Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/L6i_kjpvh7SzExGBZXfpCB3ZjZw.roa
File: L6i_kjpvh7SzExGBZXfpCB3ZjZw.roa (raw, json)
Hash identifier: bvKPinA1Vfan2RNu5D+m8lMJ4A39ycC/hvt2DbRK/Oc=
Subject key identifier: 2F:A8:BF:92:3A:6F:87:B4:B3:13:11:81:65:77:E9:08:1D:D9:8D:9C
Certificate issuer: /CN=0e831fd70c6bd37a2a75d7a0eac031c92da8e185
Certificate serial: 0184481730745C4B1617FFFC1F6FBEA79A71
Authority key identifier: 0E:83:1F:D7:0C:6B:D3:7A:2A:75:D7:A0:EA:C0:31:C9:2D:A8:E1:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DoMf1wxr03oqddeg6sAxyS2o4YU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/L6i_kjpvh7SzExGBZXfpCB3ZjZw.roa
Signing time: Sat 05 Nov 2022 13:59:50 +0000
ROA not before: Sat 05 Nov 2022 13:59:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54825
IP address blocks: 45.130.47.0/24 maxlen: 24
45.130.46.0/24 maxlen: 24
2a10:b583::/32 maxlen: 32
2a10:b581::/32 maxlen: 32
2a10:b582::/32 maxlen: 32
2a10:b580::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:48:17:30:74:5c:4b:16:17:ff:fc:1f:6f:be:a7:9a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e831fd70c6bd37a2a75d7a0eac031c92da8e185
Validity
Not Before: Nov 5 13:59:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2fa8bf923a6f87b4b31311816577e9081dd98d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:21:69:a3:b6:ca:e5:b3:e6:e7:17:52:02:fc:
10:76:df:9d:1e:18:6b:ad:45:d2:78:2a:d9:af:91:
5b:af:31:cd:5d:6d:6f:4b:61:7f:e5:67:f5:a8:20:
ee:9f:2d:c2:5e:ae:35:c8:a8:68:3a:4d:67:e3:30:
8c:e6:46:6b:4b:b7:0c:b7:89:e9:29:63:ef:b3:c7:
67:c9:91:23:b4:93:65:5b:48:24:53:c5:f3:b3:2e:
f3:ad:79:c8:8d:e5:16:4b:79:92:49:ed:e2:c8:aa:
f0:7c:ce:de:f9:95:31:b7:92:10:6f:6f:12:78:34:
bb:46:99:5a:aa:19:42:79:cf:02:b7:2f:d0:35:7f:
a6:44:c0:6c:eb:1b:a2:00:2c:20:0e:d8:5f:7f:b4:
83:3a:c5:89:fd:3f:1d:6b:5b:7a:30:a3:21:4c:bb:
a2:6c:51:d9:1e:f4:8f:92:ab:bc:77:ea:01:03:5e:
ff:5b:57:d1:ad:09:7e:18:e7:ba:d1:47:f3:a5:ef:
91:eb:02:e0:f5:c5:a7:70:5d:a9:8c:1c:2a:8a:53:
c1:8e:d2:49:b2:80:7b:05:26:8e:8a:5c:81:e1:96:
d2:20:72:d5:50:4c:fa:24:dc:fa:4d:b8:5c:60:03:
c0:df:44:a8:05:86:dc:c3:4e:92:9e:d1:cb:3a:21:
22:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:A8:BF:92:3A:6F:87:B4:B3:13:11:81:65:77:E9:08:1D:D9:8D:9C
X509v3 Authority Key Identifier:
keyid:0E:83:1F:D7:0C:6B:D3:7A:2A:75:D7:A0:EA:C0:31:C9:2D:A8:E1:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DoMf1wxr03oqddeg6sAxyS2o4YU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/L6i_kjpvh7SzExGBZXfpCB3ZjZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/98a661-44f5-4a05-acaa-e67582f23097/1/DoMf1wxr03oqddeg6sAxyS2o4YU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.46.0/23
IPv6:
2a10:b580::/30
Signature Algorithm: sha256WithRSAEncryption
6a:ee:c6:48:70:62:18:bf:91:6e:12:99:79:20:e7:a5:f9:94:
a0:c8:a9:c3:ac:83:da:bb:5a:1f:6e:25:fa:ad:38:87:3f:3c:
c5:a0:11:b0:97:0a:2d:17:9b:8e:51:28:b0:37:8f:07:98:12:
7c:f4:48:b0:68:2c:30:05:ee:67:56:cd:f3:03:e2:ff:4f:8b:
8e:be:c0:99:b2:00:d7:35:7d:3a:05:ce:8e:c8:c9:67:7e:6e:
ab:c6:f3:d5:3a:73:98:f2:a7:26:ab:fc:b1:44:f7:c6:9a:41:
e3:34:94:7c:70:3f:0d:47:d3:75:83:f1:c5:6d:e1:33:55:74:
80:03:9b:ec:58:9b:90:ec:9c:0b:35:ff:18:90:d7:50:f3:cb:
c4:e8:34:bd:05:8c:92:7e:9c:9c:4b:9c:5c:ab:a6:6e:43:11:
cf:93:8d:12:7d:37:38:d7:13:d9:c4:01:ad:48:25:12:16:1f:
1d:59:12:95:f1:db:77:fb:26:0f:6a:17:29:60:f4:ba:d0:ea:
5e:b3:1e:d9:89:c5:6a:5d:1f:12:7b:23:d1:70:ad:46:66:f7:
de:e5:9b:3d:9b:4e:e7:11:e2:08:a7:cc:ac:98:0a:2e:48:0e:
a2:61:a5:cf:7a:27:f2:22:2e:70:1d:9f:6c:16:2d:99:4a:07:
a3:71:fc:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:02 2024 by rpki-client on console-fra.rpki-client.org