Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/vmESGYlAY6gJ10stu9DJUy1qlug.roa
File: vmESGYlAY6gJ10stu9DJUy1qlug.roa (raw, json)
Hash identifier: RMjDqLVAlPPhNcVUqrkDUY8VvVzW7WjN13jM5gTIvL0=
Subject key identifier: BE:61:12:19:89:40:63:A8:09:D7:4B:2D:BB:D0:C9:53:2D:6A:96:E8
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 03167165
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/vmESGYlAY6gJ10stu9DJUy1qlug.roa
Signing time: Mon 07 Mar 2022 13:26:52 +0000
ROA not before: Mon 07 Mar 2022 13:26:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62240
IP address blocks: 45.8.17.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51802469 (0x3167165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Mar 7 13:26:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=be611219894063a809d74b2dbbd0c9532d6a96e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:22:9d:4f:79:63:ec:8b:96:5a:25:5c:e7:68:
e2:8c:dd:fa:bc:6b:d0:47:92:81:89:c4:53:60:bc:
74:53:08:43:ba:9a:51:23:55:63:c4:72:f2:47:0f:
0c:05:78:71:28:ce:16:10:c6:03:3f:a2:db:7a:bb:
5e:e2:c0:f0:c5:4f:b2:7f:09:89:80:14:aa:41:23:
78:37:d8:76:ec:3b:40:68:20:6d:88:40:7f:84:2f:
d2:d1:5d:4b:a6:1d:93:e2:6d:2d:1f:b2:2e:fd:bf:
e1:7b:36:62:f2:da:11:52:0d:73:6f:ba:f2:e6:be:
d9:3c:36:fa:87:28:9a:85:f2:0a:f0:fb:6f:c8:54:
6b:83:43:45:ec:bb:81:e4:fe:fe:36:40:b1:7e:50:
b1:09:0d:84:78:c6:1f:a5:58:0e:b0:d9:cf:4a:c4:
b1:90:19:40:09:ac:d9:6e:24:db:e6:db:de:1c:48:
d1:6e:62:7b:d1:cf:f9:c4:0f:5f:87:74:ff:59:6a:
0b:0e:86:92:dd:17:43:e7:0a:d7:77:c1:d9:18:b3:
00:71:9c:e4:bd:f0:a4:da:c8:00:aa:aa:60:98:fc:
20:84:bd:eb:a2:79:67:8a:c3:b4:b8:59:17:c9:40:
db:8e:cc:0b:98:f3:fe:a6:46:61:4c:33:2b:ce:4d:
76:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:61:12:19:89:40:63:A8:09:D7:4B:2D:BB:D0:C9:53:2D:6A:96:E8
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/vmESGYlAY6gJ10stu9DJUy1qlug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.17.0/24
Signature Algorithm: sha256WithRSAEncryption
71:95:3c:6b:1a:26:d7:e9:bd:38:f8:17:af:9f:17:03:3b:45:
7b:dd:2e:1a:59:3a:21:98:f4:35:75:e2:3e:84:b3:ad:05:f8:
22:53:f1:48:1b:46:74:14:58:ac:dc:36:34:0e:1b:50:f6:82:
20:cc:e1:74:0e:61:3b:5e:e1:43:5a:3c:0e:bc:60:a8:58:64:
75:a1:e2:15:a0:fb:d8:58:ea:0c:a9:07:d6:ed:bb:09:ea:e0:
ce:4b:8b:cb:a2:cb:68:78:5d:2c:b1:0f:15:1c:0e:cb:8b:a3:
e7:79:d6:bd:99:f3:a6:91:cc:a0:a0:56:c7:bc:08:db:35:6e:
ce:54:2d:c3:3c:dd:19:75:88:72:4c:6d:18:cd:5b:c1:29:ba:
24:6a:c9:01:93:16:82:3a:8d:69:9e:0a:45:ca:73:9b:9a:67:
a6:46:55:fd:43:19:d6:de:d4:b3:df:46:42:e1:46:23:dd:32:
d7:a4:c7:c9:58:d6:77:6a:97:cd:c0:22:f3:5a:28:2c:f7:35:
c1:18:b7:13:b7:9e:69:55:48:b1:43:ad:0c:e7:66:4d:83:c1:
9c:25:cd:7c:65:c9:93:f5:d9:16:d9:88:85:1e:46:c1:e2:45:
3e:5b:35:bc:f3:0d:a1:e1:77:c1:63:c4:5a:68:36:56:a8:4b:
65:8b:51:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:37 2024 by rpki-client on console-ams.rpki-client.org