Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/YRVfw3quBtSqDw4gD5ujYipgw0w.roa
File: YRVfw3quBtSqDw4gD5ujYipgw0w.roa (raw, json)
Hash identifier: zBl0X3CbRfFiOP/6AuKq5rqsqe0xnsJ7iYvEhlYHIhQ=
Subject key identifier: 61:15:5F:C3:7A:AE:06:D4:AA:0F:0E:20:0F:9B:A3:62:2A:60:C3:4C
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 0184190458E02212C39960CE857431771B43
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/YRVfw3quBtSqDw4gD5ujYipgw0w.roa
Signing time: Thu 27 Oct 2022 10:37:06 +0000
ROA not before: Thu 27 Oct 2022 10:37:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56488
IP address blocks: 45.131.76.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:19:04:58:e0:22:12:c3:99:60:ce:85:74:31:77:1b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Oct 27 10:37:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61155fc37aae06d4aa0f0e200f9ba3622a60c34c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f9:2f:2a:43:73:d0:85:27:69:87:b2:76:82:
40:46:c5:3b:25:8c:e1:93:21:7f:09:f1:24:07:ec:
54:bd:9b:7f:e2:8e:f2:94:3a:2e:1e:df:0b:17:51:
63:eb:92:b3:62:3e:6f:81:0b:59:49:d5:80:ae:40:
e8:67:ce:8d:bd:04:4a:02:46:4c:13:c8:03:ed:c8:
94:d5:3f:b6:33:81:d6:5b:e5:f0:35:32:0d:94:61:
11:1e:46:60:2e:28:6d:c2:97:63:02:a3:9c:df:76:
16:a2:66:5f:c7:c9:d2:da:f0:e4:c2:23:43:fc:fc:
59:f9:f9:e1:a3:99:2c:4a:68:a8:b7:cb:52:75:06:
f7:a4:48:46:0a:78:db:1d:b8:d1:5a:3a:4d:45:c5:
a4:71:38:2e:b6:e9:c2:bc:84:e1:3b:8c:a4:a8:9e:
1b:40:9e:cf:a8:98:83:31:f7:77:42:23:de:3d:63:
42:15:dc:67:f5:47:9f:bb:6c:41:1e:83:27:fa:50:
ad:75:ab:a8:2e:35:df:5d:66:54:ef:e1:b9:b6:2f:
51:c2:61:2a:ce:1f:47:01:ba:11:fe:49:27:de:a9:
77:f2:10:9a:50:18:02:fa:b7:83:d7:a8:e2:8d:48:
43:cd:77:c1:9b:b3:d1:fe:09:33:54:f7:c4:c2:f5:
64:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:15:5F:C3:7A:AE:06:D4:AA:0F:0E:20:0F:9B:A3:62:2A:60:C3:4C
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/YRVfw3quBtSqDw4gD5ujYipgw0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.76.0/23
Signature Algorithm: sha256WithRSAEncryption
30:7a:95:c0:47:23:04:39:e7:ad:fc:ca:6e:d9:11:d0:cb:57:
b2:18:7f:a8:79:0e:25:02:ba:70:31:11:37:22:b7:fa:ce:cc:
cc:3a:7a:e4:b2:6d:d9:e0:e0:04:9e:1e:5e:64:ea:91:e5:ec:
57:26:95:4a:d5:a9:57:04:f5:70:ac:22:69:0c:83:cf:69:31:
7f:75:95:59:03:fc:e6:47:70:fb:42:5f:ca:21:74:4e:54:04:
58:00:e0:36:4b:0d:c7:02:6c:44:01:b2:df:31:12:d7:23:df:
07:f6:52:e4:6d:3c:8e:87:f9:0d:bf:a4:8b:fd:ed:c4:2f:90:
e9:41:af:20:ed:f0:f8:8c:55:c7:05:03:81:4b:e7:89:68:6e:
53:ce:87:12:ca:0d:ab:f1:4d:db:91:b7:8d:2a:7e:3d:6b:3b:
88:9d:de:24:da:a8:4e:a5:23:2c:87:c6:34:08:98:eb:9f:76:
42:61:ad:1c:1d:83:40:4e:68:e4:c5:8f:26:0f:91:8f:ef:d5:
6e:89:89:ce:b2:59:c0:a8:be:cc:f7:76:d2:22:0c:39:69:cb:
0d:4f:5d:50:d0:1b:36:f6:e5:47:df:0b:c1:3b:1f:6d:ab:0f:
20:3f:09:fb:a9:00:de:1b:f6:e3:37:e2:c8:2f:30:a1:52:93:
0b:46:fb:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:37 2024 by rpki-client on console-ams.rpki-client.org