Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/y9DNSxGzY-9d8AJKgzp93Ysbcus.roa
File: y9DNSxGzY-9d8AJKgzp93Ysbcus.roa (raw, json)
Hash identifier: WwX6hWPRahZkBm5IwpVEL65XZtpiSlV9tgyWR3pSS3w=
Subject key identifier: CB:D0:CD:4B:11:B3:63:EF:5D:F0:02:4A:83:3A:7D:DD:8B:1B:72:EB
Certificate issuer: /CN=75ea894ee05775e0ef061d086ca252147f5c91de
Certificate serial: 14D09ADF
Authority key identifier: 75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/y9DNSxGzY-9d8AJKgzp93Ysbcus.roa
Signing time: Sat 01 Jan 2022 16:04:07 +0000
ROA not before: Sat 01 Jan 2022 16:04:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207045
IP address blocks: 45.154.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 349215455 (0x14d09adf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75ea894ee05775e0ef061d086ca252147f5c91de
Validity
Not Before: Jan 1 16:04:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbd0cd4b11b363ef5df0024a833a7ddd8b1b72eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0f:e9:02:3a:66:41:b0:a3:04:b5:b7:90:82:
66:02:e1:5d:fe:71:ab:fc:72:72:d6:33:27:96:2f:
a1:6e:e0:cb:a4:ad:31:2f:76:62:20:e7:36:87:f7:
d1:41:62:7d:73:42:e0:e0:b4:fd:a5:bf:a1:ef:90:
c6:68:e5:65:09:41:14:65:3f:28:d4:2b:f4:4d:f1:
01:da:f5:3d:ae:ad:f6:b8:10:09:59:de:16:8e:cc:
3c:77:a7:29:c3:81:9d:e6:d8:76:af:83:d9:ff:2a:
02:f8:20:f5:da:cc:59:36:74:57:c7:0d:d4:b0:09:
45:a4:c8:1f:bb:d2:c5:2a:3b:c7:d3:96:23:28:f9:
ff:03:16:90:02:81:4a:07:86:bf:8f:9a:c5:84:a0:
69:f4:83:94:30:b0:74:71:23:17:87:06:2c:b0:4a:
65:ae:2e:38:e7:ad:41:12:1c:23:4a:08:3e:a2:58:
1a:f7:2a:f0:fd:ae:c5:74:5b:48:7f:e4:c6:2b:9a:
8f:c0:b1:0c:c5:81:db:14:03:c4:b6:7c:af:20:3a:
48:04:eb:c4:9b:53:19:c1:47:c6:5a:e4:25:43:df:
5b:86:cd:79:8f:cd:08:be:a9:66:26:7d:dd:68:02:
80:ba:73:cd:37:61:af:5a:81:7e:43:88:a2:6d:1a:
05:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D0:CD:4B:11:B3:63:EF:5D:F0:02:4A:83:3A:7D:DD:8B:1B:72:EB
X509v3 Authority Key Identifier:
keyid:75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/y9DNSxGzY-9d8AJKgzp93Ysbcus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.47.0/24
Signature Algorithm: sha256WithRSAEncryption
01:ec:a1:89:c1:55:fc:b5:e9:6e:3b:fd:9c:f7:9a:35:8f:28:
8a:6f:bd:28:11:2d:64:08:b2:bc:2b:16:0d:af:70:17:39:34:
f4:b6:da:5c:88:18:8f:63:75:96:c8:87:5d:71:4e:1c:62:22:
4c:3c:06:83:22:2e:4e:0c:e3:1c:cf:29:ea:3a:5b:52:03:2c:
eb:60:62:cd:ff:df:82:a9:c5:93:70:82:fa:67:91:d9:48:a8:
b1:cd:ba:ff:2f:b3:9a:f2:ea:06:88:8e:fa:9d:5d:c7:43:a0:
d0:a1:5b:61:79:e0:75:cb:30:c4:81:32:50:e3:57:db:98:85:
1c:be:ac:ad:bd:86:bc:ef:f1:93:46:cc:a1:ec:cf:24:c1:0c:
12:39:15:19:23:1b:b9:43:8b:90:35:ce:4a:5c:95:c4:82:34:
b5:bf:00:e4:39:fa:73:48:46:ad:35:96:14:9c:b7:73:10:f0:
b1:6d:a5:0c:f3:bc:11:01:49:97:6b:43:fa:48:a3:5a:90:ab:
fb:3f:88:93:31:b0:f4:7c:0c:7d:52:3d:80:88:e7:0b:94:4f:
d7:8d:45:c2:f2:0e:99:fe:10:04:69:da:f5:4f:b7:45:1d:58:
08:cc:36:6b:99:59:62:c4:37:35:67:de:bf:f1:8f:8b:7b:a9:
ba:48:1e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:17 2024 by rpki-client on console-ams.rpki-client.org