Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/twMyjponii2Vo3txz5TBXiLTm9M.roa
File: twMyjponii2Vo3txz5TBXiLTm9M.roa (raw, json)
Hash identifier: f2XdVZMNhowCDDaWVzsXbIbQd+4LDc3kNEheRYE1+wU=
Subject key identifier: B7:03:32:8E:9A:27:8A:2D:95:A3:7B:71:CF:94:C1:5E:22:D3:9B:D3
Certificate issuer: /CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf
Certificate serial: 07BAF2ED
Authority key identifier: 42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/twMyjponii2Vo3txz5TBXiLTm9M.roa
Signing time: Sat 01 Jan 2022 11:05:02 +0000
ROA not before: Sat 01 Jan 2022 11:05:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58197
IP address blocks: 45.128.168.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129692397 (0x7baf2ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a1f96f91c4a09f979c5b185c26cb00ae0f86bf
Validity
Not Before: Jan 1 11:05:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b703328e9a278a2d95a37b71cf94c15e22d39bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6b:c7:3a:1f:cf:9f:90:43:4e:d7:5b:bd:e5:
54:3f:09:1f:e8:b9:8a:6f:b3:f5:3a:c9:e2:39:27:
be:43:7f:70:6e:f5:ab:f0:73:4a:bc:88:08:8e:b6:
e1:79:b7:4e:67:1e:a5:cf:fe:67:5c:85:20:64:19:
9e:bc:a4:62:d1:52:73:6e:09:8a:d7:da:b5:c6:da:
41:17:78:2f:4c:22:c3:c6:44:c9:64:3a:17:98:26:
2c:c6:82:49:7d:20:33:7c:a5:25:69:71:94:ce:cc:
ab:0a:6d:3e:c4:c4:64:36:32:e2:c5:c6:ad:27:26:
cb:33:35:10:ec:25:72:25:2a:27:10:c1:33:86:05:
76:d1:d6:c2:1e:e1:58:fc:1a:fa:45:69:9f:ae:d7:
80:53:87:f0:7e:0e:74:a8:34:fd:34:0f:f5:12:41:
0e:f4:f9:b4:ac:54:6c:62:fa:7a:ad:be:9a:5d:e3:
a8:17:57:9c:85:cc:ab:9d:24:dc:ed:d3:d2:48:3d:
c5:e9:da:bc:01:b6:fc:5a:66:d1:71:87:8d:8a:94:
56:d6:03:67:4b:5f:3b:b1:59:f3:a6:04:5e:04:23:
95:fc:7e:46:7f:51:b4:ed:34:cc:bf:ce:ef:6c:aa:
30:4d:ec:6a:56:dd:ca:ed:10:9e:ac:49:18:fc:f4:
ea:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:03:32:8E:9A:27:8A:2D:95:A3:7B:71:CF:94:C1:5E:22:D3:9B:D3
X509v3 Authority Key Identifier:
keyid:42:A1:F9:6F:91:C4:A0:9F:97:9C:5B:18:5C:26:CB:00:AE:0F:86:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/twMyjponii2Vo3txz5TBXiLTm9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/45f60f-0fac-40ef-a30e-1e0ed9f344fc/1/QqH5b5HEoJ-XnFsYXCbLAK4Phr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.168.0/22
Signature Algorithm: sha256WithRSAEncryption
32:08:18:f0:7a:ee:06:5b:12:76:c7:fe:48:b9:c6:34:16:4b:
21:20:57:18:f3:d0:97:3a:01:91:af:4d:7d:16:6f:17:67:f8:
0a:7f:10:04:ad:82:62:fb:09:12:2b:c7:90:50:24:de:88:ad:
1d:03:aa:a5:a7:f1:f2:42:05:d9:88:d6:18:f5:ac:6f:2e:3e:
a2:ac:6c:80:94:10:35:26:60:07:49:ad:81:f3:6a:07:00:c1:
6a:15:a0:ed:44:89:41:48:39:2a:b5:23:e8:5b:3c:b7:6c:09:
a6:3d:ac:c6:e5:49:85:62:18:5c:cf:fb:d1:d2:24:54:f9:9e:
62:6f:00:d6:10:39:cb:ad:24:6f:62:ec:06:21:bd:9d:77:99:
49:4a:81:ed:0f:a9:3d:a8:d5:0b:49:c2:84:be:ab:87:03:5e:
1f:b2:b5:4c:01:5e:2a:f4:d7:3b:b2:5f:46:2e:2a:1d:f1:c6:
29:b5:02:0e:ff:84:46:45:57:d1:a9:6a:cc:97:0d:2e:65:b7:
99:22:08:8d:a8:7f:fa:e5:08:dd:10:99:ab:72:c0:17:1e:aa:
83:da:87:c0:46:81:6e:0b:39:e2:f0:3f:68:69:f2:ef:f9:eb:
77:5f:b9:d1:1c:a8:88:ec:43:66:c7:bb:58:04:f2:9a:79:70:
11:18:28:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:35 2024 by rpki-client on console-ams.rpki-client.org