Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/gMNanfoqiGTSKpZGC58e7Bo5LmI.roa
File: gMNanfoqiGTSKpZGC58e7Bo5LmI.roa (raw, json)
Hash identifier: EHpDC3g2XmMedwdfayZNyhhtWon+KX07nwXazdZ9Y54=
Subject key identifier: 80:C3:5A:9D:FA:2A:88:64:D2:2A:96:46:0B:9F:1E:EC:1A:39:2E:62
Certificate issuer: /CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Certificate serial: 069BB27C
Authority key identifier: A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/gMNanfoqiGTSKpZGC58e7Bo5LmI.roa
Signing time: Sat 01 Jan 2022 06:53:28 +0000
ROA not before: Sat 01 Jan 2022 06:53:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25540
IP address blocks: 45.67.254.0/24 maxlen: 24
45.67.252.0/24 maxlen: 24
45.67.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110867068 (0x69bb27c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a39b4943e7d6b4b0e1de85c9bc38b857554dd47d
Validity
Not Before: Jan 1 06:53:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80c35a9dfa2a8864d22a96460b9f1eec1a392e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fc:7d:8b:d0:db:03:a8:bb:88:22:b8:c3:01:
64:e0:07:cd:ff:0f:4b:3c:24:20:dd:a8:71:e0:e9:
9d:c3:8d:b5:2a:93:d8:04:c6:c1:c5:30:42:13:12:
0d:55:3c:89:d0:6b:2a:18:b5:b7:e0:57:6f:e1:93:
43:c0:55:6f:91:1f:45:27:cf:41:79:43:62:4a:d7:
71:c5:f3:26:9c:da:09:10:82:43:4a:2b:0d:27:f7:
5f:32:6d:25:7e:71:b8:5d:2d:6b:d1:e6:a9:02:47:
d9:9b:76:f9:ff:af:c0:29:7d:15:b4:ac:f5:16:38:
be:b3:e7:6c:45:f3:68:bb:cf:88:cb:4f:95:3c:be:
ae:c1:03:a4:e4:3e:b4:38:73:6c:88:84:e8:fb:fb:
c6:18:bb:fd:4d:b8:05:79:b3:54:2c:18:ca:a7:dc:
cb:02:50:2b:63:fe:1a:04:82:8f:db:54:0b:a2:e6:
35:32:0d:5c:30:43:6d:3e:bb:11:cf:79:45:7a:f4:
45:47:d4:97:8b:cc:ba:f7:fe:41:21:3b:4f:01:d6:
21:e9:64:cb:dc:f4:79:c8:7a:fc:95:13:5d:32:72:
a5:d0:f6:0f:b2:0a:ae:ee:03:df:96:03:f0:a6:dc:
ef:24:57:c6:5a:3b:3d:82:e1:0e:95:9f:35:3b:47:
17:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:C3:5A:9D:FA:2A:88:64:D2:2A:96:46:0B:9F:1E:EC:1A:39:2E:62
X509v3 Authority Key Identifier:
keyid:A3:9B:49:43:E7:D6:B4:B0:E1:DE:85:C9:BC:38:B8:57:55:4D:D4:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/gMNanfoqiGTSKpZGC58e7Bo5LmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6cf712-dd0b-4a90-958e-693bf67e61f3/1/o5tJQ-fWtLDh3oXJvDi4V1VN1H0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.252.0-45.67.254.255
Signature Algorithm: sha256WithRSAEncryption
51:2e:1a:d8:1c:82:6f:97:b4:a4:3d:37:f3:97:d1:2d:a2:d9:
eb:8d:48:f5:7b:6f:bd:7d:c7:f0:f4:84:6e:8d:12:dc:ac:af:
e6:fb:cd:78:41:21:ad:b7:05:f8:28:3d:fd:7c:bd:d2:4a:67:
3a:31:75:3a:7b:6c:36:af:bc:20:1d:6b:eb:94:11:b9:41:72:
88:2f:e5:f3:a1:7b:18:2e:13:78:3f:66:63:f3:c0:b3:2a:df:
6b:17:c4:d4:07:fd:fc:67:09:aa:93:cb:fa:7e:85:0f:b1:bc:
55:ef:a4:14:71:a2:8a:2b:0e:82:2a:d0:b0:e7:f4:e5:f7:c3:
82:ea:53:4b:27:7a:ad:50:bb:4d:31:86:89:89:01:71:30:fe:
62:de:2d:90:0d:73:e4:17:4c:21:ca:14:48:cc:0d:9b:c1:f7:
79:c4:89:1a:58:80:42:9d:89:45:cd:27:c6:1a:28:51:2a:eb:
c2:de:1f:9b:3b:3e:23:2f:23:f1:b9:74:e4:bb:af:9b:5b:28:
10:f5:5f:63:25:ed:c1:48:64:d9:ab:d1:a9:39:7f:ca:ef:ba:
fc:f5:37:0b:3e:03:7f:05:c7:e7:86:9d:c7:ae:f6:f3:9f:33:
a3:4d:04:cc:91:13:fc:31:c9:2c:41:08:94:a5:0c:8d:d2:cd:
eb:2b:64:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:52 2024 by rpki-client on console-ams.rpki-client.org