Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/0F58IYQXqtwucNaot0_o68jkqNE.roa
File: 0F58IYQXqtwucNaot0_o68jkqNE.roa (raw, json)
Hash identifier: 6q06xAGshW7ASw0My+iMXWDqRSjk9ElnzXtVJFyhUkA=
Subject key identifier: D0:5E:7C:21:84:17:AA:DC:2E:70:D6:A8:B7:4F:E8:EB:C8:E4:A8:D1
Certificate issuer: /CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Certificate serial: 07F430E0
Authority key identifier: 23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/0F58IYQXqtwucNaot0_o68jkqNE.roa
Signing time: Sat 01 Jan 2022 03:59:19 +0000
ROA not before: Sat 01 Jan 2022 03:59:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208478
IP address blocks: 45.132.232.0/22 maxlen: 22
45.132.235.0/24 maxlen: 24
2a0e:73c0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133443808 (0x7f430e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2326eeeadd4c0ee55b3594a596e67220819c18d5
Validity
Not Before: Jan 1 03:59:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d05e7c218417aadc2e70d6a8b74fe8ebc8e4a8d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:73:0f:b8:c1:00:73:aa:20:79:18:71:62:
f3:8d:5c:6a:c2:ad:39:ef:13:10:74:4c:c7:61:78:
f9:77:a1:9b:47:99:0e:f2:82:b9:39:08:69:ae:56:
e3:5c:84:7d:4f:37:4f:b8:4e:fd:1d:74:00:33:2b:
dd:46:2d:2c:97:7d:37:af:0b:8a:4e:3a:55:5e:8a:
1a:ee:3a:a8:a8:91:cd:28:11:c8:25:1e:4b:6e:10:
0c:b1:3c:28:a2:1e:b1:b9:66:2c:c7:58:e7:94:be:
37:ae:db:3a:ad:31:35:44:e9:0e:32:37:33:c1:6f:
31:6c:af:23:49:fb:67:cb:ac:74:f8:2b:a6:4b:95:
74:20:62:f1:b9:22:69:bf:3e:5e:2e:4a:8b:69:fd:
31:31:bc:cb:a0:6e:50:92:31:8b:38:92:ba:06:a9:
8a:f7:c9:6c:7c:14:8d:56:bd:53:33:a6:45:f2:c3:
19:6e:13:94:47:f3:6f:6c:6d:53:11:c6:1f:69:7a:
d9:07:ef:21:fc:92:32:43:8f:aa:ce:43:61:dd:c8:
6b:38:ea:89:95:94:6f:23:89:bf:92:ea:82:c5:57:
46:68:a0:0d:d8:54:f9:ca:a0:c0:f9:ac:3d:93:47:
7f:b8:fc:cb:48:c6:2c:fc:e0:dd:a4:47:6d:4d:0f:
66:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5E:7C:21:84:17:AA:DC:2E:70:D6:A8:B7:4F:E8:EB:C8:E4:A8:D1
X509v3 Authority Key Identifier:
keyid:23:26:EE:EA:DD:4C:0E:E5:5B:35:94:A5:96:E6:72:20:81:9C:18:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iybu6t1MDuVbNZSlluZyIIGcGNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/0F58IYQXqtwucNaot0_o68jkqNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/a5980d-65f4-4573-9759-33415967c213/1/Iybu6t1MDuVbNZSlluZyIIGcGNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.232.0/22
IPv6:
2a0e:73c0::/29
Signature Algorithm: sha256WithRSAEncryption
01:a0:d4:99:ea:a6:9b:43:4b:3a:88:65:48:7b:03:d6:63:32:
e6:c5:19:db:68:b5:ed:0a:06:b1:8b:80:e3:ed:b3:b3:6d:2f:
a2:7e:74:69:0c:59:b8:0e:e4:82:1d:c8:70:7e:d5:6d:38:81:
65:76:60:8a:78:dc:c9:62:0e:3c:f7:ac:ce:d2:e0:12:46:bc:
6e:f0:03:70:08:f7:47:0a:ba:f0:24:79:e8:b4:d7:71:7c:e8:
f4:49:0c:42:b1:11:97:34:ce:7d:ab:13:e0:09:03:ba:73:ea:
ea:8d:34:61:da:ef:d0:d0:3f:ed:1b:1c:12:70:4e:e0:24:cd:
e7:75:a4:d4:4a:10:08:e9:88:f3:ce:af:4a:43:33:17:1b:76:
23:50:5a:4f:f1:0b:58:b8:42:e7:7b:5b:83:d8:11:3b:31:10:
d2:f1:f8:9e:3b:c0:33:3e:a5:b2:ee:62:20:b7:2a:0a:5a:30:
8d:d5:db:22:eb:d6:3f:0d:d8:0f:ee:3a:fa:c4:fa:15:6b:45:
f2:c6:d2:5f:cf:37:5f:a2:07:c1:67:cc:1a:5b:b3:f2:db:2d:
cd:82:72:c0:8e:ba:e5:44:44:66:cd:99:d6:7d:43:d1:e0:f9:
77:9a:93:a9:62:c7:68:1c:4d:65:0a:f9:57:f2:3f:d6:c7:97:
f8:48:13:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:37 2024 by rpki-client on console-fra.rpki-client.org