Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/Ro_Cpd7RYBpuwTQWMPqOdHPg808.roa
File: Ro_Cpd7RYBpuwTQWMPqOdHPg808.roa (raw, json)
Hash identifier: WOrsLhY3MTETn1ED/raBcSPh0VLc7H06J/ycSKCyd9k=
Subject key identifier: 46:8F:C2:A5:DE:D1:60:1A:6E:C1:34:16:30:FA:8E:74:73:E0:F3:4F
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 38DC97A3
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/Ro_Cpd7RYBpuwTQWMPqOdHPg808.roa
Signing time: Sat 01 Jan 2022 07:55:19 +0000
ROA not before: Sat 01 Jan 2022 07:55:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48037
IP address blocks: 145.10.0.0/16 maxlen: 16
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 953980835 (0x38dc97a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 07:55:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=468fc2a5ded1601a6ec1341630fa8e7473e0f34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:58:b2:a5:3e:ae:1a:c3:fe:b3:4b:84:39:51:
cc:ca:52:dd:a1:39:d3:8a:b6:70:3d:2f:b1:8d:eb:
b2:ec:5a:fd:ef:4d:f8:52:5a:37:4c:3b:50:cc:9a:
df:90:72:14:61:af:9f:f9:3c:31:6c:c3:b2:5d:e5:
b6:6c:1c:95:eb:72:c3:87:48:a1:2a:b5:26:ae:de:
d3:6a:b5:91:b7:d2:9e:46:e2:95:ae:f7:79:6f:6a:
0c:dd:44:61:04:40:9d:76:d1:53:68:63:f8:93:14:
97:11:3a:aa:61:61:8e:ae:b3:01:b6:a4:93:4f:e3:
10:34:06:6e:8c:59:04:cc:ea:cb:f0:1c:35:4a:a7:
33:77:7e:08:ed:e8:8f:6b:62:87:fb:e9:4f:72:1a:
13:f7:82:d3:1c:1e:20:47:4a:ba:29:a5:89:36:46:
e2:83:cb:39:f6:43:eb:85:d4:d8:4f:9a:81:5d:3d:
7d:be:de:73:15:e7:3a:d8:ec:83:6e:88:52:7f:b5:
d2:0a:29:cd:cb:ee:57:0a:04:98:06:89:fa:6a:4c:
d2:e1:0f:8c:7c:4f:c3:63:de:c4:e6:bf:66:9c:36:
68:0a:a0:6d:46:38:a9:3e:e7:73:d0:84:b0:53:d8:
0e:6e:e1:06:06:3e:a7:8f:24:bf:30:84:ea:56:6d:
ab:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8F:C2:A5:DE:D1:60:1A:6E:C1:34:16:30:FA:8E:74:73:E0:F3:4F
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/Ro_Cpd7RYBpuwTQWMPqOdHPg808.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.10.0.0/16
Signature Algorithm: sha256WithRSAEncryption
78:eb:12:68:91:e5:37:c2:66:0c:bd:a2:b8:51:5b:58:0a:c1:
97:74:10:de:6a:b3:5f:8c:aa:00:c2:e8:e5:55:39:d7:1b:8d:
a6:b5:c0:fc:34:c6:74:98:fb:e2:47:50:bd:60:89:31:df:47:
01:76:38:69:ce:d5:23:28:b6:29:10:60:fd:58:9f:9b:9a:b4:
de:12:28:78:29:da:d1:63:7a:df:2c:39:3e:c9:ce:a7:7f:fa:
4d:5d:13:6d:15:c8:ef:c5:45:b7:a3:a1:7f:2c:84:78:16:43:
55:66:ee:0f:17:1a:5d:1e:37:56:4d:fb:a2:f6:af:a5:a6:b4:
cf:22:bb:9d:f0:8c:f3:ee:bc:8a:59:24:a8:06:ac:de:5c:44:
eb:f7:c2:2f:f3:5a:17:05:5d:3e:48:08:5c:6a:94:91:92:80:
6d:72:fa:89:97:a5:e6:31:17:97:6f:aa:d0:53:c1:b6:4b:b6:
ac:94:29:68:43:5d:f7:ed:77:46:0a:26:53:8f:03:b1:ac:5e:
0f:16:25:23:54:b0:08:f5:9d:be:e1:92:27:23:e3:c1:3a:b5:
b6:0e:79:46:a4:52:bd:44:9e:40:1a:08:eb:ae:cb:39:2e:43:
8c:8a:8d:dc:5c:9e:04:71:bb:ab:dd:b3:27:64:19:8a:b6:50:
15:39:87:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:09 2024 by rpki-client on console-fra.rpki-client.org