Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/1NsEnRD3CQ7rRFwmJaXWuGwID5o.roa
File: 1NsEnRD3CQ7rRFwmJaXWuGwID5o.roa (raw, json)
Hash identifier: SIfJDwx06WW3CrAvoVVuOtelEP3/gOeNawn50h/zQxQ=
Subject key identifier: D4:DB:04:9D:10:F7:09:0E:EB:44:5C:26:25:A5:D6:B8:6C:08:0F:9A
Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial: 01843C8AF7F38830806AF373B6C6D7CD7304
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/1NsEnRD3CQ7rRFwmJaXWuGwID5o.roa
Signing time: Thu 03 Nov 2022 08:10:51 +0000
ROA not before: Thu 03 Nov 2022 08:10:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198521
IP address blocks: 45.15.52.0/24 maxlen: 32
45.15.54.0/23 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:3c:8a:f7:f3:88:30:80:6a:f3:73:b6:c6:d7:cd:73:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
Validity
Not Before: Nov 3 08:10:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d4db049d10f7090eeb445c2625a5d6b86c080f9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:db:9f:63:c8:a0:2f:16:4f:de:e1:28:10:c0:
9e:53:a1:8e:f2:cb:90:34:8d:44:90:ec:78:e0:e2:
43:0e:21:7e:10:3c:ed:3c:64:d1:53:ba:11:b3:73:
2c:7e:39:28:0c:20:47:66:d6:69:2b:30:e5:0e:62:
3e:f7:48:45:dd:d1:30:f5:8d:4b:c4:3c:20:86:25:
ac:eb:15:6a:2e:71:7e:bd:32:cf:ac:66:de:39:cd:
4e:63:25:81:eb:0e:60:32:48:8a:95:8d:0e:d8:24:
5d:bc:fa:7b:56:c0:2b:33:40:cf:e0:0d:9d:aa:d0:
20:49:10:20:4b:ce:ed:fb:0e:14:d7:a9:a9:14:fb:
8a:9f:74:30:bd:f1:4e:92:2b:a6:15:ae:3b:dc:fe:
ae:4b:90:91:c8:16:c7:ee:56:ac:b9:31:0f:d6:ab:
32:7c:01:e3:ca:ed:5d:1b:1d:96:00:d3:a2:a4:f9:
13:62:3d:d2:5f:ea:f7:90:47:31:fb:23:d7:e5:d1:
88:e4:6d:23:66:e3:fa:20:e2:7b:cc:b1:a7:c6:e1:
97:3b:dc:50:32:40:de:5f:bb:02:73:16:03:4c:7a:
da:e0:44:2c:eb:9a:c6:b4:43:7f:e4:d9:85:dd:27:
a4:c8:d6:37:f0:4a:fb:33:72:b0:44:d8:31:1d:b3:
5d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DB:04:9D:10:F7:09:0E:EB:44:5C:26:25:A5:D6:B8:6C:08:0F:9A
X509v3 Authority Key Identifier:
keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/1NsEnRD3CQ7rRFwmJaXWuGwID5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.52.0/24
45.15.54.0/23
Signature Algorithm: sha256WithRSAEncryption
46:36:69:d8:78:17:0e:3f:25:1f:1e:06:5d:8d:3c:89:41:d6:
97:4f:32:5e:1a:49:28:4f:71:97:5b:26:87:08:3f:19:b2:35:
db:f6:1f:f7:b3:a4:f9:53:00:6e:fb:a1:6e:53:ea:7e:8d:5d:
06:ab:cb:2b:d6:06:bf:66:be:55:b4:9b:41:bf:a4:5c:01:b7:
74:50:1d:f7:9a:e9:e2:06:66:04:e8:84:a1:46:b8:9e:28:9c:
7e:a3:d5:0b:aa:bd:05:d2:1a:62:6e:63:33:35:f1:91:c2:dd:
7b:08:b0:ea:c4:2f:f2:20:65:39:c3:c8:4a:4b:9b:57:e1:17:
1a:32:98:d2:ce:43:d4:66:0d:d8:a4:e5:f5:cd:77:6e:8d:61:
18:0d:4f:7e:04:52:44:42:83:76:cd:24:76:2a:fd:5c:af:81:
38:9a:c1:29:ed:f0:b7:a0:8a:b4:e2:99:48:6b:91:f4:9b:c0:
3f:58:08:60:57:f6:ad:11:6a:88:17:5a:ff:e3:7e:da:4e:fa:
ff:e0:6f:d3:eb:ae:9a:61:50:98:ee:61:c9:35:83:c3:b6:fe:
3f:3c:02:05:83:26:ab:ac:e1:10:ec:b5:24:81:98:7c:eb:bc:
1b:ba:99:e7:c4:f7:09:89:b7:f7:df:38:cb:a6:1a:fc:48:94:
d6:0f:df:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:31 2024 by rpki-client on console-fra.rpki-client.org