Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/LsblT9JsNI_VDPKTlevA-SRAUoc.roa
File: LsblT9JsNI_VDPKTlevA-SRAUoc.roa (raw, json)
Hash identifier: D0aUOgRd/mtxSk2vjCTLVLGoAtVuYagryMBYvdAtMDU=
Subject key identifier: 2E:C6:E5:4F:D2:6C:34:8F:D5:0C:F2:93:95:EB:C0:F9:24:40:52:87
Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial: 08802FC3
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/LsblT9JsNI_VDPKTlevA-SRAUoc.roa
Signing time: Mon 14 Mar 2022 23:01:54 +0000
ROA not before: Mon 14 Mar 2022 23:01:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44592
IP address blocks: 45.155.76.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142618563 (0x8802fc3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Validity
Not Before: Mar 14 23:01:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ec6e54fd26c348fd50cf29395ebc0f924405287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f6:c8:71:cc:d1:53:7a:ab:a9:16:9c:e8:58:
2b:ec:ef:85:ec:37:f5:20:e5:58:d1:66:67:e7:a0:
76:eb:5f:b3:5e:72:c3:94:a0:88:9e:02:42:20:30:
c5:02:01:9a:c4:85:ed:75:7d:e3:8f:ff:11:0d:cc:
5c:01:b3:5a:ff:53:68:6a:e2:e3:87:91:bc:8e:d9:
b2:9a:af:b1:3c:50:f1:92:f8:88:f1:a1:30:59:d3:
3a:b1:9c:06:cd:d2:61:96:11:cd:6d:44:8b:6f:1d:
4e:12:9b:b2:aa:ba:20:e9:64:b3:6a:29:95:24:e5:
eb:a7:72:43:10:89:74:41:98:ba:17:92:ca:b0:32:
35:44:4b:4e:c6:c0:ab:de:b6:3f:56:4b:2b:ff:ad:
6a:71:bf:f9:42:4c:ce:3d:0a:5c:9f:d8:e4:e6:f8:
f0:a5:db:0a:29:ca:34:50:2e:52:e9:e5:14:b8:68:
fc:61:df:79:6f:fd:52:b1:69:aa:b0:39:7c:b3:c9:
1f:ef:de:de:1b:9c:75:b5:bb:1d:28:e6:91:b8:22:
ff:d0:64:f3:8c:31:a4:92:d0:24:ea:37:d5:db:67:
f1:6b:14:e6:a3:f7:2b:a9:b5:5a:a5:e6:34:ed:eb:
d3:c6:05:5e:2d:b6:97:09:4c:8e:6b:d5:ec:cd:a9:
34:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C6:E5:4F:D2:6C:34:8F:D5:0C:F2:93:95:EB:C0:F9:24:40:52:87
X509v3 Authority Key Identifier:
keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/LsblT9JsNI_VDPKTlevA-SRAUoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.76.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:1b:4e:17:b9:35:8d:4a:07:63:9d:14:f8:7c:3c:23:6c:07:
0a:0f:af:c7:92:3d:36:01:72:9c:15:b5:9c:36:a2:44:19:43:
1f:2c:d3:71:21:34:c7:e1:56:53:e6:2a:f4:74:3a:b7:c2:d8:
95:a2:b6:8f:ab:75:62:6b:6d:0d:fb:75:65:0a:22:e6:27:ea:
02:75:56:bd:a5:07:dd:fd:e9:0f:4a:97:71:f4:47:15:b1:d4:
ef:68:ff:f6:f1:a1:3c:94:77:9c:b0:d0:11:7d:56:3d:6d:31:
9b:14:90:49:99:6b:2d:ab:22:12:5a:49:03:e6:5d:39:0a:28:
4b:07:15:4d:52:ee:79:54:51:07:bd:f5:b7:6e:71:78:4f:da:
30:8e:bb:74:09:bc:10:4a:90:71:44:e0:47:03:5d:b3:49:ff:
af:0c:0d:30:f2:d2:b2:06:1d:1d:94:b8:43:d3:bd:10:05:7c:
42:d2:e0:60:0f:e3:a6:ca:50:25:aa:c3:83:9d:a8:33:cf:60:
8d:2c:45:08:1f:8e:ee:eb:41:6d:56:23:ff:0f:15:68:61:f8:
78:b4:50:60:30:0c:99:d3:c1:df:62:fb:8b:be:7c:41:d9:56:
bf:34:a2:6a:e7:19:7b:7b:95:b8:9b:6d:81:0e:ae:30:ef:27:
33:29:e4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:06 2023 by rpki-client on console-fra.rpki-client.org