Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/M8lqVzuU_-YAwjtTHmI0Kttq3GQ.roa
File: M8lqVzuU_-YAwjtTHmI0Kttq3GQ.roa (raw, json)
Hash identifier: KylCGcEHosDW6zELED8Zv1a19vwlN6/zOWoS/W8ylYw=
Subject key identifier: 33:C9:6A:57:3B:94:FF:E6:00:C2:3B:53:1E:62:34:2A:DB:6A:DC:64
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 3A3EE011
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/M8lqVzuU_-YAwjtTHmI0Kttq3GQ.roa
Signing time: Wed 25 May 2022 14:29:57 +0000
ROA not before: Wed 25 May 2022 14:29:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1199
IP address blocks: 145.111.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 977199121 (0x3a3ee011)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: May 25 14:29:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33c96a573b94ffe600c23b531e62342adb6adc64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cb:98:4f:b6:9d:c4:98:29:ad:62:14:40:09:
1e:fd:e3:36:83:f5:3f:bd:5b:1f:e3:4c:97:8f:14:
71:fe:37:d7:54:14:fc:0d:94:f2:31:19:f4:22:2f:
12:ed:f2:5b:58:89:35:bc:db:57:15:41:ac:cd:19:
51:96:14:58:19:c6:06:63:9b:69:1e:4a:c2:a2:be:
af:4b:b9:45:06:ae:d5:9a:07:fb:66:f5:91:ce:6c:
eb:fa:6f:fb:f0:39:8e:f3:ed:e3:fa:9b:e8:11:3d:
d9:a0:f7:3e:28:b2:51:0e:b1:84:c9:2f:1f:ac:77:
d9:e9:47:56:a6:26:18:cb:30:87:bb:38:4d:0c:bf:
79:87:e0:e1:c0:cd:f2:8b:7c:20:bf:1d:db:a1:3d:
03:bc:2b:09:06:3c:bc:99:96:ed:da:31:b8:72:5e:
d4:4b:7a:43:5c:00:f7:60:d4:5a:f2:4d:7e:ed:d0:
f8:16:22:b8:18:c4:80:49:6d:34:f1:e8:23:42:2e:
28:6c:19:31:ad:ac:a5:30:34:ab:64:52:fa:21:de:
e6:3f:d2:00:43:50:3f:1c:62:1d:df:75:95:10:cc:
14:6b:eb:7a:d7:82:a0:74:44:e0:51:d9:38:a8:23:
82:56:f8:19:17:5d:c4:87:92:9b:db:f6:76:49:c6:
a0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C9:6A:57:3B:94:FF:E6:00:C2:3B:53:1E:62:34:2A:DB:6A:DC:64
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/M8lqVzuU_-YAwjtTHmI0Kttq3GQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.111.0.0/16
Signature Algorithm: sha256WithRSAEncryption
47:aa:26:de:90:a3:4e:2d:7b:0b:f3:14:aa:0d:64:93:dd:82:
9e:25:60:84:bf:1e:6c:3c:32:83:ea:98:dd:90:5f:f8:0d:31:
10:2d:c4:54:da:5a:68:98:e5:fa:46:a6:a6:a5:5a:90:33:51:
a6:6c:9b:1a:7e:38:f3:59:88:2a:e7:d8:12:4c:1c:60:88:34:
dc:99:65:a0:cd:6a:8b:59:7a:c6:55:ce:9b:37:75:8e:87:85:
b3:68:4d:a5:5d:ed:4e:a0:f7:8e:10:b2:43:54:f4:70:67:f0:
40:d0:a9:47:9e:a3:49:1c:f5:f5:53:8b:d7:98:ea:b9:14:ba:
99:ec:c4:a8:dc:a1:28:2f:5d:c6:36:57:94:83:9c:49:45:f9:
3e:71:0d:e3:29:e7:da:4e:6e:5f:02:e3:ef:06:78:88:3c:b8:
fe:b5:46:0f:08:be:97:61:0f:b3:c1:88:ec:24:3a:66:e7:53:
dd:b8:54:46:bb:40:7c:f5:87:bd:6b:74:e6:ea:33:bd:2d:70:
48:bd:10:74:12:35:03:e7:f8:76:ff:2f:f4:41:ef:8c:70:be:
be:ed:dc:f3:e0:5a:e7:65:a6:f9:47:e2:59:82:96:10:fa:c1:
65:eb:3f:c9:a7:fb:e1:f2:37:b1:43:51:59:91:ab:57:44:18:
fc:7f:80:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:44 2024 by rpki-client on console-ams.rpki-client.org