Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/k5h7LYTo62UUWRa5aCJnN8XsyKo.roa
File: k5h7LYTo62UUWRa5aCJnN8XsyKo.roa (raw, json)
Hash identifier: aBMGe1R9MsIUZR+dnJO8etdgFjiPU5hKmxfGT52/V7o=
Subject key identifier: 93:98:7B:2D:84:E8:EB:65:14:59:16:B9:68:22:67:37:C5:EC:C8:AA
Certificate issuer: /CN=39732dcd0c35426144f9f026754179dfaebe8958
Certificate serial: 0608C8E9
Authority key identifier: 39:73:2D:CD:0C:35:42:61:44:F9:F0:26:75:41:79:DF:AE:BE:89:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/k5h7LYTo62UUWRa5aCJnN8XsyKo.roa
Signing time: Sat 01 Jan 2022 07:02:34 +0000
ROA not before: Sat 01 Jan 2022 07:02:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61075
IP address blocks: 45.90.78.0/24 maxlen: 24
45.90.76.0/22 maxlen: 24
2a0c:b5c0::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101239017 (0x608c8e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39732dcd0c35426144f9f026754179dfaebe8958
Validity
Not Before: Jan 1 07:02:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93987b2d84e8eb65145916b968226737c5ecc8aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9a:99:9d:9c:d2:43:95:1d:8f:6d:76:60:4a:
b9:5d:1b:ef:f3:7c:c0:1b:47:33:c6:db:17:26:a5:
d8:a7:53:dd:30:6e:f6:a0:ad:4c:c6:3d:a2:f7:63:
e3:51:93:8a:38:d7:17:90:7c:b8:e8:18:6d:4f:aa:
c9:f8:f0:ed:6e:1a:e1:f1:a3:6c:56:1c:87:f0:1d:
fa:4a:fb:84:e2:64:2e:22:02:a7:cd:71:4f:ff:c3:
6b:e0:6f:be:8f:7a:3c:96:81:49:3a:13:21:39:8b:
5a:af:5e:7b:e4:59:42:04:85:71:15:96:cb:01:bb:
2f:18:b4:b3:9c:e2:c4:ae:72:b6:a1:4a:8b:58:27:
60:80:f8:88:b4:db:62:f3:ba:66:b1:2d:00:0c:cf:
66:6b:bb:89:ad:35:bf:6a:4b:95:bf:13:1d:2a:33:
3a:3e:2b:57:45:79:82:ab:15:01:a2:d5:43:80:34:
11:f4:e5:e9:7a:ec:05:58:18:1b:5d:c9:84:e2:a0:
44:3e:7f:c0:ab:50:4e:fc:82:6e:fc:75:9b:86:dd:
59:c4:a2:ff:07:59:11:09:76:ce:18:6c:29:63:be:
ee:63:0a:49:99:b8:9d:aa:f3:23:a8:81:7d:2f:bb:
b3:d4:35:37:26:2d:55:d9:e2:fc:e7:61:17:b0:b4:
d2:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:98:7B:2D:84:E8:EB:65:14:59:16:B9:68:22:67:37:C5:EC:C8:AA
X509v3 Authority Key Identifier:
keyid:39:73:2D:CD:0C:35:42:61:44:F9:F0:26:75:41:79:DF:AE:BE:89:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/k5h7LYTo62UUWRa5aCJnN8XsyKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.76.0/22
IPv6:
2a0c:b5c0::/29
Signature Algorithm: sha256WithRSAEncryption
9a:cc:91:83:2c:a8:d0:e9:24:bf:92:d9:8b:b7:bf:8e:30:89:
90:2d:a7:ae:ec:bc:ea:5a:30:ac:76:88:3a:f9:2a:3e:95:3f:
f7:9d:7d:7e:02:7e:59:4b:28:d7:4b:c7:70:49:c8:fc:28:f1:
b3:18:c8:81:68:1b:e2:db:ed:68:9a:10:a3:4b:a6:32:31:ca:
7e:dc:d7:4b:a5:95:c7:58:1d:77:a9:46:c6:6a:66:40:8f:b6:
30:02:b7:82:cd:d1:2a:ae:19:f4:21:e2:a7:98:88:cd:38:3e:
05:17:56:77:0e:c0:32:5c:e1:66:fb:1c:6b:6f:33:90:f4:5e:
37:c4:f5:6e:d2:af:8c:8e:a8:2d:22:5f:2e:9a:d0:f3:81:82:
78:c3:d6:30:5a:e1:8c:a7:81:bc:67:a5:2e:c1:5b:fe:15:5d:
40:2e:17:48:b8:c8:e6:f5:94:28:7e:10:d1:15:0b:99:56:30:
47:d4:af:82:1b:24:54:80:ae:6d:76:3d:20:63:8c:d4:88:39:
e7:5c:1c:5a:3c:70:9a:af:ff:ba:d4:7f:5b:9f:35:19:7c:a2:
4e:39:d4:c2:c8:6b:e3:76:79:4b:97:21:ae:36:3c:d0:fe:a4:
5a:be:29:a7:87:3b:f7:60:f5:bd:c6:1c:b1:56:95:d5:02:18:
c9:1d:cd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:56 2024 by rpki-client on console-ams.rpki-client.org