Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/6EZ6jJHTtm-CUM1hGb7hYU5vcZA.roa
File: 6EZ6jJHTtm-CUM1hGb7hYU5vcZA.roa (raw, json)
Hash identifier: I+AwDi2HQP8k3fBHhK0WP0EK1VUs1ITXByiYZVqHKbg=
Subject key identifier: E8:46:7A:8C:91:D3:B6:6F:82:50:CD:61:19:BE:E1:61:4E:6F:71:90
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 07A91E96
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/6EZ6jJHTtm-CUM1hGb7hYU5vcZA.roa
Signing time: Sat 01 Jan 2022 08:01:49 +0000
ROA not before: Sat 01 Jan 2022 08:01:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57848
IP address blocks: 45.131.152.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128523926 (0x7a91e96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 08:01:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e8467a8c91d3b66f8250cd6119bee1614e6f7190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:79:3e:66:00:95:68:d6:a3:8f:d2:0e:ec:e9:
e2:5d:0c:08:ce:64:50:14:b1:67:ef:db:b0:af:4a:
26:d2:bf:b8:78:97:88:60:fd:48:eb:be:43:6e:69:
68:ba:58:f2:ad:dc:43:0e:be:5d:84:69:e3:d3:bf:
e4:4b:b1:48:b1:f4:05:a8:aa:ae:08:93:c2:ad:46:
c3:5f:86:14:73:f5:08:71:30:7b:9f:fd:e1:42:f2:
6f:e8:6f:65:a3:3d:3f:27:33:fc:80:51:50:56:d2:
a5:73:bf:50:4d:50:83:8b:1c:ac:9e:1e:f3:5c:cf:
44:d1:59:44:2b:ad:ae:21:ae:d1:47:d7:52:23:98:
6a:aa:27:2b:24:21:85:7b:74:b1:0d:85:59:42:8d:
68:b4:65:81:bc:3d:a3:41:f0:04:d3:46:60:62:dc:
c5:ca:a1:c9:68:78:7a:b2:8b:02:79:25:94:b4:99:
df:3c:a9:41:5c:1f:d3:31:d1:a1:2e:3c:0f:72:4e:
0c:88:5f:65:2c:56:10:fa:24:5b:d7:99:3e:df:a9:
28:0e:80:5e:ea:7d:6e:85:58:ad:3e:5c:9d:1f:98:
b1:d3:f9:a4:85:22:e3:03:80:d1:dc:58:47:8d:0f:
49:76:6b:ec:5b:2c:04:a6:ae:c5:15:a0:fc:4e:1b:
f1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:46:7A:8C:91:D3:B6:6F:82:50:CD:61:19:BE:E1:61:4E:6F:71:90
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/6EZ6jJHTtm-CUM1hGb7hYU5vcZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.152.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:07:f7:6a:e4:a5:58:a2:d2:0d:0e:80:80:1e:87:1a:01:2e:
80:ba:d7:96:19:99:16:ee:21:c6:b0:5d:93:e5:fe:53:ea:cf:
33:12:52:73:9f:c8:06:06:dc:10:27:63:45:1d:bf:11:ba:78:
3b:67:d2:2c:2a:bc:3d:1e:53:09:dd:cc:58:15:04:d3:ad:2e:
c7:cf:66:59:52:46:81:86:02:f9:dc:d1:99:ed:d2:0b:db:28:
6a:f8:f1:72:04:a0:fe:38:c0:e2:6f:43:43:89:80:36:4e:04:
4c:d1:d8:fa:ce:46:2d:9c:2f:67:36:37:86:c5:b3:c3:20:8c:
e3:c3:e1:64:e6:46:d8:e6:b8:75:eb:a8:b6:41:ee:07:d5:14:
92:69:07:55:d1:52:70:38:c0:98:a7:e4:68:9e:c6:f6:f6:1f:
14:5b:2d:df:06:72:29:15:d7:4d:d5:7a:6e:f7:5d:75:6e:3c:
5f:62:b5:bb:d6:54:2d:90:37:e1:21:b5:f6:12:31:f9:f4:4c:
40:06:c9:24:ef:58:5c:f4:73:a1:40:3d:a7:49:a1:6a:68:78:
d6:73:57:49:5d:e2:8f:8d:34:59:63:07:bd:1b:b7:0d:70:5e:
02:00:18:31:88:ed:85:18:c9:9a:b7:08:67:23:95:99:a8:57:
7f:69:5e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:58 2023 by rpki-client on console-fra.rpki-client.org