Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/w7_kl8dyroKwp_GDkcsLJCxqXkU.roa
File: w7_kl8dyroKwp_GDkcsLJCxqXkU.roa (raw, json)
Hash identifier: vSrhhIV+byhj3roJIl0/NhbTuEOQT2nb+h7LwAgQu3Y=
Subject key identifier: C3:BF:E4:97:C7:72:AE:82:B0:A7:F1:83:91:CB:0B:24:2C:6A:5E:45
Certificate issuer: /CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Certificate serial: 076C9BAC
Authority key identifier: A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/w7_kl8dyroKwp_GDkcsLJCxqXkU.roa
Signing time: Sat 01 Jan 2022 00:50:35 +0000
ROA not before: Sat 01 Jan 2022 00:50:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 202945
IP address blocks: 45.154.60.0/24 maxlen: 24
2a0f:b100::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124558252 (0x76c9bac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6562d0869480dc11b74a552cd167b6f6339c8ba
Validity
Not Before: Jan 1 00:50:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c3bfe497c772ae82b0a7f18391cb0b242c6a5e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3c:7a:37:64:75:79:9b:a1:e5:80:c7:31:95:
ca:0a:2a:c3:d3:10:27:9c:c6:49:3f:fd:be:82:e7:
c2:88:61:cb:d5:94:f1:44:60:67:3f:ce:29:2d:c4:
a3:10:9d:67:62:65:4f:10:79:3d:ee:fa:62:43:98:
9d:15:59:c0:1e:05:ee:08:b4:ed:29:4c:b5:7b:50:
a3:10:7f:8e:ed:29:da:7f:74:3f:aa:49:bb:a0:72:
2c:ca:af:dd:8a:02:fc:12:66:96:a8:0b:d1:67:95:
f8:16:dd:10:71:65:30:45:e9:c4:7f:15:46:13:a7:
42:46:eb:f8:d4:83:db:05:37:f8:f1:7c:a0:ab:4b:
4f:fa:35:fd:52:66:a5:07:82:07:4b:a5:80:ae:71:
40:85:89:5e:0e:3e:96:4b:bb:d1:e2:6a:90:ea:1a:
35:50:66:b9:d6:8e:e9:77:49:69:c8:32:7a:e1:1d:
a0:6d:21:ed:f7:fa:69:56:2f:ab:f2:62:a6:36:20:
4e:49:0d:88:17:c7:55:3a:8e:52:ba:90:ce:6f:ea:
e5:53:88:83:fc:d0:60:22:74:e5:89:cc:d1:bc:46:
3e:32:10:19:32:5d:4b:d3:cb:94:e6:c6:23:80:9a:
99:df:25:c5:dc:32:3b:0c:23:20:77:98:8e:cc:a2:
a3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BF:E4:97:C7:72:AE:82:B0:A7:F1:83:91:CB:0B:24:2C:6A:5E:45
X509v3 Authority Key Identifier:
keyid:A6:56:2D:08:69:48:0D:C1:1B:74:A5:52:CD:16:7B:6F:63:39:C8:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/plYtCGlIDcEbdKVSzRZ7b2M5yLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/w7_kl8dyroKwp_GDkcsLJCxqXkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/212dd2-da8d-4048-916a-45a8fed3a2a5/1/plYtCGlIDcEbdKVSzRZ7b2M5yLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.60.0/24
IPv6:
2a0f:b100::/40
Signature Algorithm: sha256WithRSAEncryption
0d:85:04:bb:b9:d5:4d:ae:89:29:38:fb:00:09:c4:05:14:18:
82:9c:41:b9:38:5a:5e:64:c1:f9:b2:70:3c:cb:9d:05:ef:5f:
78:37:67:48:30:4e:e1:ac:ce:d0:f6:e9:0e:9f:8d:be:b9:04:
be:a4:3c:d5:6a:51:68:ba:ef:d3:20:9d:53:87:7d:42:31:e0:
d2:6a:77:23:f7:a9:08:07:74:7b:f4:98:45:f1:35:fe:3e:12:
e4:c8:52:74:02:b6:19:49:e8:ac:82:98:2a:6c:95:2c:25:cc:
04:a0:53:49:86:47:81:d1:88:09:89:fc:11:e7:a1:9e:7c:e7:
ed:c0:95:cc:f1:d3:5d:8d:2d:c9:07:af:d4:9c:94:3d:e2:01:
bb:71:92:8d:28:8c:44:ea:66:fa:52:0f:e6:68:a8:c9:a6:f3:
dd:9e:96:f0:dd:c1:dd:7b:d3:d9:40:ea:6c:73:00:9b:a9:07:
f7:b4:ad:6d:33:b3:ed:cb:14:d2:b3:e3:6a:d9:eb:b5:31:a0:
09:cc:d4:49:f5:7d:47:ea:6e:45:12:aa:5c:f7:fe:c5:6d:28:
33:8c:49:23:eb:e0:31:bf:b4:e9:36:ad:a4:ba:95:36:64:91:
20:fd:72:b9:15:89:0b:c1:9d:c3:27:13:47:72:e4:0d:e8:09:
6c:a5:19:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:58 2024 by rpki-client on console-fra.rpki-client.org