Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/WHahd3QIYGhXVuB8UpCXSCzcImg.roa
File: WHahd3QIYGhXVuB8UpCXSCzcImg.roa (raw, json)
Hash identifier: whmVJvpnWMY//5DU6Hs4iT3jMOXGftI3K6dGru312Js=
Subject key identifier: 58:76:A1:77:74:08:60:68:57:56:E0:7C:52:90:97:48:2C:DC:22:68
Certificate issuer: /CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Certificate serial: 0302C1B0
Authority key identifier: 81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/WHahd3QIYGhXVuB8UpCXSCzcImg.roa
Signing time: Sat 01 Jan 2022 01:55:28 +0000
ROA not before: Sat 01 Jan 2022 01:55:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8412
IP address blocks: 45.12.96.0/23 maxlen: 24
45.12.98.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 50512304 (0x302c1b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Validity
Not Before: Jan 1 01:55:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5876a177740860685756e07c529097482cdc2268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fa:2a:c8:29:b5:7b:34:f3:77:c5:27:fd:87:
25:51:1c:f6:f4:2a:61:98:34:e5:11:35:8c:b8:e1:
23:d8:6d:a4:7b:91:68:bf:c0:c7:11:ec:0e:dc:33:
93:8e:9a:d1:c7:22:b2:36:79:db:b4:d9:04:ba:bd:
68:d0:46:24:ba:b6:e2:61:ce:be:4f:74:67:f0:68:
ee:06:ea:2c:da:3e:d8:20:35:0b:f1:98:39:52:dc:
c8:66:c7:30:5e:7c:4e:e6:20:8d:5f:e8:93:24:f7:
87:48:ed:fc:16:cf:4b:26:44:90:af:eb:d9:93:01:
83:8d:a1:05:7d:37:84:64:af:9e:af:bb:6b:92:f9:
76:82:a7:5e:12:16:e6:b5:d8:da:1f:24:0d:ec:84:
dc:a8:1f:08:8c:67:f5:18:6b:f8:33:b8:57:20:ff:
4d:57:03:07:eb:ec:7f:8a:47:8a:7d:5b:a3:63:bd:
8c:38:d8:a4:a5:16:f3:13:10:63:86:5f:f0:d4:1b:
cc:a1:72:64:5f:c1:db:aa:0c:21:e7:68:25:02:48:
4f:ae:a5:16:04:99:07:75:f0:dc:0e:d1:45:cf:60:
74:f0:c8:6e:92:14:5d:4a:20:0f:83:c0:67:3d:56:
bf:dd:25:b1:06:55:0b:06:3d:46:87:ff:4d:f6:b2:
70:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:76:A1:77:74:08:60:68:57:56:E0:7C:52:90:97:48:2C:DC:22:68
X509v3 Authority Key Identifier:
keyid:81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/WHahd3QIYGhXVuB8UpCXSCzcImg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.96.0-45.12.98.255
Signature Algorithm: sha256WithRSAEncryption
4a:e9:6f:09:4e:22:69:34:1a:aa:1a:c9:f2:87:56:f1:b9:79:
cc:c8:57:f0:64:70:72:25:cb:43:9f:25:8f:7f:df:68:8c:e4:
61:e5:d8:9e:2f:c3:8d:bc:c2:02:d5:25:fd:2c:db:31:ae:c1:
ce:14:c8:96:83:d6:e6:40:26:66:ee:24:a9:27:05:9f:a4:90:
70:30:91:5b:90:67:4e:16:04:63:3b:33:0b:2c:e3:a3:0e:f7:
d1:f3:e5:cb:3d:1e:a5:3e:e8:21:38:ad:4f:67:cb:26:0a:01:
9e:66:57:7c:1f:66:d0:0f:db:4d:42:49:ea:b9:ce:83:e9:bd:
d9:c4:fe:9d:e6:83:36:03:66:3b:8f:da:38:76:67:67:a1:7f:
8a:35:cc:64:5b:c7:40:39:da:cc:b8:95:e5:b6:56:9f:d5:97:
e5:1f:59:72:e8:dc:99:f6:ea:ca:68:80:92:9c:ce:b5:ae:1b:
37:c3:fd:7a:da:7a:7d:b7:ef:9a:57:72:7a:78:6e:8f:7e:f5:
30:9c:30:33:55:ec:22:58:8a:5f:61:94:d6:ac:9c:a2:1c:53:
ec:ed:a3:74:d7:1c:2d:b5:5a:03:ee:f7:4f:47:08:4e:34:d6:
6d:e8:02:7e:05:83:39:f9:22:76:b6:a1:e1:ed:1c:87:7d:fb:
8d:97:03:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:24:48 2024 by rpki-client on console-ams.rpki-client.org