Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/dlk5D6JktyzcZHTaa3bsdv1fBhI.roa
File: dlk5D6JktyzcZHTaa3bsdv1fBhI.roa (raw, json)
Hash identifier: mYNIF6/OC+n3kjnUSbZeaD7FlvsQP+97D0/3Dd3aQQM=
Subject key identifier: 76:59:39:0F:A2:64:B7:2C:DC:64:74:DA:6B:76:EC:76:FD:5F:06:12
Certificate issuer: /CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Certificate serial: 076E9968
Authority key identifier: A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/dlk5D6JktyzcZHTaa3bsdv1fBhI.roa
Signing time: Sat 01 Jan 2022 00:50:36 +0000
ROA not before: Sat 01 Jan 2022 00:50:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210118
IP address blocks: 45.154.61.0/24 maxlen: 24
2a0f:b100:100::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124688744 (0x76e9968)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Validity
Not Before: Jan 1 00:50:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7659390fa264b72cdc6474da6b76ec76fd5f0612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bc:cf:dd:58:2d:38:d6:15:b5:2d:3b:53:e7:
88:a5:58:cd:15:3c:ca:e4:71:0e:9e:86:8f:1e:e6:
c5:f1:2e:83:01:93:0b:2a:11:4c:c8:d3:12:61:cb:
c0:de:2b:f8:36:79:a2:e8:c9:92:99:e2:8f:c6:e7:
3f:22:2c:20:a9:2e:3d:d6:4b:4d:b4:a8:da:2d:bf:
73:cf:c2:6d:f2:f4:bd:7d:5f:94:b7:a4:3c:cf:b3:
f9:e5:06:67:c9:60:8f:75:68:a5:fa:b8:f5:23:89:
87:23:d1:4d:2c:4d:ac:66:e0:f6:c6:31:63:41:87:
76:89:aa:f4:61:28:0e:60:f8:1d:f7:39:98:3d:0c:
04:7d:7a:50:29:13:54:d5:ef:11:ad:4f:8d:aa:6f:
dd:f0:46:3b:0b:a9:e5:0a:b5:d5:af:21:29:96:4a:
c1:59:70:d9:db:60:2c:16:db:53:65:44:15:a7:fb:
bb:1d:02:c2:a1:1a:49:b6:94:94:f9:33:a9:5e:79:
e8:7c:2f:20:6f:9d:5e:30:f4:37:d4:72:b4:14:1a:
98:ee:15:ec:77:f4:a8:5e:cd:60:26:8f:5d:97:e1:
a1:c2:d7:7a:5b:4f:b9:0c:ad:1d:dc:a7:50:f6:f4:
4f:01:8f:97:f7:48:8a:23:d9:4d:f7:f1:ff:ba:18:
08:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:59:39:0F:A2:64:B7:2C:DC:64:74:DA:6B:76:EC:76:FD:5F:06:12
X509v3 Authority Key Identifier:
keyid:A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/dlk5D6JktyzcZHTaa3bsdv1fBhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.61.0/24
IPv6:
2a0f:b100:100::/40
Signature Algorithm: sha256WithRSAEncryption
72:e4:1e:58:0d:0e:a8:d4:9d:4d:af:c9:1a:b1:03:c8:58:4f:
41:f3:64:c8:96:4f:b1:c2:a5:bb:08:9c:79:bf:4a:f3:93:4d:
e1:2f:f2:3f:44:e0:f0:08:23:e8:b7:a7:20:cd:44:b4:0a:d9:
a0:d2:5a:fd:26:c3:c0:3c:82:9a:ad:b3:f6:5b:8e:6d:4f:a6:
d6:35:1b:5a:27:25:21:12:8a:0e:c2:01:75:97:ff:a3:77:fb:
91:c8:af:3a:fd:a4:de:11:24:77:66:d8:42:9b:a5:1d:38:ff:
36:5d:72:50:8e:a7:62:ec:f0:ef:79:2e:85:c5:7e:dc:38:8e:
84:10:7a:48:c6:79:4d:37:f8:cb:79:1a:da:9e:e2:0c:d2:24:
fa:c1:93:d3:f1:ff:65:09:05:60:d7:75:76:65:bb:fd:7a:24:
e0:93:83:7b:3e:ba:f6:aa:bf:8c:67:66:9c:fa:76:23:e3:d8:
68:6d:15:e8:84:7d:db:30:ee:6f:96:e9:44:04:db:e0:d3:f0:
1d:79:8b:97:b3:00:28:fe:42:95:f8:39:52:ff:20:ac:cd:fc:
9a:7c:f9:be:53:0d:88:45:1f:a1:19:9d:30:28:32:54:ee:ef:
cb:bd:9d:8b:be:d9:58:a6:cf:06:94:58:03:ad:3e:69:12:4b:
b8:0a:2a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:58 2024 by rpki-client on console-fra.rpki-client.org