Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/AyGShT7TDASTiXwqAK-suKkGE3I.roa
File: AyGShT7TDASTiXwqAK-suKkGE3I.roa (raw, json)
Hash identifier: GnaeOg3lq7SsMRPj9Gt1sV3ict6OPOywDhGlwxnjhx4=
Subject key identifier: 03:21:92:85:3E:D3:0C:04:93:89:7C:2A:00:AF:AC:B8:A9:06:13:72
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 018414DE54BE653686C75058177AE0F84DD2
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/AyGShT7TDASTiXwqAK-suKkGE3I.roa
Signing time: Wed 26 Oct 2022 15:17:05 +0000
ROA not before: Wed 26 Oct 2022 15:17:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212477
IP address blocks: 45.131.79.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:14:de:54:be:65:36:86:c7:50:58:17:7a:e0:f8:4d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Oct 26 15:17:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=032192853ed30c0493897c2a00afacb8a9061372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c1:4f:e5:27:6c:c1:eb:cd:e1:dc:70:c3:8e:
e6:60:12:98:8a:51:78:67:86:9d:f8:c4:f1:b3:bf:
8e:3f:1f:44:4d:64:e5:ec:44:4d:f9:3b:aa:6b:39:
dd:ac:f5:92:a9:26:1a:e1:e9:38:db:57:a4:01:70:
8d:65:70:0c:5e:94:fa:da:3a:b3:6e:d3:b4:56:bd:
1b:15:2f:ba:14:7b:9f:76:91:de:d1:03:60:d2:d3:
ec:1a:80:13:14:00:2d:b3:16:81:f7:91:4f:22:b6:
77:3a:61:89:b9:ac:84:31:33:4e:ef:13:58:88:e7:
7f:89:3b:01:1b:a8:0e:ae:38:f7:98:43:d4:e1:b9:
68:4b:c9:0c:7d:0a:3c:02:47:62:24:e0:c2:b4:35:
d6:eb:f2:59:89:2a:62:55:7f:f8:d2:65:74:b0:c5:
e0:08:c3:b2:bb:40:6c:42:c2:04:30:2e:09:95:36:
39:6e:46:16:14:84:99:d8:e7:be:8d:ee:e3:c4:90:
21:f3:9d:0c:cc:be:d9:28:dd:e1:24:d8:e6:9d:07:
8e:cf:46:b1:98:e5:d0:a2:3d:ab:91:8f:4c:46:ee:
39:b7:d4:55:78:fa:41:45:36:1b:da:2e:87:af:9c:
aa:21:a4:ab:e4:8a:c6:ec:db:84:bd:93:e4:4e:2e:
0b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:21:92:85:3E:D3:0C:04:93:89:7C:2A:00:AF:AC:B8:A9:06:13:72
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/AyGShT7TDASTiXwqAK-suKkGE3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.79.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:13:64:17:e0:80:04:69:7d:5b:6f:e0:aa:f0:da:ae:6c:c5:
a8:67:dd:a6:a6:20:4c:58:eb:6b:d7:cd:6b:fe:61:3f:f1:c3:
0e:c6:e6:b5:0a:ce:ec:95:da:d4:44:34:01:6e:ed:5b:e8:eb:
32:ff:b0:d6:fe:4f:f9:ac:97:65:ab:e2:16:6e:f1:59:c2:f2:
4f:22:ef:8d:81:e0:90:05:4f:d0:bc:65:4e:26:2d:8a:f2:f9:
97:3b:b9:d3:25:bd:cf:cd:66:41:d0:12:6b:23:5d:1b:00:18:
2c:34:08:8a:1b:8f:78:bf:18:f9:6c:a3:d4:77:c6:6a:e1:c1:
13:9d:b9:0c:03:fb:47:21:62:7d:4c:d0:1b:34:55:2c:8e:85:
80:22:20:a4:3e:e5:0b:95:7a:58:9b:18:34:86:d8:72:9b:d0:
21:6c:0c:a1:ae:fd:39:ee:25:a1:b0:69:9c:37:a7:1e:2b:07:
d1:2f:21:93:6b:2e:a8:fd:93:13:ff:93:3e:70:f4:94:e2:05:
20:a5:3d:7e:78:5b:6c:a9:1a:d1:46:5b:df:0e:1a:fc:1c:dd:
f1:d1:f2:e1:93:82:0f:a4:ad:60:36:11:89:5c:37:30:69:fb:
6c:35:df:4a:51:64:ba:29:7d:04:bf:49:5a:8c:59:df:25:94:
37:b2:35:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:37 2024 by rpki-client on console-ams.rpki-client.org