Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/CkGQ2ez9ih8yOjsLkjOMo17qfQQ.roa
File: CkGQ2ez9ih8yOjsLkjOMo17qfQQ.roa (raw, json)
Hash identifier: UJy4rDuKkSe9/kU/ZvKhTTy1FQYnKONdFkI7a1aKm8Q=
Subject key identifier: 0A:41:90:D9:EC:FD:8A:1F:32:3A:3B:0B:92:33:8C:A3:5E:EA:7D:04
Certificate issuer: /CN=78356c6a831680e9b8b7c95514953007a9407e87
Certificate serial: 0755F060
Authority key identifier: 78:35:6C:6A:83:16:80:E9:B8:B7:C9:55:14:95:30:07:A9:40:7E:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/CkGQ2ez9ih8yOjsLkjOMo17qfQQ.roa
Signing time: Sat 01 Jan 2022 11:02:53 +0000
ROA not before: Sat 01 Jan 2022 11:02:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3223
IP address blocks: 185.181.104.0/22 maxlen: 24
45.87.156.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123072608 (0x755f060)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78356c6a831680e9b8b7c95514953007a9407e87
Validity
Not Before: Jan 1 11:02:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a4190d9ecfd8a1f323a3b0b92338ca35eea7d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:75:5a:0a:43:25:43:22:2b:6e:bc:34:66:7b:
46:23:9b:26:e6:dc:d7:df:5b:a9:d1:1d:ec:3d:0c:
31:5e:81:c3:37:b4:a4:29:f9:9e:5e:74:08:c6:29:
e7:0b:8a:32:75:51:b7:1e:7c:ef:6e:63:35:8e:ff:
fd:e0:42:36:64:73:74:ed:47:e3:13:25:5d:26:b7:
18:be:29:f0:2d:b3:e7:0e:50:06:b3:e8:4e:58:99:
90:ff:e9:54:80:45:d4:8d:e3:a8:a8:d4:40:1a:b1:
15:f6:ef:26:43:3c:37:e6:61:bc:b6:02:6d:ca:09:
d6:21:55:28:8c:50:ae:52:dd:f2:e5:5f:a1:f6:40:
4c:14:41:0c:b2:6e:9d:8c:89:75:53:5d:79:46:02:
e4:1a:03:7e:f4:18:7d:ae:48:aa:24:06:83:6d:f1:
d3:d7:41:1a:f6:38:ee:c2:c7:54:45:78:11:04:68:
20:6e:a8:0e:64:6f:05:19:c4:77:24:0c:b7:c1:57:
80:ef:7a:52:65:ae:b0:25:fa:ae:29:35:d2:8d:34:
8c:2a:69:32:3d:4e:8a:9f:6e:37:78:6f:e2:15:9e:
b4:99:14:c0:6c:b1:17:b5:25:b1:d7:de:d4:dd:0c:
c8:a7:3b:0b:66:dc:f5:48:c9:c4:14:89:8f:ea:08:
94:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:41:90:D9:EC:FD:8A:1F:32:3A:3B:0B:92:33:8C:A3:5E:EA:7D:04
X509v3 Authority Key Identifier:
keyid:78:35:6C:6A:83:16:80:E9:B8:B7:C9:55:14:95:30:07:A9:40:7E:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eDVsaoMWgOm4t8lVFJUwB6lAfoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/CkGQ2ez9ih8yOjsLkjOMo17qfQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/8d9136-1cb2-4349-ab86-5dc392de637b/1/eDVsaoMWgOm4t8lVFJUwB6lAfoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.156.0/22
185.181.104.0/22
Signature Algorithm: sha256WithRSAEncryption
c0:10:8f:24:65:4a:53:5e:5c:95:3c:34:a4:f2:99:59:05:9a:
9f:af:cf:a7:f9:85:24:4f:ab:a7:30:64:b4:7a:c5:fa:fa:54:
f3:79:db:f4:66:e1:f5:05:0c:5d:ed:36:b7:2d:e6:56:9d:09:
66:0d:1c:a4:75:c3:e6:12:21:9c:0d:a6:d4:c3:8c:3a:68:f9:
1b:3e:3d:6c:5f:3b:2a:2d:2b:9e:3b:c0:bf:62:61:03:1c:e0:
3f:f7:42:69:45:dd:dd:52:2f:93:d5:74:8b:b9:eb:e0:4a:f2:
d2:f5:2e:de:23:97:ed:fa:65:51:50:52:28:3b:8e:0d:b4:46:
94:f4:26:81:5c:50:d2:7e:ba:b8:59:d9:61:5f:4a:76:bd:3a:
a7:e7:4b:92:4a:9b:80:0a:75:31:d3:bf:8c:96:fd:1b:24:1c:
db:61:6d:9c:b3:50:e4:c2:59:f8:c4:aa:9c:da:2e:59:1a:bb:
10:1e:e2:27:0c:86:2f:a7:ad:2c:24:e7:9e:35:b0:cf:76:ae:
1e:ca:c4:3f:4a:d9:0a:41:2e:84:26:bb:4e:4e:b3:9c:18:30:
cc:f6:02:16:3b:30:74:05:e9:90:0b:1f:cf:a8:f1:34:e5:b6:
cc:6b:d5:09:20:44:13:c4:79:b9:68:09:e7:6e:6c:dc:96:01:
d5:2e:cd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:15 2024 by rpki-client on console-ams.rpki-client.org