Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/rKGBfx4sUhUSw2rCWfa79ZS0F90.roa
File: rKGBfx4sUhUSw2rCWfa79ZS0F90.roa (raw, json)
Hash identifier: lRRCY7PecwyQUKR0T0JkyQsYNhN2RiZduLaZIiGSPFw=
Subject key identifier: AC:A1:81:7F:1E:2C:52:15:12:C3:6A:C2:59:F6:BB:F5:94:B4:17:DD
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 03EE01D8
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/rKGBfx4sUhUSw2rCWfa79ZS0F90.roa
Signing time: Sat 01 Jan 2022 08:59:02 +0000
ROA not before: Sat 01 Jan 2022 08:59:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8100
IP address blocks: 45.134.13.0/24 maxlen: 24
45.134.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65929688 (0x3ee01d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Jan 1 08:59:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=aca1817f1e2c521512c36ac259f6bbf594b417dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7f:d0:98:43:0c:6d:3b:f5:84:36:20:de:32:
76:00:fa:ee:61:56:61:1a:0f:f4:4b:9f:5e:d8:27:
2d:52:db:87:0e:89:4f:57:ec:74:26:50:ad:f2:73:
77:30:9d:b2:da:f5:0e:7a:31:be:5c:c3:e8:16:81:
10:e7:45:a8:98:fc:d3:30:cb:6a:4b:3f:24:fe:82:
72:d4:9b:df:d3:e4:45:05:0d:98:da:d6:68:3b:b6:
c4:6a:aa:2f:31:cd:ee:48:dc:e8:1e:25:1c:ab:12:
89:a9:84:fa:d6:56:0a:fb:7d:18:00:01:75:5b:b9:
70:45:d0:df:46:9c:3d:89:14:82:3b:95:c0:b1:11:
33:26:c3:59:60:5f:87:57:68:54:87:c7:45:40:e4:
e3:93:c2:65:b1:d0:06:6f:55:10:9d:77:d5:1c:0b:
78:fa:52:73:37:b4:9b:ad:c4:bb:ac:88:c6:6c:bd:
bf:a2:ac:48:ff:7f:79:e9:9a:01:e0:45:a6:90:53:
14:c8:07:21:59:af:6c:6d:d8:c3:58:73:ac:30:af:
8c:da:8c:85:57:ce:6f:2e:72:8b:a7:90:3a:b2:4f:
e3:7d:eb:40:e0:9f:db:28:8a:ac:18:7e:01:b6:8a:
82:b0:14:89:c0:cc:64:51:27:7a:c8:2d:81:f0:90:
15:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A1:81:7F:1E:2C:52:15:12:C3:6A:C2:59:F6:BB:F5:94:B4:17:DD
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/rKGBfx4sUhUSw2rCWfa79ZS0F90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.13.0/24
45.134.15.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:9b:8a:98:20:79:93:7e:24:28:f2:27:df:af:7d:01:8b:92:
b8:88:7e:22:58:c2:f4:32:15:48:b5:a0:76:2d:ce:90:ad:16:
4a:4b:17:24:0b:2f:4c:0f:bc:fb:9c:d5:03:41:b7:7b:12:d9:
92:ba:3e:0b:0e:ea:6f:e5:47:da:58:7d:95:95:37:75:79:31:
18:f7:00:da:d8:65:c8:21:04:57:e5:f9:b5:3a:86:f6:14:1e:
66:80:5a:36:fd:cb:f1:b4:f7:fc:60:63:1f:6f:f0:b6:2c:08:
79:67:5a:8b:03:ff:4a:00:4b:e0:b1:fa:17:ae:b0:5b:cf:3f:
cd:ae:62:fb:68:25:37:fd:84:85:7f:4f:8e:e0:25:ac:c8:ec:
50:cb:9d:12:91:33:f1:16:91:f4:65:41:a4:17:78:74:a4:fd:
cf:f2:c0:76:0c:56:c7:9c:69:bd:a4:07:ac:9d:0c:62:38:37:
82:6f:e5:a6:10:f5:d3:46:72:b7:f0:4b:36:0d:e2:6c:7d:15:
21:09:9c:ad:3c:5a:4d:78:e1:ef:7c:e9:8f:b8:c5:7c:dc:36:
bc:1d:0f:26:47:5a:27:31:81:6f:b6:ef:83:87:96:36:4a:e2:
91:2d:9e:1a:d2:a7:c4:fa:ce:e1:42:63:f0:a7:53:bf:f4:2d:
4b:3a:d3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:34 2024 by rpki-client on console-fra.rpki-client.org