Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/2q7l0BWplzxLbncDSYKT5MDEAWw.roa
File: 2q7l0BWplzxLbncDSYKT5MDEAWw.roa (raw, json)
Hash identifier: a3gnwnUSZqGZr+RzgaxVq24gsYjgAxYPtcvi+0EToOU=
Subject key identifier: DA:AE:E5:D0:15:A9:97:3C:4B:6E:77:03:49:82:93:E4:C0:C4:01:6C
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0CB0580F
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/2q7l0BWplzxLbncDSYKT5MDEAWw.roa
Signing time: Sat 01 Jan 2022 05:04:54 +0000
ROA not before: Sat 01 Jan 2022 05:04:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 32181
IP address blocks: 45.85.106.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212883471 (0xcb0580f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 05:04:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=daaee5d015a9973c4b6e7703498293e4c0c4016c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d6:ca:2e:8a:b4:75:c6:94:67:76:c5:4e:82:
a9:e3:f1:00:b3:31:ab:17:6f:49:79:2c:0b:c6:ed:
3a:24:97:92:af:19:b8:52:28:a7:47:bc:55:f7:84:
ee:5b:36:3a:3d:3d:ed:d9:b1:02:d2:4b:b4:9b:3b:
05:ea:8b:8c:39:9c:e4:4e:54:d4:40:6c:b5:06:ab:
49:98:a3:e1:48:c9:62:b7:bc:95:fe:25:08:c3:87:
53:5f:0d:b7:77:3a:41:f1:08:35:26:1f:13:aa:2e:
f6:70:40:86:6c:a4:f0:fb:f4:11:a6:f4:b7:5d:95:
75:d7:cf:b6:55:1c:1a:3c:c6:f0:31:d2:e9:28:2a:
02:80:33:99:ad:8f:11:91:39:98:8f:08:d6:db:23:
2c:5a:ef:3e:d4:4d:9e:94:16:2b:c2:d2:41:89:eb:
47:fe:05:b8:0b:07:d8:53:59:14:80:f2:36:f8:63:
c1:c6:21:22:20:79:49:cb:c8:17:59:0c:c0:bc:f0:
68:a7:ee:a7:11:97:5c:9a:69:e7:48:ac:fa:15:2e:
b1:49:52:e1:dd:ba:e5:07:3c:da:fd:bd:6e:2a:8f:
17:79:07:c6:c0:52:b6:7f:5a:05:f4:71:41:21:c6:
18:da:1c:f1:af:b7:41:a4:2e:6c:c7:57:01:4c:d8:
38:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AE:E5:D0:15:A9:97:3C:4B:6E:77:03:49:82:93:E4:C0:C4:01:6C
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/2q7l0BWplzxLbncDSYKT5MDEAWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.106.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:74:40:1d:86:a0:1d:89:33:5c:93:8f:13:e1:72:b0:68:4b:
04:1c:76:9b:d4:a8:ce:d2:fd:4c:c7:64:21:d5:e4:b5:1e:65:
cc:3a:2a:f6:04:6c:0c:9a:9c:69:05:bc:6a:90:40:27:50:d2:
c0:f0:5e:17:16:46:6f:ae:8f:e8:75:79:54:55:e8:0e:88:39:
01:70:8f:3a:7c:d7:11:ef:b3:b9:54:6d:3b:14:be:be:5d:8b:
25:bc:4e:6f:9a:19:3e:ad:68:b7:a0:ef:eb:5e:25:53:a2:81:
7d:74:8f:62:ac:9f:d6:86:d3:47:ba:17:f5:fb:2d:c1:0b:27:
a2:26:ea:28:42:93:1b:73:b7:50:6d:6a:1b:2f:18:82:3b:3f:
30:ec:84:c5:3d:90:85:87:82:7d:1c:95:af:cc:97:86:ba:2f:
19:96:d6:ed:0b:ee:c0:5e:7b:ca:7b:cf:ba:72:1d:57:58:30:
ff:d9:60:6d:6e:89:ac:69:1b:24:9e:dd:65:af:e3:41:f9:e0:
f5:a8:cb:d4:b5:de:08:71:fc:f9:69:a9:e8:05:88:72:3d:d2:
67:fe:ae:36:fc:89:52:04:a5:c2:7d:99:13:65:df:06:28:60:
ea:40:41:8f:8e:cf:06:3a:7f:c4:d3:8c:a5:97:1c:96:8c:5a:
1d:54:21:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:08 2024 by rpki-client on console-ams.rpki-client.org