Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/A9FiLs2hfeB5lGOZxq5TYP_teO0.roa
File: A9FiLs2hfeB5lGOZxq5TYP_teO0.roa (raw, json)
Hash identifier: YBGZUABD9/Tw4+P10IwvRE3NmTjoVjA80nbo4cLjcxc=
Subject key identifier: 03:D1:62:2E:CD:A1:7D:E0:79:94:63:99:C6:AE:53:60:FF:ED:78:ED
Certificate issuer: /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial: 0185509EC9BD26F1A95F4DE573CBDFB10915
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/A9FiLs2hfeB5lGOZxq5TYP_teO0.roa
Signing time: Mon 26 Dec 2022 22:47:41 +0000
ROA not before: Mon 26 Dec 2022 22:47:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204843
IP address blocks: 45.158.125.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:50:9e:c9:bd:26:f1:a9:5f:4d:e5:73:cb:df:b1:09:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Validity
Not Before: Dec 26 22:47:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=03d1622ecda17de079946399c6ae5360ffed78ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:88:38:51:82:2a:84:1e:ef:f1:65:6d:44:2e:
42:c4:16:c5:ec:9b:09:67:62:f7:d0:b6:24:63:72:
a9:1b:44:af:26:95:28:c6:46:b1:69:8b:d6:90:c6:
d4:f2:ce:bb:7c:00:ce:42:49:a1:c7:61:21:18:ce:
1f:2e:2b:6a:d1:93:26:c7:0b:dc:81:b7:62:6c:c7:
d1:24:7b:12:fc:38:12:5f:11:69:19:be:a8:d0:da:
ef:9f:7a:4e:dd:44:0c:be:f8:46:55:96:3e:ec:52:
bc:2d:a9:d6:06:6c:6e:b1:2f:32:f3:1a:32:c7:05:
d4:66:de:cb:6d:7f:15:e4:e2:f7:ae:aa:56:35:09:
37:a3:eb:3e:59:12:47:51:c9:a9:86:2f:c4:ef:c9:
bc:e6:e4:62:e9:1a:c4:56:58:91:4c:4f:1e:b3:15:
f9:93:75:bb:71:8f:62:48:7f:de:c1:dd:fd:ea:31:
89:5d:70:20:8e:75:41:5f:c6:33:b9:37:c0:90:d7:
ad:42:f1:97:9f:6f:b1:f8:ca:8f:ac:68:61:d5:bf:
2a:a6:68:c5:55:eb:a8:a5:b9:e3:4b:9c:d6:bf:99:
67:58:09:77:48:7d:82:98:28:fe:e5:2a:0b:40:de:
79:3f:be:29:f9:5b:60:ae:ba:c2:75:7b:6a:34:ab:
4c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D1:62:2E:CD:A1:7D:E0:79:94:63:99:C6:AE:53:60:FF:ED:78:ED
X509v3 Authority Key Identifier:
keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/A9FiLs2hfeB5lGOZxq5TYP_teO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.125.0/24
Signature Algorithm: sha256WithRSAEncryption
60:c4:30:26:63:46:8b:50:17:39:ba:89:0d:28:c3:bd:39:c9:
e7:f9:4c:8a:1f:c7:2e:4c:14:a1:94:0b:31:e4:2e:12:b6:95:
83:51:21:bd:17:b2:af:67:7a:58:2b:f2:93:2c:ea:32:60:f0:
52:ce:a8:24:65:78:1c:df:e8:fe:60:a1:cd:8f:c6:a8:3b:60:
72:72:87:9f:7e:83:3b:cb:6e:8d:7d:27:29:7c:d2:47:f1:ed:
67:29:e1:2e:72:93:a1:d5:86:93:41:04:d8:fc:11:07:b2:90:
ed:28:ce:93:fb:f0:02:55:c2:89:e0:31:e6:39:8e:59:4e:a4:
57:ba:45:b4:a2:8c:ed:8e:96:33:3c:e4:61:85:56:43:d8:f8:
3b:a1:d1:56:ec:4b:6b:5d:d4:8a:3f:a3:14:d4:4d:a3:34:f9:
47:94:84:bc:3d:ee:da:9e:d4:d6:87:98:62:57:e1:86:45:95:
af:9d:52:b6:bd:2f:af:d3:48:e5:90:71:72:08:6e:95:15:8f:
84:69:26:50:a7:6a:c2:a5:c0:d5:37:c6:58:cb:d0:6c:ee:98:
ac:e6:67:60:05:51:7c:f6:1f:91:8e:c7:d0:93:27:d7:60:b5:
88:e7:83:de:59:35:51:54:52:69:19:a1:d0:9c:e7:1f:c6:e8:
23:1e:98:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:45 2024 by rpki-client on console-fra.rpki-client.org