Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/rLJyVAOUas3bDM40N4BueqnpoG4.roa
File: rLJyVAOUas3bDM40N4BueqnpoG4.roa (raw, json)
Hash identifier: /cdV7V0/yjAE4H9zaAvnhUuaOKilul8r4rOidtgOiAo=
Subject key identifier: AC:B2:72:54:03:94:6A:CD:DB:0C:CE:34:37:80:6E:7A:A9:E9:A0:6E
Certificate issuer: /CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Certificate serial: 03DD44DB
Authority key identifier: 63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/rLJyVAOUas3bDM40N4BueqnpoG4.roa
Signing time: Sat 01 Jan 2022 04:03:16 +0000
ROA not before: Sat 01 Jan 2022 04:03:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208161
IP address blocks: 45.156.185.0/24 maxlen: 24
45.156.186.0/24 maxlen: 24
45.156.184.0/24 maxlen: 24
45.156.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64832731 (0x3dd44db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63d5b48848107b86e142d1c06c29d4b70e7394d3
Validity
Not Before: Jan 1 04:03:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=acb2725403946acddb0cce3437806e7aa9e9a06e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:67:d1:d9:ac:f3:fd:be:ac:f9:ec:1f:46:f3:
d2:61:51:ba:40:7c:96:5a:88:dc:8e:28:f6:b8:d7:
29:9a:f4:e0:15:58:1b:8d:66:58:18:31:32:67:34:
90:a6:61:9d:e5:37:65:10:79:dc:7b:b0:db:d9:57:
db:00:62:f4:4a:80:1b:33:be:73:c4:77:d3:27:28:
fe:6e:bc:c9:4f:4a:1d:45:8b:64:05:c7:30:76:cf:
eb:5c:11:68:ad:1f:7c:f8:9b:71:68:1c:05:0e:c5:
e2:de:53:27:56:e9:32:e1:c3:d0:1a:fa:8e:6c:68:
af:7c:d9:61:75:af:c4:f5:ae:b8:55:7a:c5:25:d8:
be:85:01:6a:22:e5:48:c0:a3:95:af:fc:ca:ca:25:
f2:12:8e:4f:8a:3f:78:a1:7e:90:25:2b:fb:69:52:
4e:78:4e:44:bf:a1:80:6e:cd:69:d5:e3:be:f4:b0:
c5:27:a8:4c:a4:ec:db:25:e1:b4:85:a2:fc:63:35:
6e:02:f0:fb:da:0e:98:ac:71:4e:63:2a:ba:91:30:
1d:aa:7e:31:51:9c:77:c5:d4:8b:46:72:7b:29:ab:
4b:90:91:f6:bb:4a:15:2b:09:53:1d:a8:c2:2e:ac:
98:e6:fb:0b:ef:b5:25:65:a2:09:92:a1:4c:02:c6:
1a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B2:72:54:03:94:6A:CD:DB:0C:CE:34:37:80:6E:7A:A9:E9:A0:6E
X509v3 Authority Key Identifier:
keyid:63:D5:B4:88:48:10:7B:86:E1:42:D1:C0:6C:29:D4:B7:0E:73:94:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/rLJyVAOUas3bDM40N4BueqnpoG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02cdc2-40a8-4781-860b-2388c906bc62/1/Y9W0iEgQe4bhQtHAbCnUtw5zlNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.184.0/22
Signature Algorithm: sha256WithRSAEncryption
18:61:d2:0e:73:ff:3d:48:e8:75:bd:8f:f8:2f:15:38:c1:a1:
42:17:3e:c0:76:a4:29:16:fd:61:66:1e:05:df:44:dc:a4:c8:
41:7b:c3:cf:e8:2f:02:5c:fb:4d:e6:78:d0:52:9d:28:a6:77:
3c:3c:56:44:5b:d4:7c:dc:5d:46:ea:b5:1b:a6:c0:51:78:c6:
c6:33:9c:2c:47:8a:bb:b1:29:e4:6a:87:ac:23:fb:7b:53:2f:
99:98:68:e0:4b:80:c8:eb:21:f2:c8:55:a5:5a:e6:b3:94:d8:
5c:ec:b3:97:2b:11:db:00:aa:8e:b4:b1:ca:f5:7f:cc:ce:25:
fe:8b:f7:66:8d:60:4d:91:9b:1d:b0:64:4f:20:64:dc:73:83:
e5:50:51:6c:ed:1a:4b:51:36:d9:05:51:cf:34:d8:fa:4e:f9:
fe:cb:7b:36:a8:bd:ea:90:93:4d:65:7f:7e:7b:10:83:a7:81:
44:53:19:00:0e:27:4f:f9:88:2b:02:c3:23:3d:e3:4e:09:e6:
05:0b:e5:8d:bf:1a:30:74:e1:8e:c6:10:78:db:54:85:d8:94:
79:8b:22:78:5f:eb:3d:b9:f1:03:a5:fd:3d:66:e7:4a:5f:bf:
fb:80:9a:1f:bf:d6:30:1d:2c:78:79:d5:69:d2:53:c9:f4:33:
42:b7:a5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:31 2024 by rpki-client on console-fra.rpki-client.org