Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/8ea34c-af87-4721-9e69-2af3b76c18c9/1/4kNM_3J_6OqDjIHA2zotlIKBRio.roa
File: 4kNM_3J_6OqDjIHA2zotlIKBRio.roa (raw, json)
Hash identifier: 4OhF3Ssk7tVrUFotMkiptYrO5aSNzKu+nV+8njnXVF4=
Subject key identifier: E2:43:4C:FF:72:7F:E8:EA:83:8C:81:C0:DB:3A:2D:94:82:81:46:2A
Certificate issuer: /CN=9ed8fcff3193ac53bb4b07c48d3dd29ef588eb8d
Certificate serial: 05F3AB1F
Authority key identifier: 9E:D8:FC:FF:31:93:AC:53:BB:4B:07:C4:8D:3D:D2:9E:F5:88:EB:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntj8_zGTrFO7SwfEjT3SnvWI640.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/8ea34c-af87-4721-9e69-2af3b76c18c9/1/4kNM_3J_6OqDjIHA2zotlIKBRio.roa
Signing time: Sat 01 Jan 2022 02:00:57 +0000
ROA not before: Sat 01 Jan 2022 02:00:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50628
IP address blocks: 45.144.92.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99855135 (0x5f3ab1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed8fcff3193ac53bb4b07c48d3dd29ef588eb8d
Validity
Not Before: Jan 1 02:00:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2434cff727fe8ea838c81c0db3a2d948281462a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:89:65:59:27:bc:60:1d:ab:52:8e:6c:f5:ab:
72:26:08:0b:a8:cc:32:3e:bb:d4:09:58:bf:cf:00:
55:5f:46:42:dd:32:ab:13:e8:f7:dc:d5:13:69:73:
b8:11:ab:da:83:69:27:18:1d:0c:0c:60:ea:4b:27:
a7:f3:58:5b:c5:14:bc:e1:31:1a:bf:3c:94:48:30:
14:93:8c:af:89:f2:3d:bc:27:55:06:7d:85:9d:96:
71:76:47:7c:8e:13:1f:6e:63:23:9f:8b:2c:b0:2a:
8a:1c:88:1a:f0:a6:06:f7:c2:78:41:e3:89:ea:29:
38:0d:a0:04:c7:35:ec:c6:76:83:ef:4d:27:61:9b:
c3:f0:73:6b:a4:06:7a:1b:7a:ef:32:3d:46:84:9b:
df:9d:4c:25:3a:cb:0a:8b:a3:bf:3c:ab:f0:41:69:
52:76:c4:bd:d4:8c:a1:90:be:11:b4:30:32:58:77:
ce:ee:d8:8c:39:ae:ef:69:ab:70:e6:fa:56:30:48:
2a:ac:20:0d:21:be:7e:1f:58:a5:83:6b:28:c1:4d:
6d:99:c1:0e:99:d5:68:97:e4:85:cb:38:29:5f:67:
4b:a3:8e:b6:ce:43:38:bd:3e:60:05:f2:dd:2c:4b:
13:f2:09:80:db:3c:ed:57:e2:47:75:85:00:1c:37:
3e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:43:4C:FF:72:7F:E8:EA:83:8C:81:C0:DB:3A:2D:94:82:81:46:2A
X509v3 Authority Key Identifier:
keyid:9E:D8:FC:FF:31:93:AC:53:BB:4B:07:C4:8D:3D:D2:9E:F5:88:EB:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntj8_zGTrFO7SwfEjT3SnvWI640.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8ea34c-af87-4721-9e69-2af3b76c18c9/1/4kNM_3J_6OqDjIHA2zotlIKBRio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/8ea34c-af87-4721-9e69-2af3b76c18c9/1/ntj8_zGTrFO7SwfEjT3SnvWI640.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.92.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:ce:99:71:6b:2f:f6:0a:af:75:2f:f2:bd:a5:1d:93:df:22:
23:e8:b0:10:3e:9e:82:d3:22:af:69:b1:e9:6f:f4:75:dc:2b:
b1:a7:91:b2:05:54:fd:68:ba:6e:bb:b1:f8:1d:61:d6:a7:87:
31:d0:c3:93:83:89:24:8b:86:ec:6e:5a:19:22:46:06:ff:82:
92:3b:c0:8d:6e:d3:5b:38:5a:70:1d:14:a1:cd:3f:a4:3a:4b:
23:e3:d5:e9:a7:ac:32:b9:19:2f:48:a8:57:78:9b:0e:22:1a:
81:71:20:8f:81:1e:60:25:c8:1d:04:3f:bd:d8:27:00:6c:a3:
8e:3d:b7:0d:2e:7a:42:c5:11:a2:7f:0e:d0:f7:b3:72:f9:57:
79:f7:ee:06:43:74:0f:ff:1c:8d:b6:5d:13:77:63:d9:f4:b4:
9d:27:df:02:63:8f:b1:0e:9c:da:56:b0:7b:ee:e1:21:45:f4:
38:f4:f8:82:b7:3c:79:77:d1:8f:4f:5a:76:05:d8:5f:98:0e:
79:37:24:c0:3d:30:ba:10:78:d9:1a:1b:56:c9:06:6e:3d:38:
be:b9:d3:ed:62:6c:5f:14:b6:f7:a2:e3:c0:8d:7f:24:9d:1c:
e8:fb:9c:94:74:42:97:71:c1:28:dc:17:82:eb:76:2d:a7:9d:
14:fd:e8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:47 2024 by rpki-client on console-fra.rpki-client.org