Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/u1AS80yqXSkQXpBZyUdUXocdgV4.roa
File: u1AS80yqXSkQXpBZyUdUXocdgV4.roa (raw, json)
Hash identifier: KYq7pUVU7Eg+aPYnorv9rBTbKbHYXjBM9kri0D/fb5k=
Subject key identifier: BB:50:12:F3:4C:AA:5D:29:10:5E:90:59:C9:47:54:5E:87:1D:81:5E
Certificate issuer: /CN=5b6fa6690997412e716616c81e4f7c0875ffd976
Certificate serial: 0727F720
Authority key identifier: 5B:6F:A6:69:09:97:41:2E:71:66:16:C8:1E:4F:7C:08:75:FF:D9:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/u1AS80yqXSkQXpBZyUdUXocdgV4.roa
Signing time: Sat 01 Jan 2022 08:55:26 +0000
ROA not before: Sat 01 Jan 2022 08:55:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 33916
IP address blocks: 195.242.192.0/22 maxlen: 23
45.133.164.0/22 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120059680 (0x727f720)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b6fa6690997412e716616c81e4f7c0875ffd976
Validity
Not Before: Jan 1 08:55:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bb5012f34caa5d29105e9059c947545e871d815e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:08:f0:bc:58:10:05:04:20:16:77:97:e6:9b:
85:05:9e:61:84:12:6c:eb:d4:61:fa:a0:69:ac:68:
0c:94:eb:df:1d:13:ac:ad:4d:a2:29:c4:e4:21:62:
a3:78:31:91:7b:6c:e0:b9:7b:36:37:dd:66:d2:7e:
88:9d:97:67:a8:97:7b:93:96:69:bd:29:fd:d4:07:
8e:c3:ad:fc:09:c3:2a:0f:ce:0f:cf:c7:5a:ba:6b:
13:6c:89:81:0d:95:49:6d:54:8f:bc:b0:e4:15:03:
29:b7:66:54:b9:90:29:a1:d0:46:1d:34:54:86:cc:
a3:36:ee:fe:d0:18:b4:d6:4d:99:46:65:23:a1:c6:
2c:cd:17:d7:b9:a7:cb:4a:a8:e8:97:29:c5:5e:0c:
4c:f9:ea:44:28:fa:62:6d:cf:91:48:fb:07:aa:f8:
9c:83:4e:64:64:8a:63:96:51:fc:55:ad:f1:86:5b:
36:2d:e1:b8:3a:ac:40:54:55:b0:da:42:aa:a3:30:
c1:4d:8c:79:ca:24:e9:42:78:26:a0:4b:aa:59:a5:
8d:2b:d2:0e:3c:dc:fd:03:79:f5:81:df:69:63:19:
26:57:00:40:62:08:53:c3:b9:9d:76:6d:f7:e6:7b:
8b:be:31:20:4c:95:92:0a:68:18:4a:a4:68:f3:8f:
6a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:50:12:F3:4C:AA:5D:29:10:5E:90:59:C9:47:54:5E:87:1D:81:5E
X509v3 Authority Key Identifier:
keyid:5B:6F:A6:69:09:97:41:2E:71:66:16:C8:1E:4F:7C:08:75:FF:D9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2-maQmXQS5xZhbIHk98CHX_2XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/u1AS80yqXSkQXpBZyUdUXocdgV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/294c4e-5a2b-4bee-bc57-12ad146655ce/1/W2-maQmXQS5xZhbIHk98CHX_2XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.164.0/22
195.242.192.0/22
Signature Algorithm: sha256WithRSAEncryption
43:28:13:77:fc:0c:47:ad:f3:8d:42:23:50:b2:89:3d:27:95:
23:90:df:0c:78:09:8c:3a:df:64:3a:2f:e4:f4:b9:25:87:37:
a3:bb:5f:60:f7:39:63:b7:c7:a4:83:72:0c:19:1e:a9:c4:c5:
50:01:06:13:87:58:f9:3c:ae:46:d4:77:44:74:28:a2:40:51:
24:b8:a9:c3:da:94:25:5e:9d:95:79:e4:94:b3:57:42:70:3e:
ef:c4:20:62:70:44:ed:fa:f5:68:7b:80:a6:b4:6d:a9:33:26:
c7:27:e2:9a:6e:90:fc:f3:1a:af:1a:58:8b:00:ef:51:79:dc:
e3:60:20:cd:8c:39:74:0b:60:fe:56:18:25:1d:23:22:c7:77:
43:fc:f4:ef:ce:f1:47:dd:5c:cb:c1:09:39:12:d2:a4:be:34:
2b:85:6e:04:c8:b5:a3:f1:fc:d2:59:67:7c:3a:2f:26:9a:af:
39:18:f4:03:bf:c8:94:7e:e4:83:a7:62:4f:4b:37:aa:74:3a:
5b:11:25:e4:60:84:ad:fb:12:ea:01:79:8c:50:ea:c3:91:5f:
d8:f6:bf:05:0e:49:07:43:df:17:c9:61:93:1f:63:a1:c1:fd:
57:7c:95:28:8e:af:32:13:e2:2b:80:d9:22:e6:8c:4b:69:cb:
c9:ad:15:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:11 2024 by rpki-client on console-fra.rpki-client.org