Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fK6cugg27hrwHDrr15eJHP_QlrY.roa
File: fK6cugg27hrwHDrr15eJHP_QlrY.roa (raw, json)
Hash identifier: hzCfQU5uXMsamP+G5ggKYxt+VFeKv0ALdLmWeoZmh1o=
Subject key identifier: 7C:AE:9C:BA:08:36:EE:1A:F0:1C:3A:EB:D7:97:89:1C:FF:D0:96:B6
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0D489A1E
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fK6cugg27hrwHDrr15eJHP_QlrY.roa
Signing time: Tue 15 Feb 2022 14:51:25 +0000
ROA not before: Tue 15 Feb 2022 14:51:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206150
IP address blocks: 45.130.82.0/24 maxlen: 24
178.239.197.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 222861854 (0xd489a1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 15 14:51:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7cae9cba0836ee1af01c3aebd797891cffd096b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9a:4d:35:0f:04:6e:54:b2:5d:e3:d0:1a:f9:
db:a9:8b:a3:d0:e6:8c:75:a5:cf:e9:b5:a2:0f:07:
62:4e:f3:59:10:5f:c6:e1:54:01:32:85:ff:fc:5f:
b6:83:ab:6c:90:91:97:c5:6d:89:c8:29:ba:ed:27:
5a:42:ae:b3:46:a2:55:f9:15:34:e9:37:f8:16:3f:
4e:08:6d:0c:db:6b:66:10:43:3b:b1:b5:50:1f:01:
82:e6:4a:9b:bf:7f:4a:82:66:d1:e8:25:d0:18:b6:
ba:ea:6a:dd:62:f6:f4:22:4f:20:b8:28:d0:a0:6a:
26:7c:e4:fd:01:6e:97:6d:3c:67:b9:59:2e:0c:cb:
5d:5b:db:9c:d4:a0:9e:2b:74:ff:e5:75:9d:bc:43:
e3:93:f6:e9:c7:02:96:aa:63:6f:36:0f:19:b5:d0:
83:22:b3:1a:0f:16:8e:0a:f2:16:7b:e9:8f:3a:1f:
6a:bc:97:7e:96:8d:4c:3b:0b:93:9d:10:71:ff:a0:
8a:2c:ce:69:70:37:89:f0:e4:ac:01:8e:9c:bc:ee:
ad:b5:cb:1a:01:50:11:7e:ec:55:17:1a:d1:bf:bd:
a6:77:38:3c:47:25:8c:73:92:c7:9d:46:ba:0a:70:
e5:40:32:b8:83:a5:b4:fe:31:b3:b7:ba:f2:5c:0c:
80:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AE:9C:BA:08:36:EE:1A:F0:1C:3A:EB:D7:97:89:1C:FF:D0:96:B6
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/fK6cugg27hrwHDrr15eJHP_QlrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.82.0/24
178.239.197.0/24
Signature Algorithm: sha256WithRSAEncryption
65:6f:aa:74:5e:9a:d1:86:11:ad:05:e4:47:da:01:4d:44:9b:
cb:ea:8a:a2:4a:cb:1e:79:41:d5:ab:a4:e2:7c:52:8c:f2:ea:
b7:09:49:36:bc:90:f3:3a:25:8b:87:52:25:f2:3a:12:77:5d:
1c:c3:ed:66:cb:f7:6c:fc:e4:46:9d:40:4b:3b:ed:48:19:59:
e2:99:fa:98:95:6e:a9:b0:14:5a:1a:8e:e4:6e:7f:98:3b:8b:
3c:c0:d7:20:c5:93:49:4a:02:95:c0:22:06:ef:0b:96:66:fa:
42:54:92:fb:34:ba:59:f2:20:60:b9:36:9e:71:35:0b:56:cc:
1c:21:06:77:4e:b0:19:15:8e:4f:2d:72:68:91:85:38:3d:5c:
6c:5f:c6:c3:5e:77:c7:8e:06:ff:2d:7d:26:f7:62:68:3d:d7:
0f:91:6f:65:30:f0:d2:14:a2:32:90:21:b6:83:70:0c:24:58:
a1:55:fe:99:44:4a:fe:03:8d:c2:d5:62:07:42:91:ac:c5:28:
35:99:e3:a8:43:66:8b:b1:d8:96:19:45:fd:dd:5d:01:2b:f9:
25:d2:e4:02:27:23:b4:85:4a:97:bf:78:e2:66:48:64:ce:23:
c5:58:6a:96:8c:32:40:e6:6f:77:c8:5e:21:d9:e2:d3:6f:7e:
d0:d7:c8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:02 2023 by rpki-client on console-fra.rpki-client.org