Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/QbJaZTB5KwTAtN3AOsEZdJsdk78.roa
File: QbJaZTB5KwTAtN3AOsEZdJsdk78.roa (raw, json)
Hash identifier: ETwjO2iFdKln5sVXLQCD/SxJ3Rin/0m7AiuwDhshbd0=
Subject key identifier: 41:B2:5A:65:30:79:2B:04:C0:B4:DD:C0:3A:C1:19:74:9B:1D:93:BF
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 0937B63C
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/QbJaZTB5KwTAtN3AOsEZdJsdk78.roa
Signing time: Sat 01 Jan 2022 10:02:55 +0000
ROA not before: Sat 01 Jan 2022 10:02:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60330
IP address blocks: 45.128.205.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154646076 (0x937b63c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: Jan 1 10:02:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=41b25a6530792b04c0b4ddc03ac119749b1d93bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a1:c7:1e:63:be:41:fc:37:01:a9:d6:1e:da:
fe:3a:30:0d:c4:c5:05:56:e4:3d:d2:51:c9:1d:c5:
b1:4e:3a:e6:ce:00:01:41:b7:f9:98:31:d9:9b:7f:
08:fb:34:e3:c2:7e:20:6e:1c:fc:07:29:da:cd:b1:
85:57:54:49:e3:11:05:2f:37:22:57:c6:9a:57:b8:
2a:fb:c5:af:d0:15:ca:3e:eb:7d:c8:57:08:6c:3f:
5d:d0:85:0b:20:f0:4e:2b:2b:9f:bd:14:69:59:3c:
64:57:7c:7f:a0:1d:28:9c:b0:49:e6:4f:e1:32:2a:
2d:b3:4b:aa:3c:fe:db:eb:73:13:27:79:35:63:c0:
c2:4a:6b:23:38:59:f0:3b:d6:e7:fe:5a:24:a8:fe:
80:88:f3:79:d5:ae:6e:44:92:08:58:04:3f:29:2e:
01:d3:92:e4:88:fc:42:41:93:25:32:2d:21:7d:13:
86:cb:1d:00:37:f9:6c:c4:b0:eb:0b:0f:79:a1:90:
84:3d:99:7e:b5:9a:a6:f3:c0:34:b9:a1:86:76:e2:
f0:0f:a6:6b:91:be:58:10:08:86:cf:98:d3:db:84:
9a:98:af:2a:81:fc:7a:ef:7c:2d:67:5e:86:e5:4d:
6c:6c:b3:10:eb:c6:6c:db:4b:8c:d2:71:c4:6b:d9:
5d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B2:5A:65:30:79:2B:04:C0:B4:DD:C0:3A:C1:19:74:9B:1D:93:BF
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/QbJaZTB5KwTAtN3AOsEZdJsdk78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.205.0/24
Signature Algorithm: sha256WithRSAEncryption
63:5e:84:4d:e0:1b:3d:ff:8f:ac:11:80:ca:39:55:80:d4:bd:
41:08:c1:09:cd:2e:17:6f:8b:83:62:ee:52:9f:e9:06:60:30:
1b:12:7b:53:e8:85:9b:cc:86:a3:26:c8:28:23:33:5e:d3:6f:
66:d5:aa:c3:03:b7:66:18:13:64:b7:15:86:47:30:3f:f6:2c:
28:35:ba:ff:0d:a3:21:cf:6d:db:f6:a7:03:bd:17:1f:f5:60:
d5:90:f7:fc:74:dc:ea:fc:d8:33:68:11:dd:1b:c5:e7:56:6a:
f1:b8:0f:b6:60:5d:3f:b6:c8:cc:31:93:75:a5:8c:fd:eb:2a:
19:06:ba:b4:d2:b7:75:36:0a:93:d7:e2:9c:35:61:60:19:b1:
78:42:d0:54:29:8f:5b:c5:4b:e8:96:d0:c1:d8:cc:fd:17:26:
61:f3:83:9e:81:1d:b8:20:bc:ef:8e:02:60:e0:08:3d:86:19:
c2:16:7c:ac:13:7f:9c:dc:b7:3b:a7:9a:30:a5:b4:4e:04:b3:
c9:9c:7a:ec:9a:48:3b:29:cf:bf:d7:27:c4:3b:56:53:a2:5b:
28:d3:ef:ef:fd:6a:df:91:bd:21:bd:08:5b:a9:9e:3b:14:96:
a0:5a:4b:0e:52:e5:90:1e:9d:69:fc:84:39:f9:2e:83:19:66:
c1:ed:59:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:47:59 2024 by rpki-client on console-fra.rpki-client.org