Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/Y9-vWi6X_ChhAXlv3R-c0v_17O0.roa
File: Y9-vWi6X_ChhAXlv3R-c0v_17O0.roa (raw, json)
Hash identifier: txzjjwjmOpAC7AlZPJRxqMvsY4iNQ5kJMFPsBz5yIYA=
Subject key identifier: 63:DF:AF:5A:2E:97:FC:28:61:01:79:6F:DD:1F:9C:D2:FF:F5:EC:ED
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 0182AF0816F598325E809ACDE866E93A8F08
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/Y9-vWi6X_ChhAXlv3R-c0v_17O0.roa
Signing time: Thu 18 Aug 2022 03:38:39 +0000
ROA not before: Thu 18 Aug 2022 03:38:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 45.143.160.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:af:08:16:f5:98:32:5e:80:9a:cd:e8:66:e9:3a:8f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Aug 18 03:38:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63dfaf5a2e97fc286101796fdd1f9cd2fff5eced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:09:5d:b3:1f:06:5a:2c:1a:7a:b8:dd:7b:61:
9f:95:ee:85:f2:d9:ef:2c:36:23:de:1f:04:34:ca:
62:6c:1d:a5:b5:02:31:18:05:dd:96:4a:75:e1:4e:
34:72:ed:d1:af:88:d5:1c:05:62:e9:21:fa:30:b6:
3a:9b:b7:c1:43:00:28:cc:7f:c5:ab:48:40:83:f4:
72:4c:b1:5f:48:08:eb:c1:48:f3:5c:29:a8:5a:df:
7b:b8:ff:12:aa:27:29:65:96:ea:32:bf:28:ba:4c:
0b:ee:48:6a:bb:f0:b8:b9:2e:3d:58:30:3b:33:2b:
d8:be:c8:22:c9:66:4b:b3:e4:2e:f8:55:43:a8:0a:
7d:b5:63:97:59:9b:1e:1e:8f:39:be:83:a7:f2:f7:
f9:d0:64:2d:48:c8:09:82:ee:1a:57:96:ae:b4:97:
b5:31:ec:0c:be:3e:78:16:fa:8b:8b:33:af:0c:4d:
ea:9c:32:a4:9c:7e:1b:b0:4d:f5:08:33:7e:62:b1:
a6:7c:b7:cf:47:9b:1a:f4:ac:67:30:41:2d:34:1d:
5d:13:9f:bc:5c:62:bd:f3:10:2d:95:7f:16:ae:bf:
25:19:69:6c:2a:70:9c:a2:fb:b0:e4:7f:fe:9b:31:
74:5e:8a:6e:aa:28:62:2a:80:93:08:ef:2b:79:0f:
b8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:DF:AF:5A:2E:97:FC:28:61:01:79:6F:DD:1F:9C:D2:FF:F5:EC:ED
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/Y9-vWi6X_ChhAXlv3R-c0v_17O0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.160.0/24
Signature Algorithm: sha256WithRSAEncryption
08:90:31:5d:fd:87:02:c2:88:65:67:61:0f:1f:15:bb:d4:5c:
db:ca:d9:44:5d:70:2a:cd:f3:c1:41:1b:c4:e3:69:fa:bb:a1:
c4:b2:41:2b:1c:c5:4b:17:c1:d5:e6:fa:d0:ee:b0:9f:e1:4e:
bd:9b:d2:62:a0:64:71:52:20:05:74:31:84:74:f1:2e:da:3b:
dc:21:3f:ba:3c:4f:9c:89:e4:54:c2:52:97:a7:7c:23:c2:81:
f6:85:8e:18:34:77:52:73:44:86:4b:79:df:07:65:03:a8:d0:
2f:d7:d1:7e:c2:53:bf:27:92:da:95:d2:8b:fa:d7:aa:ff:e2:
b5:c7:1e:e9:f5:de:6f:20:82:64:1f:53:42:5b:0e:a7:ca:bd:
c3:73:22:52:33:53:dd:7c:8e:a1:d7:89:d4:d6:f6:61:78:1d:
a7:25:3f:d3:af:ed:2c:13:d5:6c:1e:e5:99:d0:1e:5f:eb:5d:
b7:05:04:64:03:fe:3a:1a:22:5d:e8:2c:bc:4a:46:c8:a0:22:
c1:21:3b:7b:a8:03:4d:17:59:47:5a:80:24:78:76:fb:c2:1a:
75:07:91:0d:6b:69:cb:84:1e:ce:7f:35:1d:f8:ac:07:bb:cb:
ef:4e:a4:32:c4:14:d6:7a:ad:3a:69:54:28:27:b6:90:40:b2:
11:d6:58:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:51 2024 by rpki-client on console-fra.rpki-client.org