Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/Vqh0UAGkMS0GJKZau0Qb8Y3iLkQ.roa
File: Vqh0UAGkMS0GJKZau0Qb8Y3iLkQ.roa (raw, json)
Hash identifier: IxMXme/YtPC7CazRppU453i8ZfxNhX2gbaHsZts9KJs=
Subject key identifier: 56:A8:74:50:01:A4:31:2D:06:24:A6:5A:BB:44:1B:F1:8D:E2:2E:44
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 0184C9487A746C08AE5D17E9F0311E472829
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/Vqh0UAGkMS0GJKZau0Qb8Y3iLkQ.roa
Signing time: Wed 30 Nov 2022 16:04:40 +0000
ROA not before: Wed 30 Nov 2022 16:04:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 45.143.163.0/24 maxlen: 24
45.149.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:c9:48:7a:74:6c:08:ae:5d:17:e9:f0:31:1e:47:28:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Nov 30 16:04:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=56a8745001a4312d0624a65abb441bf18de22e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4a:e2:3e:5b:dd:2d:9c:85:e3:18:9b:94:c5:
c1:bc:74:28:46:bc:73:d4:54:ae:89:41:58:69:65:
7e:a8:ac:07:c0:5d:c4:87:77:1b:51:9e:97:d1:b7:
c8:0a:9f:5f:20:b1:5f:99:9d:91:4d:7e:32:f1:1d:
2c:af:b9:24:0c:89:2d:4b:f2:77:97:28:f0:14:13:
01:6b:8f:69:32:b9:b9:20:a1:45:b8:16:1f:0b:80:
da:d0:17:ff:95:4f:77:80:d9:24:98:6c:ac:d0:dd:
b5:ec:ab:20:9c:28:bb:fc:50:5c:89:8b:92:09:c0:
37:26:e7:be:87:b7:9b:62:3b:5c:10:0b:d8:97:35:
9e:ed:43:a8:87:0a:89:4c:da:a9:3e:81:71:1c:25:
07:71:91:a7:4e:63:88:4c:5f:4f:54:3e:8a:b6:7a:
00:d4:28:df:b6:6c:f1:85:d7:cc:08:35:43:47:c8:
e1:84:69:f8:08:ce:b6:80:7c:76:45:8a:c8:c4:fa:
d4:62:dd:57:77:ba:64:ef:31:11:fc:7a:fb:4b:2c:
f4:41:3e:73:ea:69:ca:3b:46:53:53:b7:1a:a1:57:
fc:89:22:a8:64:95:3a:3f:fc:79:6c:f9:ed:c5:03:
6c:c4:67:4c:2e:d9:8a:6f:3d:ec:1e:82:3f:ee:8c:
c6:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A8:74:50:01:A4:31:2D:06:24:A6:5A:BB:44:1B:F1:8D:E2:2E:44
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/Vqh0UAGkMS0GJKZau0Qb8Y3iLkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.163.0/24
45.149.166.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:ce:94:98:5d:54:45:f0:3c:86:ff:24:27:04:20:ce:1d:d6:
79:08:25:26:91:03:17:88:2a:88:e3:70:d0:c5:00:2a:cb:95:
57:c8:69:60:f7:fa:02:65:c0:1d:04:47:f6:7b:45:79:61:21:
69:c2:a5:ad:d1:1d:c8:40:cd:02:87:8d:99:3e:f3:47:7f:ea:
fb:e1:68:be:60:21:51:80:ec:81:03:0e:e5:d3:a1:ed:39:54:
bc:38:8a:cd:cc:ee:d6:72:c5:e7:41:da:91:68:21:1e:d5:56:
f3:71:e2:e0:bf:f0:85:48:99:bf:d4:58:4f:65:2e:a3:15:fe:
a0:03:5c:d9:b1:a4:38:99:f9:b2:fe:d2:5e:80:6e:ad:64:e8:
db:e6:10:89:74:0f:d3:94:69:3c:90:bd:73:dd:c7:78:62:87:
5d:d4:b4:62:aa:14:8c:aa:d3:4e:3d:0f:e8:cf:a2:8d:0b:84:
84:34:d9:4b:16:96:58:3b:ba:fd:89:0c:77:85:2b:b1:78:ef:
ad:ca:83:43:98:2e:13:1f:33:d4:de:16:cb:37:9d:61:66:b2:
ea:7a:4b:3b:e1:60:18:e0:98:c9:35:5b:5f:34:b0:dd:96:df:
06:1b:28:25:a8:d8:38:b1:8f:70:0e:44:67:25:86:3a:e7:29:
02:b2:37:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:08 2024 by rpki-client on console-ams.rpki-client.org