Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/rCFYy2oBHq3jHLbwLazcCSu1mkA.roa
File: rCFYy2oBHq3jHLbwLazcCSu1mkA.roa (raw, json)
Hash identifier: lfN392gVoJYqKkqyQwscdPvfYuONdiRq6AU6HfNLH2U=
Subject key identifier: AC:21:58:CB:6A:01:1E:AD:E3:1C:B6:F0:2D:AC:DC:09:2B:B5:9A:40
Certificate issuer: /CN=6228417361c1c406ae9a7257daa9fb0620782d35
Certificate serial: 0182184D287A04241E02AA26FCF5AF1879C1
Authority key identifier: 62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/rCFYy2oBHq3jHLbwLazcCSu1mkA.roa
Signing time: Tue 19 Jul 2022 21:11:25 +0000
ROA not before: Tue 19 Jul 2022 21:11:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204856
IP address blocks: 45.129.93.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:18:4d:28:7a:04:24:1e:02:aa:26:fc:f5:af:18:79:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228417361c1c406ae9a7257daa9fb0620782d35
Validity
Not Before: Jul 19 21:11:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ac2158cb6a011eade31cb6f02dacdc092bb59a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a9:a4:89:9b:28:7a:62:9d:ff:01:e3:13:4f:
8c:d2:5f:13:be:cc:cd:90:d4:ae:9f:e9:0a:ef:59:
fb:5e:de:31:48:ff:24:c2:d1:ec:81:88:d5:c9:f2:
ab:bd:02:e5:c4:c6:fd:9c:b1:cd:4d:95:aa:a8:32:
f2:ca:29:96:5a:6f:a1:35:15:eb:bc:81:fa:8b:6c:
26:6d:cd:13:7f:98:ad:d8:bf:66:d3:98:f2:67:ea:
01:4c:ad:fa:11:61:1e:4c:99:16:8f:c2:72:ca:60:
b1:74:10:88:9d:f1:21:12:ef:e5:ca:fa:62:a8:2d:
9d:b2:9f:8f:3a:21:0c:91:8a:f9:40:9a:e5:37:38:
c9:20:d6:e2:eb:f5:9f:46:87:c6:aa:5b:c1:08:58:
8e:85:23:69:55:b4:7e:72:91:12:06:24:23:0b:02:
e2:e8:e3:2b:13:98:82:51:20:25:40:4c:78:e2:af:
fe:cc:c3:ab:e5:5d:d2:a8:6a:53:64:fc:06:b6:4f:
34:c7:af:4f:57:b2:83:1a:30:a0:72:a4:18:fe:19:
42:a6:1e:bb:d8:2b:e7:2c:cf:25:02:5c:fd:75:fb:
05:b0:e4:75:8d:c5:82:a4:79:49:ab:8c:2a:c3:97:
04:20:db:16:a6:58:9d:ef:c4:78:47:a4:7c:0f:9c:
f6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:21:58:CB:6A:01:1E:AD:E3:1C:B6:F0:2D:AC:DC:09:2B:B5:9A:40
X509v3 Authority Key Identifier:
keyid:62:28:41:73:61:C1:C4:06:AE:9A:72:57:DA:A9:FB:06:20:78:2D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YihBc2HBxAaumnJX2qn7BiB4LTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/rCFYy2oBHq3jHLbwLazcCSu1mkA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/71f2e8-bd86-4c5e-9551-4d3a59cb9439/1/YihBc2HBxAaumnJX2qn7BiB4LTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.93.0/24
Signature Algorithm: sha256WithRSAEncryption
43:36:ae:3b:20:bb:5e:0f:42:d8:62:a4:8e:ca:73:55:e0:7e:
07:5d:51:a8:8a:79:20:f8:7e:30:fc:d4:cb:0f:7e:9d:57:12:
a5:ce:cd:f3:63:24:db:13:71:94:c5:f5:0f:a9:d0:ee:05:39:
18:13:09:e3:e7:94:be:80:67:a5:50:9d:e6:2a:60:66:75:86:
d5:17:d1:35:2f:f2:93:d6:ff:95:95:25:e9:37:c0:6e:df:3e:
68:8a:83:b0:fa:3a:ff:0b:7a:47:32:b7:47:6a:ce:48:26:7f:
99:cd:05:75:89:2e:ef:05:07:5d:60:0d:7a:d8:68:96:24:9a:
03:c0:a4:84:d5:c8:3d:28:18:5c:35:df:69:eb:95:c2:f6:69:
41:db:0b:8b:94:c3:81:d4:53:52:7c:e5:df:05:0b:d5:e3:b3:
b6:95:b6:88:ed:c4:a9:bc:25:03:3d:11:e4:60:ea:d0:75:47:
7e:5d:d4:74:c0:40:26:06:16:a3:1d:9c:85:d4:b5:db:79:b7:
c8:fb:17:e5:f4:fc:ba:c5:12:03:f6:1f:35:ab:40:33:83:37:
16:64:3b:8d:7e:86:ce:54:d6:9e:61:2a:bb:3c:97:5b:07:17:
4a:a0:7c:fa:75:e5:99:02:f5:27:f9:8a:a7:a1:bc:cd:3d:ca:
48:1b:9b:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:12 2024 by rpki-client on console-fra.rpki-client.org