Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/k0pGyFScODBXtOT6z3b7GLMHe08.roa
File: k0pGyFScODBXtOT6z3b7GLMHe08.roa (raw, json)
Hash identifier: 8yqknIlaDAbZElMyDnQGl1QxjbkYC3M6rzW7Gu2O9/k=
Subject key identifier: 93:4A:46:C8:54:9C:38:30:57:B4:E4:FA:CF:76:FB:18:B3:07:7B:4F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01851561DE5E49D6EB8513659396074611CC
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/k0pGyFScODBXtOT6z3b7GLMHe08.roa
Signing time: Thu 15 Dec 2022 10:43:33 +0000
ROA not before: Thu 15 Dec 2022 10:43:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 138687
IP address blocks: 45.88.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:15:61:de:5e:49:d6:eb:85:13:65:93:96:07:46:11:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Dec 15 10:43:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=934a46c8549c383057b4e4facf76fb18b3077b4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c2:39:65:97:75:10:0a:1c:c9:fa:fc:a1:8e:
2b:07:ff:e9:a7:f3:d1:70:87:8e:cc:3b:6a:f8:c4:
83:e6:b9:b9:af:c2:d5:33:ec:27:3d:ea:c3:cd:35:
34:7e:86:ba:2b:26:fe:cf:a5:11:f2:a4:fa:75:05:
6c:d4:8d:2a:ad:61:64:d8:2c:9c:61:2b:d5:df:82:
8d:ca:1e:77:b4:19:96:40:79:97:4a:0f:8b:a9:fe:
88:da:6d:e1:11:a1:e1:35:c3:2a:56:ca:32:4f:43:
fd:c1:f9:ee:b0:c8:62:1a:05:cc:ab:0b:a9:c5:c7:
12:82:d0:31:b5:c6:7e:66:74:45:12:e2:61:59:78:
6b:17:7d:e3:c5:53:25:8a:33:03:70:56:fc:1e:d4:
45:1c:59:09:be:63:48:f2:00:7d:1f:26:2b:35:29:
f2:64:0e:d2:e7:68:c5:98:ab:24:bf:e0:86:00:7a:
d6:f0:a4:e3:ef:b5:2c:72:10:57:28:d9:92:eb:f9:
7c:5a:5c:f3:a4:ca:2a:64:80:60:1d:a0:eb:d4:4c:
32:15:9c:0c:0f:03:f4:3a:13:89:de:b0:17:ce:73:
04:8a:65:4b:0f:09:1c:e9:f3:f2:dd:06:4e:19:f6:
dd:e9:1a:66:14:ff:2b:45:76:b0:22:5e:b4:dc:75:
8c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4A:46:C8:54:9C:38:30:57:B4:E4:FA:CF:76:FB:18:B3:07:7B:4F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/k0pGyFScODBXtOT6z3b7GLMHe08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.14.0/24
Signature Algorithm: sha256WithRSAEncryption
94:b3:64:10:91:cf:9c:78:fb:8b:6e:c4:31:ba:bc:e1:e1:4d:
fb:39:f5:94:ef:95:92:f2:17:f2:ea:eb:7a:d9:c9:52:18:dd:
69:bd:ad:18:b7:71:25:58:c4:33:83:b3:a6:39:ef:f7:e6:72:
e2:af:3b:58:7a:bd:41:c1:1d:16:aa:14:93:ec:c4:b5:52:cb:
41:6b:79:44:fc:bb:ee:d9:52:63:09:ce:ec:fc:c9:89:1b:88:
ae:37:69:c7:6d:33:f8:d8:c6:0e:08:c2:20:6f:17:1e:19:81:
a5:87:4a:9f:2e:b1:59:c8:7a:b1:e8:34:5e:d9:39:c6:c4:e7:
c3:c5:21:bc:c3:3a:b9:61:af:4d:97:67:f9:66:e4:24:3b:86:
f6:d8:fa:49:c4:21:9e:a5:f7:e0:ba:b6:cf:44:29:96:37:09:
e5:c3:24:2c:08:19:36:5d:2d:8b:7b:7c:41:bf:af:84:76:ce:
cb:03:7f:d7:41:34:0c:76:eb:7f:7c:b9:3e:2a:e0:31:f6:d3:
d7:99:c6:7d:d3:5b:f0:2b:b8:69:23:e9:f9:65:46:f5:5e:4c:
34:f0:84:b2:a1:58:a0:4d:eb:72:3f:74:43:d7:de:f3:f4:bd:
d6:72:db:f4:68:a2:8d:98:40:3a:db:10:6d:2c:b2:6e:13:e8:
a2:bf:26:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:14 2024 by rpki-client on console-ams.rpki-client.org