Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/3Wn_o7vpf6mkZO71loXwidDYoWg.roa
File: 3Wn_o7vpf6mkZO71loXwidDYoWg.roa (raw, json)
Hash identifier: z3v6WCCjpmx8j6m5iI34C3G0RBuIiLJ3xluyjwMYvbg=
Subject key identifier: DD:69:FF:A3:BB:E9:7F:A9:A4:64:EE:F5:96:85:F0:89:D0:D8:A1:68
Certificate issuer: /CN=ec11b6d0ee6b9eccfe34ec506a275078c39eccb3
Certificate serial: 07355362
Authority key identifier: EC:11:B6:D0:EE:6B:9E:CC:FE:34:EC:50:6A:27:50:78:C3:9E:CC:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7BG20O5rnsz-NOxQaidQeMOezLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/3Wn_o7vpf6mkZO71loXwidDYoWg.roa
Signing time: Sat 01 Jan 2022 05:00:37 +0000
ROA not before: Sat 01 Jan 2022 05:00:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209076
IP address blocks: 45.156.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120935266 (0x7355362)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec11b6d0ee6b9eccfe34ec506a275078c39eccb3
Validity
Not Before: Jan 1 05:00:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd69ffa3bbe97fa9a464eef59685f089d0d8a168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:53:36:53:3c:ad:6f:b4:25:ff:a5:9f:30:9e:
a6:49:d2:08:3a:07:66:68:83:b4:f7:a6:96:a2:04:
32:96:b2:1f:8a:3d:4e:58:53:ca:a3:5a:7f:d3:d9:
37:b8:aa:97:88:a3:61:22:a5:d1:aa:2a:b0:c6:91:
e1:c6:a5:79:0f:77:cc:09:f1:c7:0e:25:d8:e5:f3:
22:e6:5f:6e:a9:78:40:1d:7d:67:36:2a:b0:4b:08:
fd:91:c0:77:3c:78:56:20:15:29:75:2b:54:a5:3c:
5b:9e:03:33:a3:41:1c:ed:1c:bf:c0:ba:3a:cc:65:
2f:0c:c7:29:61:b0:a3:97:76:a0:8c:97:8e:78:24:
2b:9a:c3:2c:87:45:17:4b:4e:f3:aa:4d:5b:5a:5e:
bf:76:d2:34:30:f0:42:b6:2d:7c:1d:eb:94:50:9c:
59:00:9f:09:1a:93:a0:b2:ec:d7:4f:a5:a5:c2:69:
54:da:a9:05:95:12:d3:8c:72:fc:ea:2f:4e:02:16:
e1:e8:b1:cb:f5:6c:b1:84:05:22:ec:8b:87:48:b7:
c6:ee:3a:13:ab:6f:e8:5e:2a:46:e4:26:93:47:03:
d3:73:0b:a5:12:c4:c9:85:99:dc:02:8f:2a:04:d4:
c7:7d:31:81:d9:f8:15:fc:49:74:37:50:e0:7a:54:
24:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:69:FF:A3:BB:E9:7F:A9:A4:64:EE:F5:96:85:F0:89:D0:D8:A1:68
X509v3 Authority Key Identifier:
keyid:EC:11:B6:D0:EE:6B:9E:CC:FE:34:EC:50:6A:27:50:78:C3:9E:CC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7BG20O5rnsz-NOxQaidQeMOezLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/3Wn_o7vpf6mkZO71loXwidDYoWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/7BG20O5rnsz-NOxQaidQeMOezLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.62.0/24
Signature Algorithm: sha256WithRSAEncryption
57:0a:6a:4b:5d:0a:ff:b8:81:ea:9f:21:12:e2:a0:17:7b:7e:
b5:4b:c0:e2:7c:64:4a:b7:b5:30:a0:35:e9:20:68:76:8e:23:
c0:f9:d9:cd:25:28:d3:e9:60:90:18:5f:0b:29:3c:f4:dd:23:
a9:e1:02:97:a7:0f:fc:67:39:b4:17:37:8b:d9:57:bc:7c:1d:
85:ca:ae:82:95:4e:c6:90:5f:15:5f:51:78:00:5b:2e:25:23:
d5:50:dc:58:cd:f7:df:36:9a:45:24:32:07:73:12:07:fe:33:
da:c2:e4:d1:2a:7b:50:ef:1f:fd:25:6c:94:1c:46:78:d4:4a:
5d:70:f3:57:96:87:e0:e5:86:35:30:d5:af:ed:8e:d3:fd:0a:
fa:c8:e7:31:24:d9:e3:0b:92:90:23:20:9c:19:07:50:e5:60:
ff:56:70:2e:08:c3:75:c4:d2:91:e5:d9:cb:97:44:a8:fd:49:
a1:7c:55:3c:a4:66:9f:de:ac:c8:28:5d:42:46:3e:04:4e:e0:
d9:4d:b0:ab:99:e1:32:c6:db:14:9c:02:b5:bf:b4:f3:08:a8:
48:fb:96:09:9d:fc:34:0f:93:d1:12:79:80:5b:b4:ee:38:91:
1d:60:5f:5e:48:05:e3:5e:8a:61:2b:a1:82:23:a5:52:d6:1c:
65:02:2a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:00:04 2023 by rpki-client on console-fra.rpki-client.org