Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/b8FdllIuJgx8lBPLLZVHgOeEsFY.roa
File: b8FdllIuJgx8lBPLLZVHgOeEsFY.roa (raw, json)
Hash identifier: Y3AJ/ckztzX79RRD22BmnYjagplqukWGb7wt8s69gmk=
Subject key identifier: 6F:C1:5D:96:52:2E:26:0C:7C:94:13:CB:2D:95:47:80:E7:84:B0:56
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 15A7BF44
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/b8FdllIuJgx8lBPLLZVHgOeEsFY.roa
Signing time: Thu 27 Jan 2022 12:01:21 +0000
ROA not before: Thu 27 Jan 2022 12:01:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 45.146.200.0/24 maxlen: 24
45.146.200.0/23 maxlen: 24
45.146.201.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 363315012 (0x15a7bf44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jan 27 12:01:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6fc15d96522e260c7c9413cb2d954780e784b056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8a:eb:ae:7f:d2:f5:e2:a9:5a:37:c3:bd:d9:
dc:c4:a4:6a:af:d5:62:89:fc:8e:80:ad:28:8e:1b:
88:70:ec:9b:13:0d:47:c5:bb:21:47:f2:5b:5a:ac:
c7:1f:7d:61:d2:86:4e:48:23:5e:fb:d5:ae:d8:19:
5b:31:f9:ca:27:9c:1c:96:6f:a2:c9:ac:d2:98:e6:
6a:8f:c4:3b:ea:e8:72:d7:1f:57:cb:bf:a8:5a:8c:
09:52:45:59:b1:0b:f5:4b:d9:64:33:ea:70:1d:ba:
25:71:1f:5b:71:93:12:d6:16:19:d7:4f:80:26:84:
90:8f:18:81:ca:05:b8:e0:0b:ac:06:45:44:57:02:
31:13:b3:13:1c:b1:6b:b5:ab:f3:24:5b:3e:34:15:
5e:67:b5:7d:54:9f:88:3d:82:52:9d:f5:27:cc:b3:
5b:af:d7:6b:bb:33:38:b7:c0:d7:58:6c:d4:39:80:
03:d9:90:c5:b9:46:35:1e:34:fe:d4:a8:30:67:b0:
5d:c4:a5:c9:7f:88:c9:55:49:6d:5f:67:aa:0e:63:
4d:27:de:d6:b7:79:98:a7:01:bc:14:3f:2b:d5:41:
89:98:79:2f:cf:e0:7d:c6:b4:a7:64:5f:94:dd:34:
73:f6:20:ab:12:da:a3:57:d1:11:c0:9d:3d:79:a3:
79:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:C1:5D:96:52:2E:26:0C:7C:94:13:CB:2D:95:47:80:E7:84:B0:56
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/b8FdllIuJgx8lBPLLZVHgOeEsFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.200.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:c5:0f:05:53:e7:4f:f7:21:ba:e9:bd:d0:59:b3:c3:6f:43:
f6:cb:81:99:32:f3:9a:98:8b:f4:cf:19:a0:ba:17:85:f9:19:
0a:be:23:37:84:ab:63:23:42:9b:48:78:c5:5e:a4:ba:88:d1:
ee:44:b2:15:8c:63:e9:07:5b:c2:37:f4:ed:f3:8d:ad:1e:c5:
48:35:8a:ee:27:f9:84:0e:b9:4c:53:e1:83:16:86:2d:11:fa:
85:f5:36:38:f0:d1:0f:13:eb:ec:11:25:ba:af:d5:a8:95:1d:
ff:50:ca:44:bb:34:81:ad:7a:85:a5:4e:a3:6f:0a:b8:3f:96:
ac:03:62:cf:ba:ff:7c:ab:fe:38:fb:48:ec:b1:5b:ec:9c:91:
68:d7:1b:fc:b2:9c:51:74:1e:1f:2b:94:51:0c:f2:14:56:de:
cb:38:7a:04:87:53:7a:f9:b4:42:04:9d:78:f6:2f:d8:37:06:
c8:1c:1a:40:a0:95:ee:78:27:92:6a:66:37:c0:b9:93:da:3d:
7f:5d:bd:76:fe:c0:5d:56:a9:aa:87:33:8a:42:e0:8c:8f:7a:
7d:76:76:6e:5f:7d:1d:34:46:3c:0a:45:88:94:97:59:13:af:
a1:59:fe:e1:97:b7:b5:e1:89:fd:80:d4:ef:1e:d3:1f:43:5f:
0c:c8:f8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:50 2024 by rpki-client on console-fra.rpki-client.org