Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/m6Bdd0okN4YNg92VWpJP5YUWLdE.roa
File: m6Bdd0okN4YNg92VWpJP5YUWLdE.roa (raw, json)
Hash identifier: 9oCaKrIDA2uNvg5N3U6zh5Qt4XK/0IUjEDTKjyc3z/4=
Subject key identifier: 9B:A0:5D:77:4A:24:37:86:0D:83:DD:95:5A:92:4F:E5:85:16:2D:D1
Certificate issuer: /CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Certificate serial: 05950868
Authority key identifier: 43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/m6Bdd0okN4YNg92VWpJP5YUWLdE.roa
Signing time: Sat 01 Jan 2022 15:55:30 +0000
ROA not before: Sat 01 Jan 2022 15:55:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 45.155.99.0/24 maxlen: 24
2a10:ba00:bee4::/48 maxlen: 48
2a10:ba00:bee2::/48 maxlen: 48
2a10:ba00:bee5::/48 maxlen: 48
2a10:ba00:bee0::/48 maxlen: 48
2a10:ba00:bee3::/48 maxlen: 48
2a10:ba00:bee1::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 93653096 (0x5950868)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43dfc066ce7cd3e382574a68667973b0b468df3c
Validity
Not Before: Jan 1 15:55:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ba05d774a2437860d83dd955a924fe585162dd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d4:bf:fc:56:ed:d4:5b:2d:8e:52:49:90:c9:
32:09:5a:99:86:57:41:b8:ed:c9:2a:a9:12:e3:e6:
38:f9:66:53:d9:dd:d4:fd:80:f7:4c:94:c9:de:08:
c6:32:5a:67:57:a5:ab:ac:3b:a0:38:11:2f:da:aa:
09:79:28:de:d7:a5:ff:3c:2c:50:ea:07:0d:34:5b:
e0:cb:53:20:a7:a0:5c:64:fe:f5:81:17:44:47:1f:
9f:27:6c:f2:65:ab:55:eb:25:50:5f:e2:6f:2d:86:
cd:00:bf:e5:1d:c9:dd:1f:4b:84:1c:23:ff:60:16:
85:99:85:58:32:ce:a6:5f:28:16:3d:4e:e1:8e:bc:
d6:1c:6a:18:f8:cd:29:ed:14:20:62:88:89:72:36:
f7:57:3d:fa:dc:43:6b:28:40:48:e0:08:67:28:4e:
14:db:2e:62:4f:cc:9e:26:8b:b4:e5:8a:63:d9:f7:
f3:77:d8:3f:8c:44:30:2e:94:f1:ef:d8:05:e5:c7:
79:d9:3a:0f:aa:12:d1:6b:b5:bb:ca:be:de:e8:06:
c6:15:b9:7a:39:3f:5f:98:e8:99:04:75:6f:06:84:
b3:0b:5d:4a:e2:df:34:58:e1:48:88:a6:17:5e:ab:
30:a8:44:e5:c8:28:fc:1a:a5:79:a7:a9:8c:38:7a:
21:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:A0:5D:77:4A:24:37:86:0D:83:DD:95:5A:92:4F:E5:85:16:2D:D1
X509v3 Authority Key Identifier:
keyid:43:DF:C0:66:CE:7C:D3:E3:82:57:4A:68:66:79:73:B0:B4:68:DF:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9_AZs580-OCV0poZnlzsLRo3zw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/m6Bdd0okN4YNg92VWpJP5YUWLdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1636f8-5026-404e-a1ae-2509743ad29e/1/Q9_AZs580-OCV0poZnlzsLRo3zw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.99.0/24
IPv6:
2a10:ba00:bee0::-2a10:ba00:bee5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a4:2f:ed:02:76:d3:06:11:d0:6e:29:bd:a3:99:e3:7d:46:a3:
a3:2f:2b:f5:76:6a:b9:7e:96:e0:8c:8c:81:71:8b:bd:b3:c6:
4c:a1:a0:07:dd:e4:8c:e3:0a:f5:3a:dd:be:62:c2:1e:7b:e6:
de:85:b2:ae:6f:cb:9a:8d:39:fe:49:ee:f0:a0:00:01:83:7d:
4b:c1:bf:c3:8c:c0:aa:04:ee:61:02:28:da:f6:e6:37:1d:50:
1f:96:19:59:cf:a3:5b:b0:a6:19:8b:2c:99:f9:ac:53:74:b5:
32:e8:bb:47:ce:73:d1:b4:2d:66:f0:96:0c:ba:0b:84:a3:7c:
b3:9e:e5:ea:c6:e1:f2:8a:c4:d5:46:4d:24:fd:2c:76:d8:c9:
bb:ef:da:00:58:f3:3a:81:d8:55:ba:f9:99:24:d6:14:53:02:
b5:12:54:82:7b:c9:78:0c:38:55:b2:dc:2f:cf:bc:05:cf:fe:
ce:fc:6e:5d:45:14:d7:1f:bd:4b:92:09:32:65:bc:d8:f7:4f:
55:c0:fc:ef:b0:5a:6b:48:05:69:0b:e1:fe:34:b6:c7:a4:63:
39:dc:c6:b3:c5:88:84:43:28:d0:09:e7:56:94:85:76:b1:e0:
0d:34:1c:83:82:86:46:a5:01:20:d9:55:bb:4b:a7:d3:44:b4:
f5:b3:4e:e9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:46 2024 by rpki-client on console-fra.rpki-client.org