Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/udVvhMz3UoNFUfhwIa12BvTUA9o.roa
File: udVvhMz3UoNFUfhwIa12BvTUA9o.roa (raw, json)
Hash identifier: OTJEoNy+AgeM6BdMBT45MwM3qZoYwOp7xNLi2RCjQj4=
Subject key identifier: B9:D5:6F:84:CC:F7:52:83:45:51:F8:70:21:AD:76:06:F4:D4:03:DA
Certificate issuer: /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Certificate serial: 07C07C0C
Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/udVvhMz3UoNFUfhwIa12BvTUA9o.roa
Signing time: Sat 01 Jan 2022 01:58:39 +0000
ROA not before: Sat 01 Jan 2022 01:58:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 45.136.240.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130055180 (0x7c07c0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Validity
Not Before: Jan 1 01:58:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9d56f84ccf752834551f87021ad7606f4d403da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f0:92:19:85:b6:1f:bf:e5:92:8e:b5:43:a4:
a6:16:b8:22:66:73:59:ee:dd:c2:4b:6a:49:18:ef:
9f:df:0d:a1:16:b1:55:dc:1c:06:3d:e2:02:6d:fa:
18:ff:bf:5e:a0:6d:33:84:df:e2:4a:cc:fb:9e:9e:
ba:1a:85:05:06:5c:a4:16:48:82:1f:db:c7:d5:d9:
48:17:06:28:71:1d:92:b3:67:33:01:a6:37:55:76:
7b:43:1b:0a:18:ce:29:f9:c4:3d:6e:90:cc:f5:af:
49:8a:5a:5c:da:56:b8:5d:42:29:05:64:3b:78:b6:
d0:93:b2:ad:77:18:40:d6:24:11:65:98:33:66:c6:
16:54:33:67:2b:8d:ec:e7:85:22:15:b2:1a:3c:ab:
34:99:71:28:ca:6d:b0:32:c8:0e:88:f0:f8:78:ba:
52:51:26:95:ad:e5:f2:86:c9:4a:73:8f:97:e3:3d:
a4:84:35:15:4c:68:29:64:a9:f0:7d:52:72:e0:ff:
62:50:49:ac:f0:19:b5:df:1f:22:8b:f7:2e:d3:61:
1c:e3:70:22:45:e0:b8:a2:a5:ef:c3:4c:1d:12:5e:
e5:41:48:5b:26:a5:61:ee:38:d4:8a:6d:2c:8c:f8:
8e:54:a3:ad:c2:14:65:75:2d:01:cb:88:e6:0b:08:
17:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D5:6F:84:CC:F7:52:83:45:51:F8:70:21:AD:76:06:F4:D4:03:DA
X509v3 Authority Key Identifier:
keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/udVvhMz3UoNFUfhwIa12BvTUA9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.240.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:ff:fc:71:bd:65:f3:7d:ca:97:de:07:95:00:c3:b0:d6:fa:
ac:48:79:5b:79:34:39:89:88:1b:d0:96:5d:b9:e5:3f:1e:da:
9c:ef:11:28:74:c3:29:e8:c2:89:f5:1a:84:2b:16:35:d4:9d:
5f:d8:a9:31:e7:3b:b1:8a:4d:7a:81:8d:c3:dd:57:15:7c:40:
e9:12:58:0b:37:44:53:ab:a0:aa:17:df:f6:37:f5:5b:34:8b:
b5:b9:1a:90:10:88:9b:c8:06:52:ae:06:a3:12:ce:9b:dd:49:
92:9c:9c:1a:8e:f2:cb:e7:81:53:91:72:8e:e5:a4:e1:4d:f8:
56:53:0d:f6:73:15:30:1e:f6:89:36:59:51:b1:5e:c4:f9:10:
82:86:5b:f8:03:b1:08:b5:e4:b9:c0:6d:d6:e2:df:b6:41:01:
88:2c:77:e2:80:4d:be:d1:f8:9e:ac:3d:34:eb:a8:2a:ce:90:
f1:20:8e:39:ed:d1:78:16:44:b7:cc:73:aa:3b:1a:6e:2f:99:
d5:85:2f:a3:37:46:2e:27:5d:05:84:43:38:17:c6:86:9a:cc:
0c:14:d1:73:60:ac:36:c1:ac:4d:3c:58:7b:71:d7:5d:54:ba:
4a:16:8f:14:7c:92:1b:1d:53:97:98:2a:87:b0:85:a4:7d:54:
fb:ee:a2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:31 2024 by rpki-client on console-fra.rpki-client.org