Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/GevWZugCT2tLmk68PXNK5UTcBzc.roa
File: GevWZugCT2tLmk68PXNK5UTcBzc.roa (raw, json)
Hash identifier: su8jUY5brqrniLMSoPgXyOxCipjR8mAxi7fEkuEaK84=
Subject key identifier: 19:EB:D6:66:E8:02:4F:6B:4B:9A:4E:BC:3D:73:4A:E5:44:DC:07:37
Certificate issuer: /CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Certificate serial: 01826D51F238913CB88B66BAF42E84D8B56F
Authority key identifier: 5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/GevWZugCT2tLmk68PXNK5UTcBzc.roa
Signing time: Fri 05 Aug 2022 09:24:23 +0000
ROA not before: Fri 05 Aug 2022 09:24:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 22773
IP address blocks: 45.151.70.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6d:51:f2:38:91:3c:b8:8b:66:ba:f4:2e:84:d8:b5:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c892aed3833e6100f5e0cf12271fd80b755c361
Validity
Not Before: Aug 5 09:24:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=19ebd666e8024f6b4b9a4ebc3d734ae544dc0737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:d7:c7:cf:d4:96:35:57:ea:ff:5b:20:a8:
bb:12:96:e2:d8:b1:dc:cb:c8:31:5c:43:4f:98:5e:
8c:a8:7d:62:ce:29:02:21:cc:80:33:52:85:d4:c4:
0c:91:4b:3e:d3:cb:09:1a:36:d1:c4:29:26:53:7a:
b6:ee:2e:18:a4:31:d5:9f:44:78:88:8a:2a:f6:15:
c5:04:84:80:70:8c:0f:ff:4b:7f:52:58:ef:bb:c8:
ad:87:46:79:23:fe:03:e6:3d:b4:61:3c:40:8e:fe:
88:80:db:c4:31:6a:4c:eb:e5:76:52:40:21:96:f1:
1d:9e:49:66:48:e4:7c:b1:81:e9:28:5f:16:c6:06:
8e:41:47:d4:05:7b:b3:99:96:cb:a9:f1:ab:03:59:
8e:de:38:bf:50:c9:5e:86:d2:da:9d:23:51:0b:9b:
5d:74:cb:67:46:00:b3:30:07:bd:a0:73:2b:a2:5e:
cd:6a:49:2f:b4:2d:70:f7:e4:20:a3:cd:f5:ff:54:
ce:5b:a1:56:b3:eb:c1:bc:04:dd:48:47:2e:4e:a8:
3b:9a:29:2a:e2:5b:f9:37:ec:6e:de:84:96:ef:ee:
8a:13:a5:66:1a:e2:70:49:aa:a3:d6:35:e5:a0:9f:
54:9a:34:97:bc:c7:34:c1:80:ab:86:4e:c7:1e:1b:
c0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EB:D6:66:E8:02:4F:6B:4B:9A:4E:BC:3D:73:4A:E5:44:DC:07:37
X509v3 Authority Key Identifier:
keyid:5C:89:2A:ED:38:33:E6:10:0F:5E:0C:F1:22:71:FD:80:B7:55:C3:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XIkq7Tgz5hAPXgzxInH9gLdVw2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/GevWZugCT2tLmk68PXNK5UTcBzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/86fb46-d712-4602-9cce-3aa7daa9d3ec/1/XIkq7Tgz5hAPXgzxInH9gLdVw2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.70.0/24
Signature Algorithm: sha256WithRSAEncryption
78:c4:f5:63:63:fb:37:09:39:7b:62:9f:1e:7c:5c:04:79:74:
54:c4:c7:dd:f6:d2:5d:cc:24:69:0c:5e:9b:04:6d:4e:53:3d:
a5:7a:37:3d:20:34:a5:a3:7f:0f:03:ce:34:26:64:25:2c:71:
66:f5:ba:c0:d4:92:ba:98:5a:80:2c:5c:dc:f9:95:06:f3:1e:
af:af:f4:05:b3:c3:22:a1:58:da:3d:50:6e:c5:d9:5c:69:1c:
7f:da:70:fc:a2:71:46:b3:48:5f:7e:0c:04:c7:c4:f5:90:2f:
9b:f7:46:01:c6:29:55:17:c9:90:ce:29:04:9c:6a:ad:b8:4a:
2c:1c:05:4c:36:20:32:f2:a0:36:7c:cb:82:2e:73:48:f0:7c:
f1:2b:83:ad:8d:d6:bc:99:e5:80:82:39:5a:7b:b0:5c:f2:91:
38:05:ce:6f:38:f4:a8:af:13:27:a1:ea:99:c6:99:91:56:2c:
f2:97:b8:fe:3f:f2:91:8f:15:27:14:9e:e9:1a:24:a5:30:4c:
1d:e9:f3:63:a1:d3:1f:b9:6a:02:01:8a:8a:e2:ef:87:9f:8f:
f3:41:63:09:9d:dd:80:6d:10:3e:af:d1:67:94:25:3a:dc:d6:
51:98:48:fc:11:a6:46:ad:51:47:83:f0:dd:4f:f9:0d:31:72:
cb:d2:33:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:03 2024 by rpki-client on console-fra.rpki-client.org