Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/zqyS5UkYn5f_hUq4_ViO8A_o95o.roa
File: zqyS5UkYn5f_hUq4_ViO8A_o95o.roa (raw, json)
Hash identifier: IQV4zS/Qg3f7IurTnz0WERSQV96C/AjVK7gjsQc/0vM=
Subject key identifier: CE:AC:92:E5:49:18:9F:97:FF:85:4A:B8:FD:58:8E:F0:0F:E8:F7:9A
Certificate issuer: /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Certificate serial: 0182A76BD154D214194AD19FF177EB75E551
Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/zqyS5UkYn5f_hUq4_ViO8A_o95o.roa
Signing time: Tue 16 Aug 2022 16:10:37 +0000
ROA not before: Tue 16 Aug 2022 16:10:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.80.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:a7:6b:d1:54:d2:14:19:4a:d1:9f:f1:77:eb:75:e5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Validity
Not Before: Aug 16 16:10:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ceac92e549189f97ff854ab8fd588ef00fe8f79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:09:b6:53:4c:fe:5b:3f:bd:f4:d8:c1:ab:9d:
e3:92:b2:11:71:56:93:02:4a:65:ad:32:09:ef:80:
6f:0a:23:37:fe:7f:42:39:67:b4:21:25:9f:0d:2f:
5d:9d:39:9b:a5:af:c8:3a:aa:98:d9:7b:5d:58:3c:
7b:47:c9:e9:d1:52:f5:44:78:4f:ee:37:f1:1a:dc:
46:6c:76:2b:74:54:91:4d:64:76:67:b7:71:74:61:
3d:be:cd:14:7f:fe:bf:cb:00:85:ae:8d:4a:6b:ae:
a8:67:b2:c4:64:8f:f8:df:3e:ec:a6:e6:67:a1:c5:
e1:67:ca:35:2d:b1:e8:7d:f8:61:a7:eb:3a:df:bb:
80:ac:ae:49:3d:cc:9d:a7:2d:7a:62:02:f4:2f:24:
7f:2f:54:26:3c:bd:28:11:c9:ec:d1:f6:c4:8a:fa:
b7:0d:5b:2d:42:67:a8:46:af:6b:fe:e7:93:bb:10:
d4:cf:3f:74:19:e6:c1:c0:26:c7:84:9a:73:48:2e:
49:d9:ae:9d:39:81:5d:25:1f:6c:aa:e7:6d:fe:83:
a5:15:0b:ce:56:c0:46:32:6b:61:81:35:39:9f:cf:
52:c2:3c:f2:a2:94:66:6e:2a:fc:0e:2a:27:ea:5d:
7d:e5:c5:54:a5:8e:17:af:78:47:3e:0b:0a:76:94:
0c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AC:92:E5:49:18:9F:97:FF:85:4A:B8:FD:58:8E:F0:0F:E8:F7:9A
X509v3 Authority Key Identifier:
keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/zqyS5UkYn5f_hUq4_ViO8A_o95o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.48.0/24
Signature Algorithm: sha256WithRSAEncryption
74:8a:27:0f:39:d8:3e:a4:13:2d:f0:45:0a:16:f2:47:bf:05:
42:90:95:c6:ab:ab:ae:eb:a9:6a:55:62:57:33:a3:9c:f6:af:
2d:6e:b2:66:ad:6b:b1:19:6a:de:ec:24:75:e9:ae:ea:08:91:
ae:64:48:3e:b0:dc:fd:3b:92:14:4b:b0:95:96:76:93:a9:25:
2a:52:92:fa:ad:51:c9:28:e2:bb:f7:bf:63:c1:98:8e:4a:c8:
de:d9:d0:6a:a7:e8:ce:e1:8e:7f:7b:62:e0:cd:87:3b:b6:e4:
61:01:f1:e2:fa:53:1b:a2:65:80:be:db:8a:a0:71:6e:b2:bf:
cb:ce:b5:59:3c:0b:77:79:f1:1f:19:96:70:5d:9c:75:21:38:
4c:dc:be:7b:7f:87:43:bf:c3:40:c6:5a:e4:ec:91:eb:77:dd:
29:e1:8e:65:e5:68:64:76:41:73:94:c4:71:30:d7:2d:7e:11:
7a:c3:0f:71:d2:c1:bf:0a:1f:22:d1:72:79:53:9c:45:d1:1d:
25:d3:85:ec:b6:08:f9:ea:93:e0:3c:f0:1a:a7:cb:e4:d9:2f:
a4:92:16:e7:57:4e:42:aa:27:04:4b:2a:eb:56:12:73:ab:8d:
bc:9e:59:45:82:0d:11:43:e1:dd:1d:14:ec:cb:cd:f4:7c:35:
3b:6c:cf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:41 2024 by rpki-client on console-fra.rpki-client.org