 20:00:34 +0000
ROA not before: Thu 05 May 2022 20:00:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42521
IP address blocks: 45.150.206.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 143594802 (0x88f1532)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8d062a969d2142bb8506a571180b45bd0fab934
Validity
Not Before: May 5 20:00:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2bfd0fec5bc92c31938a622e8ddcdb5d87b0650f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:1a:ed:eb:bd:d9:39:79:e8:06:d9:94:a3:
2a:e0:4a:30:db:5e:59:40:f5:63:ad:8c:7d:9a:89:
a9:bd:dc:9f:e6:9f:b2:fd:96:fb:89:59:02:71:d9:
2e:c6:d1:20:95:75:52:4c:40:e8:34:7e:34:ed:87:
52:6e:e1:0e:00:3c:f3:7e:20:0e:7c:40:8e:f0:1e:
33:ac:0f:b8:66:c7:f3:d0:65:7e:09:73:5d:79:ac:
73:b0:4e:e6:5b:83:ef:05:b0:15:c5:3a:58:33:6b:
da:27:bd:8e:d0:6c:52:4f:9e:1a:00:f7:b3:dd:40:
e3:0c:bc:3d:bb:73:06:de:b4:a9:64:15:d5:29:d6:
fc:0a:be:c5:82:2e:76:77:3c:aa:7e:a5:b5:37:7e:
db:65:74:0b:6d:b2:8d:c7:88:cb:fb:f8:68:be:0b:
bd:50:0f:20:c9:ad:21:fb:26:53:e0:21:ab:b6:ca:
86:c1:91:02:6c:a1:67:ad:c1:51:7d:7e:fd:7f:8d:
32:c4:5e:24:02:0e:f4:66:3b:75:fa:7f:83:e3:5c:
47:1e:8b:7a:d3:dd:78:cd:81:a4:73:22:04:ae:94:
44:b4:d6:80:d8:c6:1d:0a:08:41:70:62:56:a9:79:
1b:c7:b8:b3:b4:4c:d1:fc:dd:88:1a:9d:1b:fa:45:
52:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FD:0F:EC:5B:C9:2C:31:93:8A:62:2E:8D:DC:DB:5D:87:B0:65:0F
X509v3 Authority Key Identifier:
keyid:E8:D0:62:A9:69:D2:14:2B:B8:50:6A:57:11:80:B4:5B:D0:FA:B9:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/K_0P7FvJLDGTimIujdzbXYewZQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/a9916a-13bf-4770-8e44-58b6a5784ab7/1/6NBiqWnSFCu4UGpXEYC0W9D6uTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.206.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:72:9b:e5:d1:d8:91:e4:d7:d1:a8:1e:1d:52:6b:4c:13:59:
e7:2b:8d:a6:f6:d5:12:e8:a3:cd:95:e9:8e:35:e4:30:2b:d6:
00:1f:43:02:f7:16:2f:7a:c7:ea:75:09:d6:68:17:b9:47:d6:
1b:76:57:e4:6b:73:f1:6b:8a:04:84:60:6e:2a:c8:5d:90:ae:
46:a6:2a:91:01:8e:6c:04:8a:78:70:31:73:18:61:bd:cb:c9:
43:df:b2:c3:50:4f:af:d3:b7:c0:8e:16:ec:a0:9a:0f:ef:fa:
91:72:47:d0:40:1c:9e:3a:05:10:63:99:14:47:e0:8d:72:b3:
b1:d1:a9:1c:63:a7:37:96:9c:dd:88:2a:51:02:87:76:f5:2b:
08:51:15:29:c0:32:0f:e5:08:75:51:63:0b:66:34:34:ec:2c:
58:b7:29:74:1e:9a:54:22:2a:d7:63:1f:b4:a2:04:49:92:bc:
42:08:8a:fd:a4:a4:ca:83:0c:29:32:74:ec:02:5b:83:f5:b0:
9e:a2:91:15:c2:3d:28:30:88:78:31:fb:d2:96:ea:0c:65:1d:
8d:c3:cc:ba:12:f3:75:99:5d:6f:0d:d1:07:1b:23:86:8a:e3:
56:d3:32:1c:50:56:30:c6:a1:01:4b:49:c8:24:90:84:83:80:
e5:6a:c8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:04 2024 by rpki-client on console-fra.rpki-client.org