Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/y7_3rbRPNqtJdikYPoaBjflBtJg.roa
File: y7_3rbRPNqtJdikYPoaBjflBtJg.roa (raw, json)
Hash identifier: gj5LmN9H/voAKh6KmR/HQDj5ib6sExQyjD2sEqB7WWo=
Subject key identifier: CB:BF:F7:AD:B4:4F:36:AB:49:76:29:18:3E:86:81:8D:F9:41:B4:98
Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Certificate serial: 013EFF34
Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/y7_3rbRPNqtJdikYPoaBjflBtJg.roa
Signing time: Sat 01 Jan 2022 13:05:37 +0000
ROA not before: Sat 01 Jan 2022 13:05:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 45.150.224.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20905780 (0x13eff34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Validity
Not Before: Jan 1 13:05:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbbff7adb44f36ab497629183e86818df941b498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:68:18:1f:d7:f9:ae:ba:c9:08:70:5f:3b:aa:
62:b8:4f:a9:d4:8b:48:f7:f5:28:26:94:88:75:4c:
8c:d6:fb:95:67:c7:fd:68:b1:0c:a3:17:e9:f8:4f:
6e:e3:5a:bd:89:26:cb:7a:9b:c2:44:bd:ab:29:e9:
f3:be:20:89:5d:ae:78:7d:c7:90:04:bd:f6:fa:69:
5c:b6:a1:b1:d8:e7:24:31:81:a9:ae:91:b5:52:17:
ff:b4:c9:3d:23:57:49:de:c7:bd:9a:2c:84:ec:7e:
03:b2:c0:7b:17:ac:50:d8:3a:f0:68:7a:23:4e:32:
a1:b7:c3:db:b3:e7:4a:1d:09:19:dc:4f:3b:29:20:
24:4b:26:4d:2b:51:2c:0f:b2:d7:ae:8b:b9:b8:03:
48:a7:d5:4c:83:92:e2:51:60:29:a5:b0:e7:17:4a:
50:fe:a3:7e:54:26:37:e8:c2:c4:a3:e1:bc:76:06:
4f:9c:b3:ef:39:15:a3:3f:c1:34:cc:55:19:61:ba:
09:57:2d:25:cd:0b:2e:41:09:70:7c:92:91:38:75:
b5:0e:c1:65:ae:f4:16:9d:3b:6d:f6:9c:d2:15:33:
04:5f:5b:ab:83:11:da:70:5b:c8:58:34:d6:7f:26:
8b:dc:b6:70:7b:b7:a2:33:2d:ae:9f:a0:74:02:fb:
36:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:BF:F7:AD:B4:4F:36:AB:49:76:29:18:3E:86:81:8D:F9:41:B4:98
X509v3 Authority Key Identifier:
keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/y7_3rbRPNqtJdikYPoaBjflBtJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.224.0/24
Signature Algorithm: sha256WithRSAEncryption
db:49:0d:83:51:8f:72:2a:fc:4d:26:e4:ef:3f:a5:db:74:be:
f4:6a:44:a4:e9:f5:1f:2f:a8:99:2e:b2:c7:69:8a:87:98:cd:
2e:56:0d:bd:65:17:29:ad:6d:60:27:eb:22:e5:c9:91:da:ca:
87:18:c9:a9:04:91:8a:af:2d:99:03:b8:58:98:32:85:d5:29:
19:0e:2d:c5:67:76:bd:c3:20:3c:05:4e:72:6e:7c:15:4c:c2:
3a:e0:2b:be:80:5a:e1:4d:bb:93:af:0d:c9:89:84:ef:7d:28:
b2:2b:b0:3b:dc:01:fc:67:ec:ff:28:71:b7:2a:34:cf:e7:09:
68:14:95:02:00:a8:fa:7c:ac:ec:05:e9:a6:e6:f6:5f:c4:67:
f9:1e:32:e9:11:e0:b2:35:6d:3c:ea:8e:02:c2:e5:a2:48:6f:
f2:d1:89:2f:14:8f:6d:02:43:97:6c:80:55:db:ab:b1:a6:01:
66:84:d3:14:e2:8a:0e:46:97:de:72:96:61:6d:84:e4:be:c4:
5f:cc:f8:48:7e:07:36:cb:74:cd:7b:14:f6:f4:9d:3a:0a:ee:
12:a6:3a:9b:a8:ce:dc:a7:b1:95:97:1c:ce:9a:a8:55:40:22:
29:fb:1c:ef:55:64:a2:55:02:5d:b7:d0:72:a0:25:94:eb:e6:
2b:30:5b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:57 2024 by rpki-client on console-fra.rpki-client.org