Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/DLKBok7hV9zfqIzmGJFp4UyzwfQ.roa
File: DLKBok7hV9zfqIzmGJFp4UyzwfQ.roa (raw, json)
Hash identifier: r0xSdOGs39MBnIfDPpa1A4z9ltYDZ13PXPx2VfOl6cA=
Subject key identifier: 0C:B2:81:A2:4E:E1:57:DC:DF:A8:8C:E6:18:91:69:E1:4C:B3:C1:F4
Certificate issuer: /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial: 02F470B9
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/DLKBok7hV9zfqIzmGJFp4UyzwfQ.roa
Signing time: Fri 14 Jan 2022 23:03:01 +0000
ROA not before: Fri 14 Jan 2022 23:03:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 45.84.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49574073 (0x2f470b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
Validity
Not Before: Jan 14 23:03:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0cb281a24ee157dcdfa88ce6189169e14cb3c1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:87:e1:ae:a4:75:e2:22:11:bf:68:26:41:79:
b2:64:31:53:3b:bb:b4:34:86:c9:58:6c:c9:68:65:
7b:51:4a:d9:8d:75:0a:c4:aa:88:d5:ba:a6:fc:1c:
d3:3a:57:de:88:5e:23:d2:bf:d1:58:2b:92:12:5d:
59:af:da:d3:7b:c3:9c:00:34:2a:ac:58:f2:93:79:
6f:fd:99:be:f5:37:9f:c6:18:16:35:51:a7:7c:34:
9d:01:8a:94:21:f2:d0:58:9e:64:00:aa:e2:81:ff:
ec:f6:46:c6:ed:10:bf:51:a9:8c:f2:94:97:b2:7c:
eb:74:22:87:c7:f8:58:47:c2:36:93:9b:05:bd:84:
8c:00:08:c0:b2:7c:f4:2b:67:bb:55:2d:bd:fa:27:
c1:07:e9:43:45:5d:bd:f0:0c:62:35:5f:b2:e5:5a:
2c:a5:dd:5f:4e:7d:bb:b4:e8:5c:ab:e4:16:d6:0c:
93:7a:9a:b4:cc:91:bf:dd:d7:9e:4b:32:6b:23:ed:
81:0b:85:d5:f1:49:88:b7:27:09:77:ff:2f:6d:0e:
06:ef:04:22:94:e5:12:99:0d:3a:cc:6a:c1:e0:96:
66:c2:45:9b:39:98:de:16:ec:0b:11:dd:64:20:aa:
c4:df:43:0f:1f:9d:c3:6b:3c:5f:3d:48:f3:f5:1d:
87:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B2:81:A2:4E:E1:57:DC:DF:A8:8C:E6:18:91:69:E1:4C:B3:C1:F4
X509v3 Authority Key Identifier:
keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/DLKBok7hV9zfqIzmGJFp4UyzwfQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.100.0/22
Signature Algorithm: sha256WithRSAEncryption
76:a8:a3:d2:28:f6:19:bb:53:db:6b:98:d4:61:98:3f:5e:56:
3d:8f:c0:3d:02:5b:dd:3d:8a:a6:07:56:a3:e3:a5:9e:73:9a:
af:50:b2:9d:45:15:8a:1a:e5:44:92:4a:4c:de:3e:7a:89:68:
ae:3d:e4:32:d3:c1:86:37:7e:2b:f6:07:2f:22:43:c4:39:81:
9f:02:03:95:37:bd:72:bc:f7:c3:09:5b:35:b8:c3:37:37:32:
14:79:69:9b:3e:10:da:c0:09:eb:e0:3f:be:84:d9:c6:aa:21:
51:be:ea:3f:30:36:b2:07:22:30:33:fe:da:73:84:37:9d:e6:
3d:31:33:fd:cf:e5:09:86:90:e3:b5:ca:aa:3d:0c:27:4a:5f:
3e:88:c2:e7:c1:e7:e6:1e:c2:41:b4:07:30:75:67:e3:72:bf:
89:b5:84:1d:fa:73:c3:ee:43:66:e8:be:27:d4:bf:3f:06:2d:
38:25:fd:5d:af:7b:9d:1f:66:91:da:68:74:5d:ba:40:1f:c7:
f2:c9:95:bc:be:14:c4:b5:ef:1d:8c:03:0d:99:46:12:b8:d0:
58:ec:29:d7:bd:16:67:0e:dc:ac:d4:ed:ed:fb:b0:db:36:e0:
00:41:c6:ad:a0:43:84:e9:7a:5e:c1:ac:86:2b:f4:a3:23:8d:
d2:3b:f5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:19 2024 by rpki-client on console-fra.rpki-client.org