Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/j1Vw1Aoi21DqZjed4YPcXcl-ISI.roa
File: j1Vw1Aoi21DqZjed4YPcXcl-ISI.roa (raw, json)
Hash identifier: E7E6v3R6kRXWSxOOzEqJ8420yMdDh8kHkZPGvwB9CWY=
Subject key identifier: 8F:55:70:D4:0A:22:DB:50:EA:66:37:9D:E1:83:DC:5D:C9:7E:21:22
Certificate issuer: /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Certificate serial: 0857673E
Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/j1Vw1Aoi21DqZjed4YPcXcl-ISI.roa
Signing time: Tue 21 Jun 2022 10:17:42 +0000
ROA not before: Tue 21 Jun 2022 10:17:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139471
IP address blocks: 45.157.70.0/24 maxlen: 24
45.157.69.0/24 maxlen: 24
45.157.68.0/22 maxlen: 22
45.157.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 139945790 (0x857673e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Validity
Not Before: Jun 21 10:17:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f5570d40a22db50ea66379de183dc5dc97e2122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:17:cf:b0:79:e9:a2:60:62:c8:82:00:8a:7d:
31:8f:eb:ba:18:6f:0b:d3:5c:bb:cb:89:b8:e9:28:
73:c9:84:c5:1f:36:9c:c1:c5:32:c8:f4:e2:48:35:
fc:cf:dd:cc:7a:cd:ad:1f:9d:8d:06:bb:1a:5d:c8:
75:5c:f5:75:70:b4:43:3b:f9:20:f4:f4:69:a4:32:
99:6c:8c:4c:f2:72:0f:96:ae:15:c3:cb:21:21:90:
b5:04:4d:43:c3:b0:26:c2:17:d2:c4:7f:c8:81:59:
5f:52:84:6d:b1:00:27:a1:11:55:a0:03:20:cd:b8:
7d:27:fe:f4:4c:a6:cb:53:59:a6:61:c2:07:32:b1:
88:c9:74:d4:42:e7:5e:33:29:9a:9b:20:fe:2e:44:
15:a4:a9:40:e5:2b:a7:67:f9:a8:58:41:7a:1c:62:
0f:bd:ec:e4:d3:d3:91:e1:fe:80:c3:e9:9b:65:fc:
de:fe:f0:ca:86:57:fe:59:fe:59:de:b8:fe:b2:44:
2d:67:75:d2:1d:ec:eb:f4:2a:4d:f4:e0:41:54:d7:
9e:cf:06:b1:89:47:8d:11:5b:06:40:a2:f0:98:cb:
c9:08:86:92:96:99:d8:b2:44:d1:39:80:73:af:d6:
38:f9:87:21:12:03:7c:6f:28:df:50:50:5c:0e:29:
0a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:55:70:D4:0A:22:DB:50:EA:66:37:9D:E1:83:DC:5D:C9:7E:21:22
X509v3 Authority Key Identifier:
keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/j1Vw1Aoi21DqZjed4YPcXcl-ISI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.68.0/22
Signature Algorithm: sha256WithRSAEncryption
ac:b7:68:e4:26:65:86:a9:b2:fe:55:a6:23:39:27:69:48:ac:
a3:a1:62:65:ce:74:be:e0:f8:24:e4:e9:20:ca:35:03:74:15:
73:a5:0a:d9:a4:cd:be:22:04:5b:a3:8c:f1:3f:ed:ba:12:a8:
ed:50:81:a5:22:c5:a0:2c:fb:d0:a3:1b:cb:8f:6d:6b:9d:95:
20:2c:ca:75:c1:3e:ac:78:20:0d:ba:07:7c:3a:29:ec:f6:59:
b1:83:0a:f5:e8:88:df:c2:1e:f8:35:a5:aa:ff:ef:1a:2c:41:
76:ae:7c:66:98:f6:94:00:eb:15:59:e3:57:e8:42:b6:ab:cc:
46:60:1d:28:3d:c8:99:e3:45:d0:05:0e:6d:83:84:41:4c:5d:
da:cf:a0:2f:63:ce:3e:bb:8e:60:a2:b1:a4:85:d1:9f:3b:22:
81:ad:87:24:4a:ba:e4:d2:77:45:5e:18:88:93:5f:dc:b0:9f:
cb:b5:29:e8:2d:2b:ed:52:79:d3:8f:7d:8c:8b:f9:52:79:08:
05:d9:93:0f:64:29:8a:c1:0b:74:94:5f:90:0d:22:71:ed:1f:
ac:78:a3:b9:18:7c:21:58:a3:c6:c3:02:f3:8a:a1:bc:42:c1:
2b:54:3a:d8:1f:b2:e7:dc:5d:cf:7a:93:5d:c8:24:f6:66:88:
fe:79:31:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:59 2024 by rpki-client on console-ams.rpki-client.org