Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/7hbjkWF5acQUBOWb6YStoGZr39Q.roa
File: 7hbjkWF5acQUBOWb6YStoGZr39Q.roa (raw, json)
Hash identifier: tmGn6oCSgjUoMJmZCx4sQlCbHYPwTcbdT5AkXTx+Gpc=
Subject key identifier: EE:16:E3:91:61:79:69:C4:14:04:E5:9B:E9:84:AD:A0:66:6B:DF:D4
Certificate issuer: /CN=509df728d1b46634054972d2945fda58073b5762
Certificate serial: 091668C2
Authority key identifier: 50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/7hbjkWF5acQUBOWb6YStoGZr39Q.roa
Signing time: Tue 15 Feb 2022 11:35:01 +0000
ROA not before: Tue 15 Feb 2022 11:35:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208972
IP address blocks: 45.12.55.0/24 maxlen: 24
45.12.54.0/24 maxlen: 24
2a0a:4940::/30 maxlen: 30
2a0a:4944::/30 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152463554 (0x91668c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509df728d1b46634054972d2945fda58073b5762
Validity
Not Before: Feb 15 11:35:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee16e391617969c41404e59be984ada0666bdfd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:17:d8:0e:49:15:8d:d2:a1:53:cc:30:d2:43:
3a:d5:d7:24:a5:00:6b:1f:bc:c6:02:3a:ab:ff:e5:
2b:55:e2:db:16:2a:37:85:b5:88:85:69:d5:ab:62:
06:3d:f5:50:d8:3b:6d:49:a3:06:4e:25:58:07:4d:
8d:9e:8f:32:ee:f3:de:74:b4:b2:f3:e9:4f:e4:99:
5d:9e:80:c5:d0:b7:bd:ea:ef:a9:03:db:1e:b7:8b:
cc:67:5b:3c:ee:7f:76:5a:1e:bb:54:a4:52:b3:74:
05:a8:5b:0f:54:79:57:18:a5:0c:19:c0:6f:60:ce:
ea:69:b1:8a:03:f3:cd:b0:0c:ba:eb:04:12:7d:2c:
c0:90:be:e0:2d:09:e8:93:17:6c:5e:f5:d8:25:2c:
48:f7:17:5b:74:74:e0:c9:8b:63:3a:6f:0a:92:18:
78:df:64:7c:71:1f:f4:4e:d4:5b:08:5c:2f:da:eb:
2e:09:b0:43:91:f8:1d:c4:2d:1a:9a:f4:41:51:bd:
d3:9b:a1:45:df:83:9f:e8:30:47:cb:b8:b4:fc:f4:
de:79:03:35:4c:3f:03:ec:36:88:cf:e6:a7:85:55:
3d:fd:5a:b3:2a:9a:ad:37:2e:55:7b:bb:50:23:57:
7e:6e:af:76:5a:77:e7:2e:39:ad:5c:35:21:5a:13:
b1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:16:E3:91:61:79:69:C4:14:04:E5:9B:E9:84:AD:A0:66:6B:DF:D4
X509v3 Authority Key Identifier:
keyid:50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/7hbjkWF5acQUBOWb6YStoGZr39Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.54.0/23
IPv6:
2a0a:4940::/29
Signature Algorithm: sha256WithRSAEncryption
3a:a9:fc:e8:e7:43:7a:dd:0d:83:9a:d6:73:3a:58:16:f9:92:
4d:22:e0:46:47:37:64:18:8c:e3:55:07:1f:18:e0:e0:60:f9:
68:a3:b0:1b:a2:39:9c:74:91:0a:80:e3:ba:e5:71:c8:55:04:
10:69:30:c6:bb:0b:90:5e:f7:7c:47:d7:37:48:a4:e0:61:c6:
e7:3e:b1:7d:4e:b1:34:95:3b:91:9a:fd:09:69:ba:b5:bf:cd:
7e:21:20:99:44:ad:fd:88:bc:82:58:f9:f3:07:89:c1:ca:4d:
60:8b:e2:fe:e7:a4:5c:4b:2d:08:69:ba:03:5a:9f:05:70:11:
1f:99:83:b8:f3:73:8e:e9:d5:ba:f9:b2:db:58:73:c2:29:e3:
c0:12:ff:73:8b:0e:b8:1e:de:0d:d7:8b:d2:f0:5a:72:0f:9c:
8c:bd:43:cb:49:aa:e3:7b:fa:15:d1:8e:53:79:8b:c9:50:c5:
a2:7c:47:47:89:cd:cc:fe:67:9b:ad:40:6c:28:82:76:ad:0f:
a7:b7:92:bf:69:67:79:9f:fc:f0:66:d5:5f:95:56:47:12:f3:
32:cf:db:44:23:17:bd:ec:d7:36:13:dd:f4:1d:e8:48:f1:0d:
5d:e7:f1:c8:f4:7a:bd:2a:22:bd:29:00:70:34:1c:f5:40:75:
57:6b:7d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:10:09 2024 by rpki-client on console-ams.rpki-client.org