Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/YIdRNiPiI5rXdIdJo3nkQYD_6Io.roa
File: YIdRNiPiI5rXdIdJo3nkQYD_6Io.roa (raw, json)
Hash identifier: tHnYZR7Kf7mWimUbaOqyDL+IxVmtJO9b00JmPOZKHcg=
Subject key identifier: 60:87:51:36:23:E2:23:9A:D7:74:87:49:A3:79:E4:41:80:FF:E8:8A
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 018252C33DB829F631ED06411742E06AF469
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/YIdRNiPiI5rXdIdJo3nkQYD_6Io.roa
Signing time: Sun 31 Jul 2022 05:38:23 +0000
ROA not before: Sun 31 Jul 2022 05:38:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 399641
IP address blocks: 45.132.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:52:c3:3d:b8:29:f6:31:ed:06:41:17:42:e0:6a:f4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Jul 31 05:38:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6087513623e2239ad7748749a379e44180ffe88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:bd:1f:44:53:05:17:71:59:7a:45:7b:de:33:
b9:25:bc:6d:22:81:46:a5:7e:2c:8a:6d:99:bd:dc:
dc:68:8a:0a:f4:0f:ec:85:fc:8c:15:94:80:b9:e1:
12:0f:17:0e:a9:f1:2c:3e:e8:ba:ae:52:8f:3c:7f:
22:60:95:f7:63:1c:c6:ec:7c:6c:b7:d5:b7:7a:1a:
1c:06:86:fb:c7:84:56:f7:8a:1e:69:07:7e:ee:c7:
fc:83:17:e5:08:1d:c9:09:f9:75:39:29:ed:ab:6e:
b9:c0:7f:02:7d:a7:8b:10:f9:4a:ae:60:45:13:18:
f6:46:12:f5:71:8c:9f:47:17:24:a0:5e:54:ad:fc:
4b:03:6b:bc:02:bd:a8:95:8b:6a:7a:90:23:e0:bb:
71:5d:34:9c:57:46:82:db:40:9e:87:59:de:1e:86:
29:40:70:7d:41:15:c9:67:05:a7:e7:e4:f6:9d:9a:
34:32:7b:f2:9e:1b:99:6f:b9:be:52:e9:79:e4:1f:
da:34:9d:a4:9d:cb:6e:20:d5:e5:df:52:a2:79:3e:
3c:14:9c:a9:74:ac:1c:9e:62:06:13:89:63:e3:73:
73:12:56:de:f7:5d:9c:9c:a4:d8:8c:d7:d3:44:4c:
7f:73:f5:d6:64:ee:03:3b:4d:cd:53:ea:da:72:4d:
4d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:87:51:36:23:E2:23:9A:D7:74:87:49:A3:79:E4:41:80:FF:E8:8A
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/YIdRNiPiI5rXdIdJo3nkQYD_6Io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.26.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:56:7b:8b:8c:ab:e2:79:a7:d5:6c:8a:30:ee:b3:47:d6:51:
11:96:88:67:3d:b0:8b:dd:77:ca:d5:59:ae:02:c9:ae:31:05:
30:69:15:e5:01:67:5a:b4:bb:93:73:36:19:49:8a:af:d1:b7:
af:2b:ba:b2:09:3f:a7:8b:46:77:95:cd:6a:a5:6e:71:f5:72:
dc:b0:1a:2b:e4:4f:d8:9c:f2:1e:9e:a3:28:9d:fe:ab:40:29:
03:88:c2:a3:be:ae:8e:b0:bb:52:8b:e9:73:24:37:62:db:74:
77:ba:59:89:d1:77:8f:3d:5a:15:b8:39:e6:63:ae:e1:15:54:
7b:44:10:61:89:a9:39:ed:79:7f:67:3d:59:e3:b5:b0:86:3e:
16:86:ec:9c:0e:67:a1:b1:74:f4:d0:16:15:34:b0:f8:c6:9e:
9d:44:91:e5:78:df:df:0a:6e:ba:77:18:a2:37:e5:51:7b:8a:
58:01:78:c5:fa:07:41:bc:3a:b8:08:f9:2a:2b:99:50:b5:c9:
df:a7:42:3c:ac:8e:cd:07:0b:01:02:ea:ab:7a:1c:1e:32:73:
fe:b1:13:75:2d:dc:05:ba:aa:69:e9:54:bb:b4:4d:2c:df:5f:
68:b8:de:f9:12:a3:b2:f4:e6:12:9e:0c:a9:bd:ae:f5:47:76:
29:32:6e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:23 2023 by rpki-client on console-ams.rpki-client.org