Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/q7IDq6jgIvrzkAJNP5PmLEU-yAU.roa
File: q7IDq6jgIvrzkAJNP5PmLEU-yAU.roa (raw, json)
Hash identifier: VijPwJpXZO0vYPeYfpsv23jb7fUzndcKtMKxzI7xpXw=
Subject key identifier: AB:B2:03:AB:A8:E0:22:FA:F3:90:02:4D:3F:93:E6:2C:45:3E:C8:05
Certificate issuer: /CN=e43dd424384759b5e85595825019b69fe9bf9220
Certificate serial: 06479AD1
Authority key identifier: E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/q7IDq6jgIvrzkAJNP5PmLEU-yAU.roa
Signing time: Sat 01 Jan 2022 04:57:07 +0000
ROA not before: Sat 01 Jan 2022 04:57:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62000
IP address blocks: 45.157.60.0/22 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105355985 (0x6479ad1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e43dd424384759b5e85595825019b69fe9bf9220
Validity
Not Before: Jan 1 04:57:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abb203aba8e022faf390024d3f93e62c453ec805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:62:ec:46:f6:1d:ea:58:d9:7a:1c:47:03:1d:
99:a2:78:28:c4:cb:1a:68:61:a1:2c:a5:08:68:d7:
46:39:52:f5:33:61:25:7f:a6:7f:e9:5e:92:d8:47:
f2:5d:1c:df:d5:94:cc:96:68:71:04:4b:fb:f7:c9:
72:8d:ba:a6:cf:9c:e8:f4:f4:30:93:ab:f8:01:81:
81:41:27:ec:ba:f1:71:cb:86:76:98:e9:67:88:23:
22:d6:08:ce:e6:66:88:e3:ec:8b:4c:0a:da:7f:fa:
f9:e1:4e:73:19:05:d0:bb:c5:b3:ae:d2:00:72:2a:
ae:5b:e4:01:ee:98:d4:cf:84:ec:18:20:d4:06:2a:
8a:5b:01:02:35:5d:ec:10:77:27:d8:8a:34:00:f4:
17:28:b4:49:61:30:2f:3a:f9:1c:f5:b0:e4:65:91:
a9:bf:6b:96:b6:37:6f:f4:0d:d1:87:98:5f:7a:21:
a2:46:0d:b5:f8:b1:92:fa:1a:e4:33:2f:63:f7:e8:
d6:4b:f6:fb:df:3f:6c:b6:ed:67:13:a8:45:59:18:
d7:d7:eb:03:cd:26:ea:19:78:d6:83:0a:76:02:1b:
d5:6f:04:ce:7e:94:17:c1:9e:62:ea:f0:dd:df:b1:
d3:14:fa:a1:ab:3d:bb:21:60:5e:08:41:bb:26:c1:
e8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B2:03:AB:A8:E0:22:FA:F3:90:02:4D:3F:93:E6:2C:45:3E:C8:05
X509v3 Authority Key Identifier:
keyid:E4:3D:D4:24:38:47:59:B5:E8:55:95:82:50:19:B6:9F:E9:BF:92:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D3UJDhHWbXoVZWCUBm2n-m_kiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/q7IDq6jgIvrzkAJNP5PmLEU-yAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/4b2cf9-d8ed-4a27-93ba-93b691ee1cce/1/5D3UJDhHWbXoVZWCUBm2n-m_kiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.60.0/22
Signature Algorithm: sha256WithRSAEncryption
36:5c:71:b8:06:ad:88:9f:e5:6b:68:19:31:bf:e1:97:0a:91:
c0:9b:e0:de:1d:7e:d1:39:32:9f:96:30:a3:24:9b:5b:90:44:
1c:99:30:80:25:2b:73:11:19:2a:db:64:61:26:e8:c7:d6:da:
56:cb:32:e9:59:c2:03:04:18:b8:ec:d9:d7:b6:1d:c4:f0:9f:
0f:9f:bb:20:c3:41:cc:b3:48:9f:c5:ad:38:ac:52:4a:39:71:
0a:6f:c9:ed:0f:18:06:14:ea:1b:80:09:f8:e8:93:1c:14:25:
b6:c5:6f:bb:5c:86:34:e1:f3:4e:e0:e7:f7:77:1b:5a:a3:86:
f8:ac:12:90:ff:42:7a:99:a1:a9:97:73:9a:cc:74:b0:07:7e:
6d:ff:28:f8:76:fc:5e:22:ac:a2:98:5f:81:74:31:41:de:63:
02:1f:0a:33:51:9b:d0:f1:cc:ef:18:cd:ea:71:8f:56:7d:eb:
14:1c:32:ef:87:e6:e6:14:0a:ae:58:ec:fe:a5:e3:df:82:3e:
aa:98:4e:6c:cf:32:c0:a0:06:49:38:81:29:e0:93:f2:7b:57:
eb:47:a7:0a:01:37:35:c5:68:b7:e2:40:ea:91:87:e3:1f:98:
00:58:67:02:27:a8:76:2e:62:aa:90:08:54:c1:c6:e7:99:bf:
86:23:80:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:59 2024 by rpki-client on console-fra.rpki-client.org