Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/FKnE9swd_gVcZI6vzVyVLudsKiw.roa
File: FKnE9swd_gVcZI6vzVyVLudsKiw.roa (raw, json)
Hash identifier: 2viWFNSf6p8F1Qm6mVzb3fvZvmssLJjX5LB3hwSyjyo=
Subject key identifier: 14:A9:C4:F6:CC:1D:FE:05:5C:64:8E:AF:CD:5C:95:2E:E7:6C:2A:2C
Certificate issuer: /CN=ec11b6d0ee6b9eccfe34ec506a275078c39eccb3
Certificate serial: 073663CD
Authority key identifier: EC:11:B6:D0:EE:6B:9E:CC:FE:34:EC:50:6A:27:50:78:C3:9E:CC:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7BG20O5rnsz-NOxQaidQeMOezLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/FKnE9swd_gVcZI6vzVyVLudsKiw.roa
Signing time: Sat 01 Jan 2022 05:00:38 +0000
ROA not before: Sat 01 Jan 2022 05:00:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210687
IP address blocks: 45.156.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121005005 (0x73663cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec11b6d0ee6b9eccfe34ec506a275078c39eccb3
Validity
Not Before: Jan 1 05:00:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=14a9c4f6cc1dfe055c648eafcd5c952ee76c2a2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b5:51:f8:b5:fd:d9:2e:1b:78:d0:17:f5:fe:
6e:6a:10:34:2e:d3:02:e6:c4:c8:5f:6e:6a:59:a4:
55:1e:eb:cf:2e:99:3b:75:49:c8:4c:7a:96:a0:fa:
14:f3:83:82:cd:57:9e:1b:8a:b9:0b:0a:e0:4c:9a:
53:61:20:6d:e0:08:f8:6b:58:b8:5d:20:3c:b6:47:
4e:ec:f0:ec:37:2f:c0:7c:d2:ec:15:ba:87:b7:97:
be:60:14:ae:5c:3e:40:7e:8b:b8:f3:d3:f5:d7:ff:
df:51:bc:33:27:84:12:8b:76:bf:48:5d:26:c2:54:
bc:a3:04:c3:72:1e:fe:0b:15:50:b3:15:01:72:cf:
b9:c0:7b:6b:0b:14:e0:fd:8b:64:15:67:cf:4e:58:
80:3f:a9:42:04:57:b6:24:fd:25:f1:93:04:d1:7e:
d1:e1:79:5f:ee:c5:18:f5:30:50:99:5a:8e:d4:63:
15:21:64:72:b1:99:e3:68:0e:61:11:f1:5c:17:15:
cb:c9:45:f4:b9:7a:1d:e7:48:fa:13:70:5d:f8:ef:
b1:a1:9d:20:c9:22:7d:0d:c5:be:01:d4:3e:c1:27:
b2:bf:76:eb:76:b1:68:3a:be:be:ee:31:12:50:02:
fc:df:56:24:e2:d7:a7:82:ff:f9:5b:e7:cf:99:cd:
3a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A9:C4:F6:CC:1D:FE:05:5C:64:8E:AF:CD:5C:95:2E:E7:6C:2A:2C
X509v3 Authority Key Identifier:
keyid:EC:11:B6:D0:EE:6B:9E:CC:FE:34:EC:50:6A:27:50:78:C3:9E:CC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7BG20O5rnsz-NOxQaidQeMOezLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/FKnE9swd_gVcZI6vzVyVLudsKiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/7BG20O5rnsz-NOxQaidQeMOezLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.61.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:96:f6:bf:7c:88:87:a4:73:76:07:f1:3f:de:78:70:9d:7d:
77:4f:a6:e9:7e:ce:5c:2e:01:e3:d9:8f:b6:43:d4:ae:36:35:
b5:fa:4a:57:02:eb:41:58:b6:97:2a:09:55:ce:d7:9e:0a:b1:
21:c4:7c:ef:c5:70:2d:23:e3:40:12:b1:cf:9b:5a:e5:e8:3f:
8b:18:8a:eb:fd:f3:78:95:02:d4:db:ca:eb:b4:22:2b:f8:0a:
28:29:46:08:f7:8e:57:42:f5:6e:f4:9e:bc:31:18:44:dd:c4:
30:5f:fa:b1:b7:05:d1:c2:4f:3c:32:9e:6c:b5:ac:26:4e:af:
c7:ec:39:94:f9:a4:9e:7f:84:8b:a7:46:35:7e:24:e9:fc:4b:
7f:41:a0:96:16:1d:60:b4:ca:9e:1d:f1:4f:8d:31:ee:e0:42:
e5:2f:6d:e2:32:22:08:3a:3e:dd:5c:ed:18:93:20:b4:60:65:
d9:94:23:0a:58:da:7e:79:ec:43:a7:b9:c0:83:93:b8:e3:d1:
70:b5:c3:05:9e:c9:1f:4c:59:a9:d7:cf:6c:2f:a2:b4:7b:25:
d6:8a:ae:f0:70:5c:c3:96:0f:db:e0:5f:52:e3:17:04:f5:4f:
cd:b3:be:e1:b7:cf:f7:c6:37:05:bc:d9:e8:7f:c2:0e:ec:87:
1c:7b:c9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:52 2023 by rpki-client on console-ams.rpki-client.org