Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/nCUuJVmDNbBgbhSzG3qMvl-A2aw.roa
File: nCUuJVmDNbBgbhSzG3qMvl-A2aw.roa (raw, json)
Hash identifier: 5UQzNkJ53PgODhBB9aY8Wr8ZuEngJn4xdLWJ/sKUsa0=
Subject key identifier: 9C:25:2E:25:59:83:35:B0:60:6E:14:B3:1B:7A:8C:BE:5F:80:D9:AC
Certificate issuer: /CN=ec11b6d0ee6b9eccfe34ec506a275078c39eccb3
Certificate serial: 0734587D
Authority key identifier: EC:11:B6:D0:EE:6B:9E:CC:FE:34:EC:50:6A:27:50:78:C3:9E:CC:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7BG20O5rnsz-NOxQaidQeMOezLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/nCUuJVmDNbBgbhSzG3qMvl-A2aw.roa
Signing time: Sat 01 Jan 2022 05:00:36 +0000
ROA not before: Sat 01 Jan 2022 05:00:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41327
IP address blocks: 45.156.61.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120871037 (0x734587d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec11b6d0ee6b9eccfe34ec506a275078c39eccb3
Validity
Not Before: Jan 1 05:00:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9c252e25598335b0606e14b31b7a8cbe5f80d9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:ae:64:0e:9f:3a:28:10:7a:8d:eb:c3:e5:4c:
9d:b3:dd:67:8c:e8:6d:24:66:4b:4e:8c:64:ee:3a:
e9:07:3a:e1:b4:8e:5d:cb:9b:a1:2a:1c:f8:b2:81:
ca:95:c0:cb:96:5b:86:ec:a1:b2:2e:a8:93:77:ec:
00:5a:b4:7b:61:01:e9:e9:ae:45:76:20:62:60:1c:
ea:55:bf:8b:19:ce:77:04:b1:a9:35:c9:25:7c:65:
c5:3f:eb:7c:7c:a0:27:76:bc:89:2b:5a:65:32:c5:
40:f3:04:33:b6:8b:aa:71:21:ae:77:6e:54:f1:9e:
6b:01:3b:c5:55:11:29:da:21:e5:8d:f8:20:fc:ba:
48:78:c1:0e:b8:f8:ac:6c:b3:30:6a:bf:0d:1d:9a:
5c:e0:97:f7:3d:44:3a:d1:d8:c2:3a:98:a5:17:d1:
cb:07:d9:23:dd:14:48:ed:69:cd:d9:a9:6c:9d:0b:
0a:e5:16:27:5b:ef:87:20:9d:54:b6:6b:f3:3c:f7:
53:1e:f0:6a:56:d6:5d:1d:26:6b:1a:52:e5:26:2a:
24:bf:1e:cc:50:a9:0d:ab:43:e2:50:9b:42:11:08:
80:72:23:2a:70:1d:17:f7:d9:bc:8e:8b:bf:37:7d:
72:32:36:b7:1b:60:af:32:7b:12:3f:df:76:62:5e:
4b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:25:2E:25:59:83:35:B0:60:6E:14:B3:1B:7A:8C:BE:5F:80:D9:AC
X509v3 Authority Key Identifier:
keyid:EC:11:B6:D0:EE:6B:9E:CC:FE:34:EC:50:6A:27:50:78:C3:9E:CC:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7BG20O5rnsz-NOxQaidQeMOezLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/nCUuJVmDNbBgbhSzG3qMvl-A2aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6b5f99-2c5f-40b8-9c89-395b0e7702cc/1/7BG20O5rnsz-NOxQaidQeMOezLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.61.0/24
Signature Algorithm: sha256WithRSAEncryption
75:10:9f:18:01:39:03:68:b2:e0:83:af:af:1d:ff:aa:c6:eb:
7e:f9:b9:09:96:ff:89:6d:c0:fa:19:6e:21:c5:33:0f:d8:60:
ff:76:0b:2e:90:00:6c:ec:e7:ee:ed:f8:30:c7:10:c8:09:ff:
8f:2e:47:1a:5a:7b:30:ce:d9:8e:68:07:0d:bb:4c:0b:56:0c:
c1:90:68:0b:a8:6f:d6:b5:05:7e:e4:d3:6b:68:ed:71:14:55:
f8:50:61:1f:7a:7a:6f:97:f2:2d:be:38:13:42:b4:75:7f:ba:
ba:00:b7:bf:ea:40:7c:07:2f:98:0e:4e:00:ab:09:d7:57:72:
38:e5:07:0a:fd:95:6b:cb:a6:ef:c4:1a:23:eb:22:29:b2:b4:
be:f5:6b:0e:17:b7:10:46:b2:62:5b:2d:c3:a8:18:b3:ab:74:
f3:01:7f:a0:d5:26:1a:21:f3:a2:72:19:ad:a8:c4:bd:e9:5e:
4e:e7:3b:e2:c9:66:a6:05:dd:ad:23:31:00:31:32:91:89:ad:
f5:23:c5:d5:40:2c:56:f8:e6:5c:df:95:8c:d0:a4:c0:c6:09:
80:54:80:7c:58:76:24:70:a9:75:0c:90:dc:79:1a:ca:86:db:
71:ec:52:35:95:97:4f:e8:07:67:2a:7d:8b:d9:c3:a6:33:52:
a7:94:06:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:52 2023 by rpki-client on console-ams.rpki-client.org