Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/bJJp_XbS2vYvNSmYXppAbQd3HvE.roa
File: bJJp_XbS2vYvNSmYXppAbQd3HvE.roa (raw, json)
Hash identifier: u1OgKMNBJYtMZqItCIco7o6kSs4lFgAXvpwRrPgEOkU=
Subject key identifier: 6C:92:69:FD:76:D2:DA:F6:2F:35:29:98:5E:9A:40:6D:07:77:1E:F1
Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial: 03DFCA75
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/bJJp_XbS2vYvNSmYXppAbQd3HvE.roa
Signing time: Sat 01 Jan 2022 08:59:19 +0000
ROA not before: Sat 01 Jan 2022 08:59:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198521
IP address blocks: 45.15.52.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64998005 (0x3dfca75)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
Validity
Not Before: Jan 1 08:59:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c9269fd76d2daf62f3529985e9a406d07771ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7f:99:91:9c:a4:2d:a2:71:bb:3b:1a:27:6d:
3a:e6:6c:1b:9d:f4:69:50:e8:27:c1:c1:5a:e0:ca:
9e:16:e1:93:33:49:3b:a0:a3:56:d7:9f:ee:f3:58:
bb:e1:97:7f:cc:24:e2:6a:22:ac:b9:41:f8:61:e7:
c7:2f:86:50:5f:d0:8b:d2:15:13:fd:9c:90:86:98:
f9:25:4b:26:a3:56:ce:9d:90:4f:4f:81:53:4c:6e:
25:21:2f:4c:81:23:18:29:84:9c:92:e3:80:27:81:
c4:28:74:b5:31:fa:2b:56:36:b6:30:b0:9a:69:f0:
a9:95:92:cf:69:c0:dd:95:a9:60:51:4e:8e:a9:05:
9e:d4:98:73:98:ae:f7:ad:5d:97:7f:15:db:90:2c:
a1:72:02:28:8d:8d:0a:df:80:8f:6a:72:2c:65:43:
2e:a0:14:83:52:3f:45:1d:89:6d:d9:36:4e:df:9d:
b6:84:91:08:d3:77:c1:c9:c2:85:8d:e1:cf:3e:ec:
27:6d:2a:4d:45:eb:2b:6f:b4:3a:2d:9d:b2:6b:be:
18:f5:a9:a3:7a:cc:49:a6:33:c7:e6:21:68:d9:5d:
e4:4f:9d:06:e7:90:8a:e9:43:83:bc:80:6c:e5:b4:
28:35:4b:7e:64:ba:9e:4d:37:60:06:05:7b:6d:ea:
36:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:92:69:FD:76:D2:DA:F6:2F:35:29:98:5E:9A:40:6D:07:77:1E:F1
X509v3 Authority Key Identifier:
keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/bJJp_XbS2vYvNSmYXppAbQd3HvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.52.0/24
Signature Algorithm: sha256WithRSAEncryption
21:98:0e:1f:65:40:da:64:ae:b9:cf:1b:64:49:ad:02:7d:67:
86:20:35:7f:96:a7:15:f1:5b:87:84:3e:32:92:5f:6b:a1:41:
cb:27:10:ae:e0:01:e6:36:9d:f5:4f:bf:d5:df:52:48:19:a5:
bd:e9:3d:f6:06:78:b4:21:86:48:cd:75:32:57:a7:cc:fd:24:
1c:45:f0:5d:6d:f6:a2:e5:e0:39:0f:09:0e:1c:7e:9c:fa:6c:
c4:66:25:9d:e8:00:54:df:6b:80:cb:27:e6:48:cb:8a:a0:84:
34:71:62:c3:bb:f2:f8:bd:c4:a7:14:2d:28:82:f8:d2:c3:a5:
67:e0:ce:1b:1f:81:21:f3:99:c4:6b:57:00:15:76:6e:98:ce:
ff:71:2e:b2:2e:0c:d6:4f:bc:60:83:cd:db:0e:0c:1f:d5:33:
70:97:00:73:28:7e:ea:c0:9c:56:68:e6:69:f0:a6:c1:dc:fb:
6d:35:ff:ce:8a:28:fb:4e:3c:2b:b4:b8:fe:37:a9:49:c9:70:
db:1d:94:21:ff:d9:77:7a:42:5c:ee:85:3d:97:5b:40:ad:75:
6f:75:b0:3f:09:31:07:8c:ac:0d:9d:b0:1e:df:81:cb:b1:35:
66:f9:ca:03:a4:3e:a3:a3:c9:91:03:29:9c:86:d6:9c:45:dd:
40:a1:82:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:31 2024 by rpki-client on console-fra.rpki-client.org