Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/7UQxf4I2bonBJ7nLbHD_pQNYrsU.roa
File: 7UQxf4I2bonBJ7nLbHD_pQNYrsU.roa (raw, json)
Hash identifier: kG/0D9C+kAI63AnCjlLAt2kJi/j+gZagcnVMK15NUUk=
Subject key identifier: ED:44:31:7F:82:36:6E:89:C1:27:B9:CB:6C:70:FF:A5:03:58:AE:C5
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 0A0752AD
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/7UQxf4I2bonBJ7nLbHD_pQNYrsU.roa
Signing time: Sat 01 Jan 2022 05:03:26 +0000
ROA not before: Sat 01 Jan 2022 05:03:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 141.98.47.0/24 maxlen: 24
45.133.158.0/24 maxlen: 24
45.133.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 168252077 (0xa0752ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Jan 1 05:03:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ed44317f82366e89c127b9cb6c70ffa50358aec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:65:7e:41:f2:5b:78:3e:af:38:29:01:55:7b:
5e:b9:a4:09:6e:ab:49:d8:69:ab:70:97:09:a7:ed:
5b:39:35:1f:65:a4:60:13:07:96:f6:85:50:84:7b:
f1:a6:da:49:1b:e9:eb:fd:d7:56:ff:5d:72:e4:29:
eb:d5:67:9b:3c:38:0d:10:6d:c0:f7:3f:cb:81:4d:
da:e8:cf:11:2e:5c:32:65:2e:0a:ec:65:ec:0b:48:
69:e4:bc:e2:42:8b:e9:f2:d6:c7:6a:e0:f9:be:52:
f1:d2:ad:26:b9:de:41:70:08:49:a7:74:53:06:a0:
99:ac:db:c0:9f:3d:bd:58:d1:be:81:63:7f:f4:da:
3d:df:d9:49:76:ad:24:c1:1d:5c:23:56:63:7f:6c:
5a:3d:32:87:74:e2:ef:da:3a:f8:ad:c2:c2:11:d6:
1f:80:83:51:f2:86:bf:ac:3c:a0:f1:3a:2b:44:eb:
9b:5f:df:f0:da:bf:14:9b:2a:5f:e0:cb:b8:75:60:
a4:14:fc:fb:91:89:ef:2a:75:f5:10:87:7f:2a:a7:
bf:ae:3c:3a:03:66:63:6a:98:d4:3d:e2:84:93:fd:
21:31:2f:f7:61:27:97:e6:86:79:53:3f:f8:bf:6a:
35:0b:b6:72:3e:14:55:9a:3e:4d:61:d7:2e:72:62:
22:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:44:31:7F:82:36:6E:89:C1:27:B9:CB:6C:70:FF:A5:03:58:AE:C5
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/7UQxf4I2bonBJ7nLbHD_pQNYrsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.158.0/23
141.98.47.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:57:d0:e0:c6:65:8a:40:e8:14:4e:fa:44:fd:88:13:40:d4:
54:15:11:26:b5:26:97:51:c1:42:d5:34:34:97:e7:9a:fb:ec:
99:a1:13:a2:a0:e7:b6:e5:c9:33:5c:e7:eb:e1:32:f0:88:e2:
a2:19:ad:0e:bd:67:c4:d2:c2:71:12:7a:a9:f9:55:c1:f3:cc:
81:28:e0:24:b9:40:80:76:78:6b:7d:8b:59:f2:c4:ae:b2:86:
1b:02:e1:57:f0:6b:d7:57:52:2e:d5:39:05:fb:c3:93:60:1e:
64:39:75:fd:9d:fc:97:e4:93:05:8a:78:d0:71:62:bb:a3:ba:
25:2a:67:4b:17:c2:43:dd:70:55:ed:03:b5:d5:72:f9:27:ad:
09:20:f3:74:73:88:75:8f:92:f6:00:6e:a3:b7:67:f8:0f:46:
da:6b:c1:16:5d:2f:55:10:3e:b2:9d:a2:1f:e1:84:1c:cd:d2:
f3:0f:b5:50:dc:73:03:02:31:c9:08:5e:db:dc:40:20:de:01:
9e:95:52:46:01:eb:67:05:25:5b:4d:a0:2c:ea:93:7c:97:32:
bc:c7:08:d6:2d:93:6b:a1:a0:e5:2c:55:62:e2:f8:71:9d:c4:
1b:b8:44:55:82:b0:4d:e1:ef:9d:3d:59:d0:cf:e6:cb:44:ce:
7c:27:c8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:59 2024 by rpki-client on console-fra.rpki-client.org