Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/kteG46oSrrDI-XYDLCt0Ve0_3N8.roa
File: kteG46oSrrDI-XYDLCt0Ve0_3N8.roa (raw, json)
Hash identifier: F0VjzBkp4PIDxr1TxPvIHdxqnKbsa6oyRIx0JdzKAyU=
Subject key identifier: 92:D7:86:E3:AA:12:AE:B0:C8:F9:76:03:2C:2B:74:55:ED:3F:DC:DF
Certificate issuer: /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Certificate serial: 06DC9AF6
Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/kteG46oSrrDI-XYDLCt0Ve0_3N8.roa
Signing time: Sat 01 Jan 2022 13:06:54 +0000
ROA not before: Sat 01 Jan 2022 13:06:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136950
IP address blocks: 45.157.68.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115120886 (0x6dc9af6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Validity
Not Before: Jan 1 13:06:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=92d786e3aa12aeb0c8f976032c2b7455ed3fdcdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:78:56:ce:31:9e:b2:2c:8d:81:d5:e9:53:2c:
2f:d8:97:e7:2b:56:90:a6:f9:d4:5e:d5:ff:fe:ab:
67:cd:8d:08:be:7b:dc:c5:26:60:1e:d8:31:20:78:
f0:25:8e:27:37:c1:5b:8a:3b:fc:8e:d6:d8:2c:b5:
39:b3:1d:48:3b:07:c9:14:79:2f:cc:75:1f:7b:96:
b8:8e:d7:08:70:94:84:de:b9:cb:b1:fa:f6:c1:31:
fe:50:e1:3c:20:71:21:7e:40:38:71:53:14:ae:47:
de:29:56:a7:58:43:62:e5:ac:9d:4c:31:be:76:ae:
e3:2b:bc:fc:f9:89:95:52:f7:25:9d:b3:e1:a9:0e:
48:ee:02:43:7a:9f:31:96:aa:b7:42:95:bc:71:8d:
81:3f:40:92:1d:25:6f:76:86:d0:c8:22:9b:7e:cf:
de:86:4c:8e:5e:48:be:09:ae:1f:df:0d:98:e6:ea:
29:70:b2:de:c2:7f:0d:9b:2e:ab:f4:9a:2c:00:66:
74:03:22:e4:82:10:84:49:bc:eb:2e:3a:57:c5:e2:
3d:c0:94:a8:9b:54:6d:c3:ec:d2:53:b6:35:57:20:
32:a6:2f:ca:d2:4a:4f:ce:ba:ef:17:8d:12:7d:82:
f7:90:c4:85:6f:0c:32:64:3e:40:bd:7c:9e:39:90:
6e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D7:86:E3:AA:12:AE:B0:C8:F9:76:03:2C:2B:74:55:ED:3F:DC:DF
X509v3 Authority Key Identifier:
keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/kteG46oSrrDI-XYDLCt0Ve0_3N8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.68.0/24
Signature Algorithm: sha256WithRSAEncryption
47:4a:9a:da:30:05:30:8a:5a:a4:2b:db:fb:cd:68:9c:c0:8b:
94:fa:d1:49:fe:2e:d9:28:25:20:5b:07:93:61:2b:3d:07:8d:
13:49:a8:62:65:be:1e:9c:cd:11:e8:84:5b:e3:bb:f5:10:d0:
23:1d:07:f9:8f:66:d8:ad:14:ac:f5:34:97:8e:19:91:1b:ce:
5e:92:99:9c:6c:8c:ed:9b:f9:c2:91:83:94:19:9b:1c:15:17:
80:23:68:49:5d:bd:12:ee:87:1d:c8:54:8a:64:f7:f1:a2:c0:
7b:2f:66:c2:08:d1:e1:52:9c:ea:1f:f0:c6:0f:c6:4f:39:19:
49:ed:a2:b8:d7:2f:4f:71:64:50:ea:60:73:e0:ab:5e:a0:1d:
be:23:d1:00:c3:2e:40:14:19:6a:14:0f:29:e5:0e:74:92:52:
57:35:fb:95:ae:70:54:52:1d:8d:0f:c3:e7:5e:9c:bf:1e:96:
ff:30:ff:eb:97:b1:a9:a1:41:8e:c9:ad:88:92:f1:29:d2:47:
72:b8:58:69:b6:a9:7c:80:a0:81:64:02:72:f8:f0:5a:0e:c1:
7a:99:e9:74:4a:d8:7f:9b:ed:1b:ae:01:9b:3e:e2:cd:2b:b4:
9e:12:52:e5:a2:d5:ef:a7:fe:08:94:c0:d0:cd:53:43:da:5a:
db:81:fa:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:59 2024 by rpki-client on console-ams.rpki-client.org