Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/wwSBdm21YZBYbGX8SX3wT_Jxr0I.roa
File: wwSBdm21YZBYbGX8SX3wT_Jxr0I.roa (raw, json)
Hash identifier: Di12u3thYuBXZd5rXfHFqgsngkPHxeJOWDTx6EypgkM=
Subject key identifier: C3:04:81:76:6D:B5:61:90:58:6C:65:FC:49:7D:F0:4F:F2:71:AF:42
Certificate issuer: /CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Certificate serial: 06DCF9F7
Authority key identifier: A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/wwSBdm21YZBYbGX8SX3wT_Jxr0I.roa
Signing time: Sat 01 Jan 2022 13:06:54 +0000
ROA not before: Sat 01 Jan 2022 13:06:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139471
IP address blocks: 45.157.70.0/24 maxlen: 24
45.157.69.0/24 maxlen: 24
45.157.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115145207 (0x6dcf9f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1d0315373b09b061aa59f129d592eabf7b3aaef
Validity
Not Before: Jan 1 13:06:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c30481766db56190586c65fc497df04ff271af42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4f:b9:88:4e:02:7c:f7:1a:56:6f:f0:26:20:
55:ce:97:08:94:b9:65:d8:a0:9a:f0:7a:5e:3d:c7:
f2:3a:97:48:cb:0d:82:71:ac:83:b5:5a:51:fc:35:
0b:00:e6:90:ca:33:c1:b2:79:4b:e2:42:94:72:0b:
f5:34:94:31:2f:37:f8:70:97:a8:c5:b3:94:2b:0f:
f7:f1:e7:ee:9c:ac:ba:90:e4:f9:c0:0c:5d:49:38:
bc:9f:33:63:60:db:7e:72:b0:90:fc:fa:4e:4b:40:
c9:8e:08:2c:c2:b6:41:f4:46:9f:1d:f5:22:fd:72:
a7:e7:9f:1d:79:7d:be:fc:ea:07:88:93:25:3f:2d:
10:cb:99:f5:99:bd:74:4d:b1:63:5e:5f:c1:b5:fc:
ae:85:f2:3a:01:c4:b4:06:ca:74:d1:3d:f1:01:2c:
23:7f:71:a7:dd:5b:29:7a:ca:bf:1a:bd:7e:da:61:
07:3a:34:a7:dc:6a:e9:08:25:2c:e2:00:e1:a3:32:
46:52:43:5a:cc:23:8b:f3:38:a1:b9:55:af:12:f9:
01:18:40:e6:10:f9:cb:7b:34:6c:91:62:4d:29:3c:
69:2d:56:db:cf:fa:09:da:82:bf:0f:64:03:ba:24:
bf:95:69:c2:ef:38:49:ea:d3:19:ce:22:f6:6d:05:
71:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:04:81:76:6D:B5:61:90:58:6C:65:FC:49:7D:F0:4F:F2:71:AF:42
X509v3 Authority Key Identifier:
keyid:A1:D0:31:53:73:B0:9B:06:1A:A5:9F:12:9D:59:2E:AB:F7:B3:AA:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odAxU3OwmwYapZ8SnVkuq_ezqu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/wwSBdm21YZBYbGX8SX3wT_Jxr0I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1bcb2d-f58b-4e44-b133-dfcbdf3b1058/1/odAxU3OwmwYapZ8SnVkuq_ezqu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.69.0-45.157.71.255
Signature Algorithm: sha256WithRSAEncryption
16:72:6f:1a:3c:17:3c:22:e6:02:ae:f2:ad:9e:43:01:a7:26:
0e:43:ca:c9:50:ef:f6:3c:e0:87:fb:82:3a:6f:a1:1f:e9:01:
0c:2f:a0:b9:70:98:d4:24:66:28:23:97:9b:7a:9f:5c:dd:26:
f0:f4:3c:fe:0d:54:ee:3a:26:46:b5:3b:78:4a:5d:e2:1a:5d:
14:04:da:5c:92:6b:3d:61:3c:0b:48:de:cd:56:a1:cb:a3:ff:
95:4c:7a:26:66:93:af:9f:2b:fc:8e:cb:e8:cb:43:5b:0e:b7:
fc:95:20:c1:5b:40:c6:61:9c:35:b0:18:15:0f:b2:ac:0f:c5:
f2:da:27:d0:5a:ba:36:dc:f0:b2:34:37:fc:2e:80:8c:a7:85:
36:ae:6b:92:7f:05:6b:19:12:3a:c8:11:43:f6:f9:29:97:f5:
5f:f8:9e:aa:69:56:68:e4:76:4f:73:9e:82:28:81:a5:ef:19:
17:63:30:41:c6:b7:29:de:d0:35:04:92:ff:ec:0c:af:54:da:
8d:76:a9:8e:7e:82:7b:5d:e8:a6:61:0a:db:e5:08:9c:22:fb:
45:8a:e9:58:bf:fe:e7:7d:d1:c4:ca:9a:2a:b0:75:14:67:c6:
69:0b:f6:dc:80:a8:9f:30:54:e3:b3:ed:b2:7e:41:9c:e1:fc:
0c:10:9c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:59 2024 by rpki-client on console-ams.rpki-client.org