Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/G08gfGUQhTYK-GjT08JjLBb9LnY.roa
File: G08gfGUQhTYK-GjT08JjLBb9LnY.roa (raw, json)
Hash identifier: BzY/gQzLuZmQsx+miI5gxEIgzAgXQ2u7mUPSFWQtiqg=
Subject key identifier: 1B:4F:20:7C:65:10:85:36:0A:F8:68:D3:D3:C2:63:2C:16:FD:2E:76
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 03E38A2E
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/G08gfGUQhTYK-GjT08JjLBb9LnY.roa
Signing time: Tue 18 Jan 2022 12:04:42 +0000
ROA not before: Tue 18 Jan 2022 12:04:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212543
IP address blocks: 45.113.236.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65243694 (0x3e38a2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Jan 18 12:04:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1b4f207c651085360af868d3d3c2632c16fd2e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2c:e9:ee:d5:af:62:78:7d:8c:f4:35:de:cf:
83:06:c8:92:6a:4f:e2:0e:d7:96:31:cc:66:51:39:
bd:c2:ac:89:7c:75:dd:04:1f:6d:a4:b2:bc:a4:34:
ff:7f:f5:b8:29:82:91:5b:eb:74:98:72:a8:8e:d8:
86:bf:7c:48:87:38:9a:2a:c4:58:a5:86:8a:22:3a:
00:0e:e3:a0:5d:2b:85:0d:bc:4d:2e:f4:20:75:1f:
28:93:b0:8a:e4:2c:f3:c0:78:e3:d3:d3:ce:dc:be:
54:de:00:3c:66:23:f3:86:93:90:5d:db:c7:70:5c:
1e:44:c7:a2:40:8a:5c:78:e2:c6:9f:44:47:72:66:
7b:08:5d:57:4f:58:fe:51:f4:ce:30:41:e3:3d:7d:
4c:dc:89:1a:b4:61:b6:1a:e5:8a:87:c5:78:43:c0:
e8:14:8d:8c:10:75:6c:41:a8:1d:3b:57:0c:43:5a:
8f:23:65:8d:30:3e:f9:36:54:78:93:8b:df:6d:7a:
38:d2:aa:2a:04:52:6e:2e:47:58:3f:b8:74:00:06:
52:b6:48:73:05:a0:78:ea:d7:36:c4:7c:3e:b7:43:
16:a5:cb:98:8b:63:62:c0:4d:f7:79:68:f0:15:1d:
1e:0a:50:0c:13:33:e3:d8:28:8d:d2:45:7f:e7:33:
7f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:4F:20:7C:65:10:85:36:0A:F8:68:D3:D3:C2:63:2C:16:FD:2E:76
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/G08gfGUQhTYK-GjT08JjLBb9LnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.113.236.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:38:39:d6:f1:43:2e:2d:f7:6a:0d:4a:de:05:de:aa:2e:69:
bd:e4:78:e4:87:d8:3d:e5:61:9f:c6:1d:1b:af:a1:38:26:0d:
f6:8d:af:b1:7d:5b:0a:a0:e9:97:fa:97:85:8f:b3:dc:0d:39:
c5:e9:42:87:5d:81:c4:b3:13:ff:de:bd:46:ba:07:3b:24:ec:
38:4e:32:5e:7d:3d:e3:31:c4:66:ce:df:87:d9:89:6f:f7:73:
3f:9f:a4:30:22:6f:0f:c6:4e:e5:28:c3:e0:d3:28:f2:e6:0a:
2f:f9:53:3a:d1:da:82:82:df:16:0f:eb:55:53:9a:f9:5d:d0:
d4:7a:c3:3b:61:22:41:09:2e:3c:3c:b5:c9:a5:af:9f:cf:25:
f9:1f:57:d4:48:5a:3c:df:4e:59:aa:4c:a9:17:ca:87:00:84:
f7:aa:22:85:e6:fe:ba:12:76:46:8b:a9:79:5d:7b:39:68:7d:
ea:96:57:45:9b:26:11:ec:9b:c4:38:92:f5:55:7c:93:73:e2:
68:98:61:7c:67:ec:40:4d:db:63:e7:ae:5a:db:c4:c9:4f:df:
20:d7:c4:46:f0:20:14:39:70:4a:0e:43:08:33:f5:30:e0:e2:
8f:d3:b9:83:b6:09:18:cc:57:03:f0:19:4e:cf:8d:89:ad:68:
c1:45:43:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:09 2024 by rpki-client on console-fra.rpki-client.org