Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/fAPLkgl5f3T3batfukib3KlPv0Y.roa
File: fAPLkgl5f3T3batfukib3KlPv0Y.roa (raw, json)
Hash identifier: DOtk8NfW4o7DzUlFP9i6PL6wbUBZ3/wngf63JuzAQWw=
Subject key identifier: 7C:03:CB:92:09:79:7F:74:F7:6D:AB:5F:BA:48:9B:DC:A9:4F:BF:46
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 05077A31
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/fAPLkgl5f3T3batfukib3KlPv0Y.roa
Signing time: Wed 27 Apr 2022 13:53:43 +0000
ROA not before: Wed 27 Apr 2022 13:53:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6762
IP address blocks: 45.134.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84376113 (0x5077a31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Apr 27 13:53:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c03cb9209797f74f76dab5fba489bdca94fbf46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:01:67:10:d3:f7:91:5b:83:9b:0a:3d:25:09:
d8:05:ab:2a:43:d5:43:a7:46:2d:4a:b1:16:90:46:
d3:34:d8:ab:55:a4:6e:18:7d:f7:67:84:42:f6:bc:
df:0f:e0:f1:cc:a5:20:6a:ff:7b:e7:79:24:0e:41:
e7:16:fd:5c:37:04:6c:b8:b0:d9:b0:79:f2:25:2b:
58:33:bc:fa:09:ca:70:d5:20:2e:05:f7:0c:9b:33:
26:00:82:8f:63:09:e0:de:de:9d:cc:6a:54:33:86:
4a:77:60:e7:3f:39:c4:e8:c3:b3:fe:31:4d:d0:ef:
e2:1a:70:08:18:70:46:75:34:52:4b:5b:e4:ee:75:
27:32:53:f7:28:ed:c8:0d:74:1d:aa:f2:ba:12:a2:
9c:e2:6b:3d:c9:4c:5a:8a:8d:7a:d7:03:32:b7:4b:
cf:da:50:02:e5:19:3a:b7:93:78:f4:2f:8a:69:89:
a5:24:2c:d0:2c:76:ba:3e:e8:ba:03:62:88:f7:fa:
ea:f5:30:5d:c4:16:86:cc:ae:97:df:a3:58:89:8f:
9a:99:1e:59:00:23:89:9b:27:2f:c2:1a:af:83:34:
d9:f4:ac:c9:e9:6c:3d:04:a2:c0:cd:be:69:62:b1:
58:36:d9:aa:cc:dc:2d:53:9a:97:3b:0e:ef:c9:d7:
8d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:03:CB:92:09:79:7F:74:F7:6D:AB:5F:BA:48:9B:DC:A9:4F:BF:46
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/fAPLkgl5f3T3batfukib3KlPv0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.13.0/24
Signature Algorithm: sha256WithRSAEncryption
14:52:91:bd:2f:cd:b6:92:e9:51:34:30:b4:dd:b1:3a:c6:9e:
ee:7d:18:93:44:d3:21:d8:1e:3e:11:eb:74:ae:0f:f3:2c:7c:
86:b2:b7:41:33:89:a1:3c:10:d1:fd:b9:3e:f9:6e:e1:bb:e9:
d7:75:3e:33:29:f8:30:b6:57:00:69:aa:f0:b3:7a:74:d5:6f:
8d:40:d3:2c:c6:ce:29:94:9b:27:c8:c7:bf:1d:9a:a9:1c:02:
05:7a:9c:24:e5:17:41:2e:22:1f:6f:9d:7e:ed:1f:e9:28:23:
c4:1c:74:a0:2a:04:16:f6:a9:09:b3:a5:66:ff:7d:80:90:27:
4b:1d:06:da:76:f6:54:6a:6d:8c:b3:73:a5:ba:2c:e2:3c:3a:
43:32:de:d9:89:e9:38:d0:b4:81:11:1c:bb:5b:96:f6:90:b6:
8f:7f:ef:b2:7c:bb:d2:1d:78:77:36:57:42:54:7f:6e:5a:3d:
51:81:f0:5f:68:ca:cf:8e:eb:db:fd:68:12:77:cc:75:14:59:
96:26:0e:95:f1:1d:57:64:9f:44:8c:74:f8:d5:0b:61:33:85:
3c:1d:0a:0f:3e:5a:8c:ea:1d:e4:54:81:e2:0c:8a:97:16:2a:
fc:0f:44:3f:9f:fe:b2:e1:83:c1:4b:4a:83:39:06:59:dc:7b:
d8:39:14:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:11 2024 by rpki-client on console-ams.rpki-client.org