Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/LDLw-6POvNaJq5ffO26Q4rX5XD4.roa
File: LDLw-6POvNaJq5ffO26Q4rX5XD4.roa (raw, json)
Hash identifier: u7PQjGDRZ2+IjW1S9FG6ij1p9mBb1zK6VWw/1RHsDDc=
Subject key identifier: 2C:32:F0:FB:A3:CE:BC:D6:89:AB:97:DF:3B:6E:90:E2:B5:F9:5C:3E
Certificate issuer: /CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
Certificate serial: 07923655
Authority key identifier: 9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/LDLw-6POvNaJq5ffO26Q4rX5XD4.roa
Signing time: Sat 01 Jan 2022 03:53:47 +0000
ROA not before: Sat 01 Jan 2022 03:53:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39074
IP address blocks: 45.15.202.0/24 maxlen: 24
45.15.203.0/24 maxlen: 24
45.15.200.0/24 maxlen: 24
45.15.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127022677 (0x7923655)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b32a2e8fcbeee63020ba93daab9076c37bc9991
Validity
Not Before: Jan 1 03:53:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2c32f0fba3cebcd689ab97df3b6e90e2b5f95c3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:be:63:da:76:ff:ec:aa:74:87:cf:df:d5:24:
80:fd:79:08:8a:e4:b0:f7:72:85:4d:73:49:a0:6c:
a8:64:9c:32:56:4e:e0:bf:57:0c:f5:6b:05:37:c1:
bf:0a:3f:96:aa:c6:7f:12:4f:26:f1:4a:69:d2:c3:
df:3d:66:d5:68:d4:2e:3c:0e:29:21:ff:a1:44:89:
b1:e6:db:f4:24:d3:04:c3:18:4f:2b:0a:62:aa:8a:
b2:30:9b:58:d1:62:be:4c:78:e9:e6:10:fd:84:17:
e4:c9:2f:86:02:bb:fa:47:76:cc:25:a5:eb:26:85:
3b:ab:7f:b2:30:f3:ad:32:b9:40:84:96:45:f0:9c:
16:63:f8:52:ea:9e:ce:22:8d:e1:fe:65:1e:46:64:
5f:9a:c8:be:30:7e:9c:6e:00:d1:19:1c:c6:c0:b8:
54:b2:f9:c9:1f:bc:08:ef:97:1a:59:b3:08:ed:aa:
ac:fe:56:6b:d4:75:c4:30:51:6d:89:ac:45:81:40:
1b:2c:05:d8:02:1c:8e:b4:a6:00:df:da:78:36:8f:
e6:27:4c:a1:ac:97:5a:82:d4:20:01:21:3f:d0:aa:
19:6c:92:54:22:ea:5e:0f:33:fe:a0:04:58:73:3e:
5e:0e:f1:e9:03:16:fd:29:2b:f7:2b:32:67:01:8a:
bd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:32:F0:FB:A3:CE:BC:D6:89:AB:97:DF:3B:6E:90:E2:B5:F9:5C:3E
X509v3 Authority Key Identifier:
keyid:9B:32:A2:E8:FC:BE:EE:63:02:0B:A9:3D:AA:B9:07:6C:37:BC:99:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzKi6Py-7mMCC6k9qrkHbDe8mZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/LDLw-6POvNaJq5ffO26Q4rX5XD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/df21cb-08ac-4e5c-b854-e3ab9087d403/1/mzKi6Py-7mMCC6k9qrkHbDe8mZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.200.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:36:d2:21:2b:8d:6f:8d:00:7f:76:c6:38:4f:30:32:96:70:
07:27:3e:3d:20:9b:9e:46:52:18:30:4a:7e:48:e2:3c:3a:de:
46:20:50:8d:c7:75:66:3b:8a:2f:50:76:5c:13:db:29:cf:34:
26:2a:d3:dc:52:a6:ea:b4:d1:3e:4a:20:60:fc:ef:24:ce:b1:
60:ad:76:34:62:97:17:73:16:c8:d4:b0:c3:ff:05:79:f1:e9:
43:0a:33:a4:59:bc:78:10:fe:16:57:71:f8:77:7b:05:f2:a2:
21:1f:ee:57:18:61:a7:cf:89:6f:dc:ba:da:f3:aa:d6:1c:a0:
f9:bf:00:81:48:a4:e0:f4:bd:d9:e9:10:50:0b:56:42:ac:86:
5d:67:a4:ea:b5:b4:cb:06:49:d4:e6:46:bd:a6:e8:59:9d:70:
65:2a:5a:08:c1:83:aa:8e:5c:70:f4:1e:6c:ed:63:f9:be:2f:
f8:36:29:1b:e9:fb:3f:70:b6:a8:be:f3:2c:e8:16:22:33:a4:
26:1d:7c:a2:9c:aa:55:48:60:4d:cf:41:f8:34:12:21:ce:62:
4f:8c:08:9b:a4:08:b1:41:79:12:2f:7e:ed:27:de:d7:4b:95:
df:38:0e:74:70:c1:50:e6:f6:fc:82:bb:43:ca:1a:a1:dd:26:
dc:77:a5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:53 2024 by rpki-client on console-ams.rpki-client.org