Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/1-uWIKk7CgsWfYN1Bg19IE7xSsbA.roa
File: 1-uWIKk7CgsWfYN1Bg19IE7xSsbA.roa (raw, json)
Hash identifier: R1wg1wAx3ffCsWOCFKP8O6Qj/ZVdZ7wd84zTSNNIX6k=
Subject key identifier: FA:E5:88:2A:4E:C2:82:C5:9F:60:DD:41:83:5F:48:13:BC:52:B1:B0
Certificate issuer: /CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Certificate serial: 07F037C7
Authority key identifier: 2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/1-uWIKk7CgsWfYN1Bg19IE7xSsbA.roa
Signing time: Sat 01 Jan 2022 15:04:12 +0000
ROA not before: Sat 01 Jan 2022 15:04:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51324
IP address blocks: 45.93.188.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133183431 (0x7f037c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b69c92bc09bf6b8da6533dd7a7b0b1a57e65ea4
Validity
Not Before: Jan 1 15:04:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fae5882a4ec282c59f60dd41835f4813bc52b1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f0:da:ae:dd:7c:61:9c:8e:33:fb:bc:24:e9:
ba:b7:8c:39:01:57:e2:34:ff:29:08:02:fb:11:f0:
cf:63:f0:37:fa:3e:10:37:b9:5d:01:60:2f:34:3c:
5e:f0:78:c8:c9:90:77:05:cf:60:5d:5e:57:b5:1b:
39:96:1d:e4:de:54:0d:e2:a7:69:3e:fc:32:0d:9d:
76:d2:96:0c:70:44:97:22:74:2c:71:4a:f9:40:5a:
47:a5:1e:fb:2f:79:b6:c7:c7:ed:65:af:c5:54:c3:
45:6b:82:b3:f0:6b:c1:a1:51:c7:1e:99:ae:bc:bb:
81:4e:19:a5:cd:2a:55:64:8b:a7:04:55:e3:99:1c:
8e:f7:5a:eb:92:92:67:c6:06:03:00:1e:da:12:9d:
91:9d:62:63:ff:35:65:ba:f0:fc:68:e0:56:c9:af:
27:df:55:e4:be:18:07:86:52:5f:10:4e:47:75:83:
80:c8:20:d6:2d:94:64:83:a0:65:09:21:55:d0:42:
6e:af:ba:fe:8f:25:c2:f9:c9:fa:c2:5c:21:dc:38:
4f:2c:34:68:83:09:f6:83:b2:16:dd:df:c1:4e:4c:
5e:6e:6f:f4:85:a3:64:e7:08:33:a0:6f:d9:3f:13:
e8:41:98:bb:e2:b1:81:0b:29:2b:5a:51:cd:b6:40:
da:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:E5:88:2A:4E:C2:82:C5:9F:60:DD:41:83:5F:48:13:BC:52:B1:B0
X509v3 Authority Key Identifier:
keyid:2B:69:C9:2B:C0:9B:F6:B8:DA:65:33:DD:7A:7B:0B:1A:57:E6:5E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K2nJK8Cb9rjaZTPdensLGlfmXqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/1-uWIKk7CgsWfYN1Bg19IE7xSsbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/5b3ffe-9f9d-4189-a8ca-084aaba0f588/1/K2nJK8Cb9rjaZTPdensLGlfmXqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.188.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:36:5a:55:f8:28:a8:0f:b2:47:c9:0b:0a:02:44:8c:6b:59:
3d:d6:a8:91:8c:14:50:59:04:9b:6a:cd:73:54:54:45:07:46:
df:ff:2e:6c:5f:f3:2f:77:62:be:76:b2:9c:9b:08:81:81:53:
11:70:bd:b9:79:e5:91:d3:df:52:02:85:c6:91:aa:a6:89:f1:
d3:fb:d3:c7:e7:08:2e:e1:98:13:dd:2c:6e:70:02:1b:cc:86:
5e:b5:43:c6:f8:d0:9b:39:b6:76:55:f4:d2:a6:f7:06:ca:8f:
97:e9:52:bb:17:ec:8b:86:b4:05:df:81:9e:b5:63:73:f6:b1:
f4:51:0c:a5:fc:83:f6:82:d2:d6:ee:d6:f5:27:64:87:d9:22:
43:2f:4b:1a:76:17:10:7e:c9:dd:47:97:08:18:1f:c9:fd:f7:
aa:a6:d8:35:04:63:7b:40:19:53:9e:b0:77:77:f9:aa:ee:04:
2b:0a:29:d7:7c:23:14:da:d6:f4:82:25:af:78:17:fe:fb:47:
15:15:b9:d8:0b:85:30:17:39:5b:fa:19:f5:8f:fe:7a:00:42:
8d:5a:90:c9:2a:03:44:4b:6a:0c:a2:93:2b:6c:66:fb:b2:34:
10:29:19:6d:5a:ad:c0:6c:84:49:d7:cf:f0:39:b2:ca:e1:d1:
87:fb:13:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:13 2024 by rpki-client on console-ams.rpki-client.org