Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/lLprE5UZoGP7qrDMqId8d3Z_or0.roa
File: lLprE5UZoGP7qrDMqId8d3Z_or0.roa (raw, json)
Hash identifier: WaLj1sjUuYFOlz9NopCTWQYTXgB7VR6Ks8fyGVsSFEM=
Subject key identifier: 94:BA:6B:13:95:19:A0:63:FB:AA:B0:CC:A8:87:7C:77:76:7F:A2:BD
Certificate issuer: /CN=ab975db4378dfca7c2953b86d3b18dc8b218ec6b
Certificate serial: 02C015
Authority key identifier: AB:97:5D:B4:37:8D:FC:A7:C2:95:3B:86:D3:B1:8D:C8:B2:18:EC:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/lLprE5UZoGP7qrDMqId8d3Z_or0.roa
Signing time: Thu 03 Mar 2022 21:03:14 +0000
ROA not before: Thu 03 Mar 2022 21:03:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208338
IP address blocks: 45.144.4.0/23 maxlen: 23
2a0e:e740::/30 maxlen: 30
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 180245 (0x2c015)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab975db4378dfca7c2953b86d3b18dc8b218ec6b
Validity
Not Before: Mar 3 21:03:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94ba6b139519a063fbaab0cca8877c77767fa2bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4f:6e:73:d4:69:3d:ac:9a:e9:cd:ed:eb:f1:
ac:59:ad:0e:f4:73:e7:c9:86:f3:8f:10:61:5b:13:
a3:40:2b:a6:35:fb:e1:f1:8f:48:70:b9:60:e2:df:
c5:e4:5e:0d:4a:2f:55:2d:a5:37:ac:0b:44:85:f1:
0e:e9:40:99:c7:85:b5:c7:76:97:d4:02:77:6e:d4:
cb:c8:50:af:72:56:1e:8a:da:97:13:e9:7a:30:ea:
39:e8:dd:fe:84:c4:1f:46:a1:f8:b1:69:41:ed:80:
05:4c:a3:bf:2d:20:79:7a:84:8d:e4:0d:bb:0e:36:
f7:97:a6:93:a1:b7:74:c8:33:76:ec:d6:af:5a:16:
91:c3:36:51:88:f4:5a:17:b6:a2:8a:d5:bb:64:68:
22:e7:76:41:f6:73:40:27:db:8c:c8:7d:67:a7:84:
3e:c5:81:00:8a:8b:6e:26:f3:8e:0a:9d:75:c1:06:
98:bb:4b:26:7f:26:7a:a6:cd:e1:72:9f:04:3e:d7:
df:ab:6d:bb:ff:c1:a6:03:b2:8e:95:d0:b7:78:a6:
5e:29:00:58:2e:59:f7:f5:a5:a1:c9:ae:64:4f:c7:
f2:a9:9a:6d:c9:e5:52:1c:7c:50:a0:c5:fc:91:8a:
30:9b:06:3a:cf:eb:5d:d3:9b:8c:c5:05:a4:84:ca:
a8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BA:6B:13:95:19:A0:63:FB:AA:B0:CC:A8:87:7C:77:76:7F:A2:BD
X509v3 Authority Key Identifier:
keyid:AB:97:5D:B4:37:8D:FC:A7:C2:95:3B:86:D3:B1:8D:C8:B2:18:EC:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q5ddtDeN_KfClTuG07GNyLIY7Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/lLprE5UZoGP7qrDMqId8d3Z_or0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c8605-163e-4245-af12-cdbd556e1749/1/q5ddtDeN_KfClTuG07GNyLIY7Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.4.0/23
IPv6:
2a0e:e740::/30
Signature Algorithm: sha256WithRSAEncryption
58:5e:26:ec:09:31:1c:48:bc:b9:70:05:86:ef:f2:70:cf:74:
2e:24:64:b2:b8:0f:e9:f9:c4:11:e3:27:40:42:c9:39:14:1f:
2e:db:b5:7b:44:c3:18:89:f8:bb:34:c0:d2:c4:70:bc:49:e3:
f7:67:f4:16:0f:cf:4c:28:7d:35:21:47:a6:c8:d0:f4:a9:67:
56:ae:79:f1:20:72:b5:c8:f6:3c:b8:13:ac:6e:13:76:61:0b:
32:aa:9b:68:d3:32:3d:6b:dd:7b:03:77:7b:32:c0:f1:65:ae:
86:2e:a8:dc:74:6d:7d:97:90:86:3e:68:2c:8c:48:7a:37:de:
71:bb:e9:ba:12:16:dc:cb:ec:71:e9:2a:94:64:37:0e:e5:e9:
08:21:4d:71:95:c0:92:15:09:7c:a2:25:08:75:6b:dc:a2:28:
cc:7e:df:45:dc:fc:69:ea:dc:d3:59:ab:82:97:13:ad:2f:24:
fc:33:c8:b8:a8:22:6c:23:01:db:38:99:50:bb:e8:fc:9e:b8:
f3:2b:15:4a:c5:d0:ef:0e:7a:c9:14:8a:e7:f8:7a:d2:c7:48:
d0:88:32:fe:e2:73:5e:81:ea:d7:23:27:2f:35:6e:c3:fc:ef:
a0:56:a1:21:b2:7d:b3:0a:60:de:18:40:ec:e2:00:d0:66:9f:
ad:10:2b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:28 2024 by rpki-client on console-ams.rpki-client.org