Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/uF4dnxmw5-sSC2xbftGPAOPAM6M.roa
File: uF4dnxmw5-sSC2xbftGPAOPAM6M.roa (raw, json)
Hash identifier: OyZESm725WQA/eGaK5Ulw6axxZc+yWXz2cCo5M2/HGc=
Subject key identifier: B8:5E:1D:9F:19:B0:E7:EB:12:0B:6C:5B:7E:D1:8F:00:E3:C0:33:A3
Certificate issuer: /CN=4142d3f9b31126e0850265715c9fc32174b557a4
Certificate serial: 071F7759
Authority key identifier: 41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/uF4dnxmw5-sSC2xbftGPAOPAM6M.roa
Signing time: Sat 01 Jan 2022 02:01:54 +0000
ROA not before: Sat 01 Jan 2022 02:01:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205953
IP address blocks: 45.159.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119502681 (0x71f7759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4142d3f9b31126e0850265715c9fc32174b557a4
Validity
Not Before: Jan 1 02:01:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b85e1d9f19b0e7eb120b6c5b7ed18f00e3c033a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0b:bd:b9:1f:a4:65:a1:cb:45:58:b4:74:0e:
c4:02:02:6e:5a:92:fe:81:bd:18:f2:eb:e3:4c:f8:
e9:f6:4f:f0:95:b6:c8:d0:c1:a4:50:11:ba:ed:68:
d0:41:09:d7:12:24:49:21:f2:d3:20:f1:2c:53:85:
f0:56:86:8b:b9:8d:eb:48:6b:34:5f:8b:d5:50:45:
ec:c9:c8:de:46:af:56:d3:15:3e:0c:20:28:c7:1b:
b5:d3:7b:1a:7b:8c:fd:38:65:a8:2d:1c:53:b0:ec:
f2:64:08:22:f9:5f:5d:4a:05:29:9c:8a:dc:62:36:
38:ea:5e:a4:91:ea:c3:f6:e9:4b:18:80:5b:f2:90:
3a:c2:be:35:0c:8b:01:ab:f7:a6:3d:05:ff:d2:f1:
8e:dd:15:12:86:c9:3c:24:72:25:50:e9:1a:f0:c0:
18:dc:e1:6f:9a:0a:f2:0e:9d:b5:0e:99:c5:4b:be:
6d:6e:00:68:c4:c3:73:eb:98:8a:d3:ee:a0:62:36:
24:56:c0:95:0c:2e:1b:3a:f2:70:57:cf:42:bc:6a:
a5:b4:59:8d:38:b2:8a:f1:10:42:52:ca:01:fb:c2:
76:fa:79:22:58:e3:b0:83:2f:ca:f8:f2:e1:83:c3:
31:1d:0e:97:a6:40:01:60:f0:d2:d1:6b:29:51:ae:
68:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5E:1D:9F:19:B0:E7:EB:12:0B:6C:5B:7E:D1:8F:00:E3:C0:33:A3
X509v3 Authority Key Identifier:
keyid:41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/uF4dnxmw5-sSC2xbftGPAOPAM6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.30.0/24
Signature Algorithm: sha256WithRSAEncryption
71:0c:d8:45:fa:f4:df:db:9d:ff:cb:23:f2:da:24:c6:9a:a2:
80:7e:77:dd:d5:ff:9e:f1:09:7e:9f:df:e0:ed:f9:f5:5c:30:
5f:09:64:4b:41:af:2e:b5:4a:46:a9:14:fe:63:3d:52:5e:1e:
1d:3d:ce:55:35:25:b9:56:ef:7d:1b:cd:9f:20:82:0c:e5:10:
96:e8:d9:4d:6c:a6:c1:1f:88:70:3c:92:92:6d:34:50:b5:06:
08:05:76:8a:98:aa:b7:6c:52:a8:1d:ca:61:a4:74:5a:4d:c2:
e9:bf:19:76:e3:4f:fd:53:aa:92:4f:8b:39:df:91:24:c8:85:
9e:12:5d:ba:ec:e7:9d:8f:01:89:6d:ec:13:55:94:b3:a0:06:
be:ce:7f:cc:55:d0:66:19:32:82:16:47:16:7b:d6:b8:f2:f8:
8e:09:c0:30:73:cb:7b:75:ea:ff:6e:b4:93:eb:e0:05:66:ab:
03:24:f6:39:0f:24:99:bf:01:9a:72:80:a2:b1:72:4d:5f:53:
48:46:b3:b6:8c:57:0b:87:6c:e8:94:2c:b7:ac:83:14:d5:fc:
23:d8:b4:56:8b:34:61:3f:79:e6:16:0a:02:d4:b5:f0:3e:dd:
0d:9f:06:82:0a:f8:10:b8:f6:34:34:35:32:79:b4:4c:fe:b0:
0c:9f:ea:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:24 2024 by rpki-client on console-ams.rpki-client.org