Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/abgxBWycPSRPIIC4rSWEGyumKlQ.roa
File: abgxBWycPSRPIIC4rSWEGyumKlQ.roa (raw, json)
Hash identifier: ousYLxh7iaeKHtkhK60iMzJpXN+Ko8HgE1KJTP/k4rw=
Subject key identifier: 69:B8:31:05:6C:9C:3D:24:4F:20:80:B8:AD:25:84:1B:2B:A6:2A:54
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 0184C78C710ACD4BCE7C846AD8FC974CF320
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/abgxBWycPSRPIIC4rSWEGyumKlQ.roa
Signing time: Wed 30 Nov 2022 07:59:40 +0000
ROA not before: Wed 30 Nov 2022 07:59:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 262287
IP address blocks: 45.8.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c7:8c:71:0a:cd:4b:ce:7c:84:6a:d8:fc:97:4c:f3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Nov 30 07:59:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=69b831056c9c3d244f2080b8ad25841b2ba62a54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9d:87:e7:26:47:dc:59:65:4c:63:42:0a:8d:
ff:c2:c0:32:69:5c:69:6c:b9:47:6a:d1:c8:85:f8:
1f:93:68:76:64:b3:dd:d9:31:2c:d8:3d:34:64:bb:
7b:9c:89:4e:da:9b:ff:1d:3e:a1:54:f9:8b:71:b4:
68:7d:f4:a9:f8:ef:f0:a5:72:69:8a:ec:54:c9:cb:
3d:8f:af:8e:1c:8b:e3:e6:8c:69:a1:0a:b1:ca:9a:
e1:4f:66:57:61:36:b3:40:7c:e4:93:8b:18:ee:ff:
5b:18:d9:0d:17:d5:98:9d:99:93:4a:14:44:55:01:
84:e0:6c:0f:1b:97:be:b2:51:b0:e3:74:42:7e:f5:
06:ef:61:f8:79:76:9d:08:c2:59:97:cc:d6:8a:ba:
c8:d0:a0:53:0e:f0:83:7d:56:13:b2:0e:de:05:73:
3d:7c:eb:50:59:20:79:d4:2e:0c:40:3f:f1:d8:f1:
79:84:03:b1:b4:06:dd:d7:e1:18:a0:45:1e:80:4d:
57:84:07:46:80:75:00:91:45:05:7d:95:9f:b5:c9:
60:92:b3:e1:5b:62:32:66:fb:e2:f1:1b:81:02:46:
d4:87:2f:3c:ab:3b:de:87:5e:21:70:5f:3e:7f:ce:
71:5e:bb:76:f8:26:63:36:d0:fc:33:45:b2:23:f8:
c7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B8:31:05:6C:9C:3D:24:4F:20:80:B8:AD:25:84:1B:2B:A6:2A:54
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/abgxBWycPSRPIIC4rSWEGyumKlQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.18.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:4f:b5:f6:d0:b8:b3:ed:10:44:c4:3f:08:7c:7f:c0:2f:5d:
04:53:15:ea:6c:ed:e7:4c:31:65:dc:af:1e:6b:82:8d:c0:f4:
a3:d5:3b:7d:c6:2d:6f:e1:24:94:df:b0:d9:cb:fd:20:da:59:
4b:77:da:26:88:e9:75:f5:26:eb:c7:ad:e0:7e:53:a5:7b:4b:
48:20:08:41:cd:28:bb:b2:94:0c:f0:73:a0:2d:bd:28:7a:13:
c6:dc:3a:fe:7c:fd:6a:8f:5e:bd:36:38:47:78:82:e0:e3:79:
d8:e5:8d:70:1f:cf:96:88:6e:39:59:a1:26:fe:49:f2:4a:57:
0b:95:6c:12:72:e4:28:4a:3a:26:49:b4:a5:53:dd:5d:bd:8e:
31:d1:d1:89:f0:65:ce:6d:2d:68:c8:35:1c:6c:29:f7:6f:16:
39:16:fe:29:c1:77:fe:40:17:4f:d7:0b:e2:df:9a:00:ef:38:
ad:1f:63:6c:77:4e:67:89:0c:d0:42:d4:88:69:d7:5e:0e:59:
0f:13:86:9f:8a:78:f4:ff:e7:c8:e9:ad:43:4b:5b:10:71:04:
7b:c2:cf:3d:02:96:5e:f0:e8:a4:4a:4f:5a:8b:47:46:a9:97:
64:e5:e3:b0:70:ea:81:59:f3:a4:2e:91:58:1e:05:32:6d:4a:
ab:51:c8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:37 2024 by rpki-client on console-ams.rpki-client.org