Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/S7jB7ZyyXg1D1t30__NDmZXveA4.roa
File: S7jB7ZyyXg1D1t30__NDmZXveA4.roa (raw, json)
Hash identifier: FJKWNFADFuDMczc+x/oRgzV5AATjG/+Lw+sUTw0zSyc=
Subject key identifier: 4B:B8:C1:ED:9C:B2:5E:0D:43:D6:DD:F4:FF:F3:43:99:95:EF:78:0E
Certificate issuer: /CN=cfeace714c29568ef197007b141d12758cc415d5
Certificate serial: 0265E328
Authority key identifier: CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/S7jB7ZyyXg1D1t30__NDmZXveA4.roa
Signing time: Sat 01 Jan 2022 09:58:24 +0000
ROA not before: Sat 01 Jan 2022 09:58:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49409
IP address blocks: 45.137.208.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40231720 (0x265e328)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfeace714c29568ef197007b141d12758cc415d5
Validity
Not Before: Jan 1 09:58:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4bb8c1ed9cb25e0d43d6ddf4fff3439995ef780e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c9:e1:db:49:7c:fa:93:ad:08:bb:f2:fa:a7:
23:3c:f8:a9:e0:d0:b9:36:13:a6:86:d8:94:5f:22:
37:58:53:8c:38:53:f9:1c:78:49:b3:d6:ba:08:fc:
43:81:3d:74:6b:9a:3d:02:a9:e7:9e:0c:41:a2:63:
52:ad:27:2b:44:18:e4:0a:e2:a4:55:27:2b:28:fa:
d4:dd:7c:03:0a:6b:56:92:39:7a:45:6e:bb:58:1a:
b6:0d:88:fa:1c:53:39:16:8d:92:38:5f:3d:a7:08:
ed:5a:bf:42:f7:05:1f:91:54:9c:e2:7d:97:5c:22:
d7:8c:c1:db:16:17:3e:66:a5:29:e6:ed:2c:55:18:
78:c0:de:eb:58:c8:5f:bf:54:c2:a0:72:51:1b:0d:
6e:2d:90:53:fe:d4:df:e5:54:ca:0d:50:04:8f:19:
1d:e7:24:ee:4f:c5:56:96:95:b3:9a:01:84:08:79:
13:b3:69:5b:21:75:47:5a:43:d8:70:e1:f3:37:23:
d5:26:58:80:59:c4:70:1f:52:9e:9d:92:53:56:9d:
e8:5d:a2:d6:0c:ef:47:56:9e:28:f3:35:49:b9:78:
77:f3:33:06:c3:b2:5a:01:de:59:c9:bf:7e:f0:c8:
a9:e9:82:e4:51:e2:1e:d8:39:4b:3e:75:ab:2d:64:
3f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B8:C1:ED:9C:B2:5E:0D:43:D6:DD:F4:FF:F3:43:99:95:EF:78:0E
X509v3 Authority Key Identifier:
keyid:CF:EA:CE:71:4C:29:56:8E:F1:97:00:7B:14:1D:12:75:8C:C4:15:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-rOcUwpVo7xlwB7FB0SdYzEFdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/S7jB7ZyyXg1D1t30__NDmZXveA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fc1bef-e72b-4a45-9463-8fd394b5357c/1/z-rOcUwpVo7xlwB7FB0SdYzEFdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.208.0/22
Signature Algorithm: sha256WithRSAEncryption
25:bd:f8:12:6e:32:35:18:f8:13:3d:c1:6a:03:f9:63:18:07:
8e:11:1f:9f:8c:05:91:78:7e:8e:2a:e7:c8:27:ac:47:65:3e:
cb:d3:58:e8:6a:ff:f8:a9:2e:e0:6f:1d:48:45:fd:17:68:44:
1c:17:e5:67:8d:41:05:22:8e:d7:a4:3e:11:cd:eb:4c:0f:36:
76:86:8e:1b:0d:08:90:75:d9:11:f7:68:6a:fa:b7:41:61:43:
b7:af:22:c4:88:44:1a:19:48:10:ab:97:5a:2a:07:83:96:5c:
9a:ef:0c:37:fb:6e:20:f0:7c:ad:5a:cc:f2:c7:bd:1e:04:35:
49:45:15:61:4d:ab:97:ae:21:02:00:5e:31:a4:b8:2e:a0:d5:
8d:ae:82:01:98:e3:ea:22:c1:d6:ee:f0:c2:7d:13:d2:ff:fd:
d0:45:4f:ad:0e:14:65:79:73:4d:3a:18:cd:b6:b7:d3:5c:42:
24:fb:5b:af:3c:a9:a8:5f:8a:79:35:a5:95:1a:d1:d8:5c:15:
b2:be:9c:ad:45:5d:dd:1b:2f:30:3f:0d:9c:4b:60:31:b7:cc:
07:5d:d2:8b:9e:88:bc:9f:fd:75:70:52:09:53:ad:1d:df:32:
59:59:04:02:c2:b0:7c:7b:dd:8a:77:af:63:b7:47:c4:c0:42:
7e:aa:e7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:34 2024 by rpki-client on console-fra.rpki-client.org