Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/kbKLCxuYBJlRVpJajEV2W2qCNHg.roa
File: kbKLCxuYBJlRVpJajEV2W2qCNHg.roa (raw, json)
Hash identifier: MVwnkM75kjJ8XjdI5Zr4tV4xJGSrIuDV6sHXcK7hi5o=
Subject key identifier: 91:B2:8B:0B:1B:98:04:99:51:56:92:5A:8C:45:76:5B:6A:82:34:78
Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial: 04266A40
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/kbKLCxuYBJlRVpJajEV2W2qCNHg.roa
Signing time: Wed 26 Jan 2022 09:17:46 +0000
ROA not before: Wed 26 Jan 2022 09:17:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212786
IP address blocks: 45.86.192.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69626432 (0x4266a40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
Validity
Not Before: Jan 26 09:17:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=91b28b0b1b9804995156925a8c45765b6a823478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b6:e9:db:d7:13:9b:71:43:f0:a2:4f:8f:5e:
88:ef:b2:a9:fc:48:16:8b:2c:05:a7:62:0e:db:d7:
62:2d:2b:e3:5e:1f:d2:85:a7:d9:88:86:0d:b2:4f:
1b:7f:90:ae:b4:b9:e6:e0:25:a0:8e:d0:8f:e0:16:
7f:76:ad:56:54:f9:08:ba:69:bf:6b:5c:9c:34:d4:
61:1f:b9:05:0d:89:07:d0:a0:67:82:90:cf:f6:4a:
25:7d:ae:c7:41:fa:5f:04:80:43:68:36:40:20:b5:
45:72:e4:58:b2:46:97:0a:f7:83:f2:1f:c1:7e:3e:
6e:fc:38:f3:1b:45:f0:09:e4:4a:85:ff:d0:56:e8:
7d:12:05:2d:a2:52:f3:df:e8:8a:26:50:da:57:dc:
4c:b8:d7:03:b4:56:44:f7:ab:a3:a3:79:6a:0e:5c:
48:81:89:30:7e:b6:76:fe:48:3a:93:60:c2:83:b2:
5e:92:61:b9:2e:a8:d9:08:e3:a7:af:b2:52:59:07:
5e:a2:b5:1f:2d:59:a6:94:c0:04:24:38:88:1a:a1:
bd:b4:74:2c:7e:65:e2:a4:d8:f2:14:ff:fa:34:74:
d3:07:07:8e:01:32:45:9e:8b:25:df:dd:58:f7:57:
30:1f:e1:5d:d1:04:6e:1e:2c:86:5d:0d:49:2e:36:
84:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:B2:8B:0B:1B:98:04:99:51:56:92:5A:8C:45:76:5B:6A:82:34:78
X509v3 Authority Key Identifier:
keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/kbKLCxuYBJlRVpJajEV2W2qCNHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.192.0/22
Signature Algorithm: sha256WithRSAEncryption
77:87:e2:85:9f:93:b8:2d:7b:f4:4a:7b:5d:dc:27:0f:e6:85:
9c:80:c8:f3:a1:0d:ad:0f:e6:2d:99:b3:dc:fb:f8:f5:ae:70:
ab:21:6a:47:bc:63:1b:fd:d9:1e:aa:b9:1f:79:b1:a8:00:61:
8e:69:1f:09:13:45:16:8d:e6:7f:66:3c:bf:02:22:47:f8:4d:
70:a0:d7:ea:fb:1a:0d:ea:c9:46:77:b5:0f:37:3b:04:c6:44:
6d:ab:a6:2c:72:99:04:88:f3:e7:81:23:6e:e0:76:ea:bd:40:
1f:70:6f:89:c0:10:99:2a:4a:61:16:bf:99:12:c2:98:d6:02:
4a:d7:c3:f4:7e:9f:7b:62:71:48:b6:5d:35:f2:af:ed:87:6e:
6c:51:65:49:e3:2b:36:bf:04:d4:0c:98:d3:a9:16:40:61:ce:
a8:c5:05:fa:08:42:13:42:58:3b:97:fe:0f:90:c4:bb:7d:29:
3a:a5:08:e7:d0:11:82:66:3a:ac:c2:ec:93:37:09:a8:6c:a7:
b8:3f:62:ea:01:82:99:66:9e:01:7e:ef:77:c4:4b:27:c7:ec:
58:fe:3f:0e:e1:52:78:72:b8:fb:02:e4:f9:96:f2:87:be:92:
58:cf:ed:00:14:6c:91:e5:6d:78:f3:4c:35:ac:d6:45:e1:fc:
bd:47:ed:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:08 2023 by rpki-client on console-ams.rpki-client.org