Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/dRkcNj7E-jclzUWl5ZltiZr1OAY.roa
File: dRkcNj7E-jclzUWl5ZltiZr1OAY.roa (raw, json)
Hash identifier: Y4GpfBZbyc9SKd2+cElXmyevyg0g+cc5cDuMNwy2Bm8=
Subject key identifier: 75:19:1C:36:3E:C4:FA:37:25:CD:45:A5:E5:99:6D:89:9A:F5:38:06
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 032C34CB
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/dRkcNj7E-jclzUWl5ZltiZr1OAY.roa
Signing time: Wed 16 Mar 2022 18:48:54 +0000
ROA not before: Wed 16 Mar 2022 18:48:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 45.157.130.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53228747 (0x32c34cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Mar 16 18:48:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75191c363ec4fa3725cd45a5e5996d899af53806
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:26:6b:ff:c5:e6:26:13:51:c0:4d:3a:ef:eb:
d2:16:ae:82:b5:28:db:8b:04:af:e8:23:84:bf:d3:
a4:53:9c:cd:2a:3c:24:7e:c4:4b:0e:9f:ae:bd:1b:
bc:5a:27:2a:9a:aa:54:2d:39:3f:68:73:a2:8e:a5:
d9:ba:45:3d:6c:68:26:3f:83:99:75:61:19:39:c2:
62:c4:cb:4b:f3:80:c9:fd:8e:c6:12:fe:e8:ca:0f:
cf:58:2d:b0:d3:63:9c:7b:f2:65:a5:cb:3e:10:57:
0c:c5:af:8b:6f:7a:3b:48:48:ad:33:72:32:35:29:
41:0f:6a:5f:08:e6:8b:18:a2:12:52:fc:09:d9:80:
44:12:ff:7d:5e:f6:16:22:51:fb:58:c5:9b:12:3b:
c1:b6:b2:89:53:8c:c0:c3:ac:2f:c2:8d:58:2b:8a:
17:71:ad:ef:d9:cf:cf:01:60:67:cc:b3:5e:3f:7a:
64:94:39:8b:df:47:15:60:34:65:72:d0:14:1a:74:
be:63:86:8d:e6:2c:39:37:b6:cb:04:de:ca:db:bb:
22:e6:fe:9e:29:f1:f9:e2:95:a2:34:7d:a9:37:61:
1f:7a:13:93:7b:bc:5f:01:1a:fc:2a:de:ce:4c:20:
1a:57:0f:e6:73:df:89:fe:5b:b2:d0:9a:cb:f0:25:
ec:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:19:1C:36:3E:C4:FA:37:25:CD:45:A5:E5:99:6D:89:9A:F5:38:06
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/dRkcNj7E-jclzUWl5ZltiZr1OAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.130.0/23
Signature Algorithm: sha256WithRSAEncryption
89:5d:cf:96:2b:49:2b:08:4a:7e:f4:a1:ae:9f:63:2b:ef:32:
bc:f9:5b:f6:06:42:c2:7d:74:8a:7a:b4:5b:c1:80:ba:16:81:
b8:87:49:cd:a4:6f:8f:43:c8:cc:b4:1c:85:e4:37:3c:6c:c2:
66:1b:7a:63:06:b9:7d:15:32:b8:eb:35:a1:1c:aa:d2:60:6f:
06:39:f7:56:65:ed:48:c1:fd:74:fc:43:93:3c:58:a7:bf:82:
7f:12:58:6f:aa:1d:ba:db:1f:aa:e8:5d:73:a8:8b:18:14:7e:
2a:0d:2d:97:f3:0e:e2:9b:8c:e3:9d:d6:5b:6b:ed:f6:1a:39:
93:47:8c:5f:0c:fe:7f:1e:bc:a6:72:48:1f:20:7d:95:9e:f4:
7f:c0:60:af:dd:c3:17:ec:41:98:80:e3:0b:e6:68:d4:60:85:
f4:85:ea:7f:44:24:7c:b6:3c:35:db:ec:5b:d5:6c:4a:2a:96:
50:88:9b:1b:28:ea:00:4c:7b:f1:92:37:6e:96:ce:93:96:18:
0e:88:66:80:b9:13:5d:ff:2f:be:2f:1a:81:20:1d:cb:7b:aa:
3b:7a:8d:f5:f2:98:c4:62:e8:d1:3b:97:eb:c8:0d:66:93:ca:
6d:03:b5:a7:3f:81:59:1e:61:4c:2b:1c:9a:e5:5e:ed:9d:20:
07:b7:22:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:37 2024 by rpki-client on console-ams.rpki-client.org