Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/ezGkQCyx4yT9l2kWbgOaHm3M960.roa
File: ezGkQCyx4yT9l2kWbgOaHm3M960.roa (raw, json)
Hash identifier: rszVbD2iGZKV6P26ENCDZ+PF+SGDAV7/YSqLbn7vGgo=
Subject key identifier: 7B:31:A4:40:2C:B1:E3:24:FD:97:69:16:6E:03:9A:1E:6D:CC:F7:AD
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 0685FC8D
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/ezGkQCyx4yT9l2kWbgOaHm3M960.roa
Signing time: Sat 01 Jan 2022 10:05:17 +0000
ROA not before: Sat 01 Jan 2022 10:05:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211584
IP address blocks: 45.132.26.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109444237 (0x685fc8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Jan 1 10:05:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b31a4402cb1e324fd9769166e039a1e6dccf7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ec:74:41:f3:9a:16:9b:a8:86:98:9f:a3:40:
24:ce:a8:95:4a:2a:8f:6c:e9:fa:43:02:ea:51:6d:
4d:a6:20:9a:8b:5a:1c:0f:24:a7:56:5a:9d:99:04:
6b:53:6f:9a:96:72:66:14:55:45:33:71:78:8e:29:
77:da:5d:01:fe:54:8d:30:59:89:b4:54:4c:23:39:
1c:97:fa:fa:f4:6b:91:1b:8b:e1:e9:89:a0:d1:a7:
45:a5:8e:f2:91:b0:dd:0b:a0:28:9b:71:cc:b8:a3:
9e:1d:e6:97:24:f0:85:85:73:01:60:ca:22:8c:75:
8e:b9:74:45:01:8a:07:f4:83:a7:72:55:3c:a8:44:
29:48:ea:7d:17:ea:5a:be:73:27:94:a7:1d:d6:d0:
a5:29:74:cb:7a:80:58:33:37:13:fb:4c:0e:f6:49:
0f:36:6c:7d:72:2b:a6:0e:71:4e:0c:e7:b5:62:c7:
aa:62:e9:5b:a1:7a:0b:a3:e0:a3:c4:03:e5:e5:66:
86:6b:2e:79:59:5e:57:ca:96:4a:37:02:cd:64:c8:
88:57:f8:98:aa:97:21:00:07:19:23:21:0c:44:2a:
60:18:fe:1a:cd:dd:bb:a5:c4:44:47:2c:b2:b1:b0:
a0:3b:0a:6c:7d:b4:cc:fe:14:d3:43:f4:a0:b5:c5:
f4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:31:A4:40:2C:B1:E3:24:FD:97:69:16:6E:03:9A:1E:6D:CC:F7:AD
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/ezGkQCyx4yT9l2kWbgOaHm3M960.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.26.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:76:fa:2c:18:0a:6c:cb:cf:c8:0d:00:7b:c8:91:98:72:a5:
16:84:89:1c:da:b3:b6:fc:a4:fd:74:32:43:34:d4:eb:11:25:
8d:b4:d9:db:02:f5:bd:6f:10:3c:69:03:e8:ae:6f:54:9b:4a:
12:23:74:2e:88:f2:6f:2a:2a:94:a0:68:ff:41:45:7b:4f:e7:
0e:48:7a:20:b1:56:e2:63:a3:7a:22:aa:0e:da:1a:40:04:9c:
0e:bc:73:ca:1c:0d:6b:6a:25:e6:4b:db:76:75:9d:fa:e3:ce:
45:00:71:82:a4:1e:0d:96:6a:e9:59:dc:31:a7:57:d5:c8:89:
9c:a2:c5:b3:63:43:fa:1b:4a:31:9e:6d:31:bf:5a:f2:80:a3:
7c:fc:2d:a3:da:56:8b:e7:02:de:f7:34:99:c8:e1:8f:4e:99:
53:a5:82:02:45:0a:42:58:dd:8c:64:b1:24:86:cd:45:83:df:
27:ee:39:17:1e:e7:28:70:f6:7c:2b:48:a8:49:9e:32:ea:f2:
e4:5e:4e:6a:f7:0b:cf:0e:ec:ae:c1:ac:42:97:4a:d8:73:32:
44:18:f3:f3:9c:af:9d:dd:1c:f1:ae:f6:46:58:6e:b6:af:0d:
be:79:1b:15:31:08:e9:88:fd:f0:88:95:6b:3b:5b:3c:99:ad:
34:a4:2a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:47 2023 by rpki-client on console-fra.rpki-client.org