Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/P0zonO5lLbzja-slT2rmjyFbvEo.roa
File: P0zonO5lLbzja-slT2rmjyFbvEo.roa (raw, json)
Hash identifier: WFA/BBUbmOdMV82MV0OekqVpRhS6e1H0Bp3c55J0Rc0=
Subject key identifier: 3F:4C:E8:9C:EE:65:2D:BC:E3:6B:EB:25:4F:6A:E6:8F:21:5B:BC:4A
Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Certificate serial: 07D9C2C7
Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/P0zonO5lLbzja-slT2rmjyFbvEo.roa
Signing time: Sat 01 Jan 2022 10:57:01 +0000
ROA not before: Sat 01 Jan 2022 10:57:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208393
IP address blocks: 45.141.52.0/24 maxlen: 24
2a05:4741:f::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131711687 (0x7d9c2c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f
Validity
Not Before: Jan 1 10:57:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f4ce89cee652dbce36beb254f6ae68f215bbc4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c5:3a:e0:bb:9e:e8:35:7a:9e:d1:d3:a2:0d:
ff:e6:8e:3c:a8:ce:ec:2d:54:3c:fc:d3:bf:bd:3f:
83:7a:93:d4:75:83:96:9a:9e:5f:c5:56:7b:4f:7c:
0d:9e:47:68:bd:60:74:a3:7a:44:86:2d:3c:2c:76:
ba:03:63:d3:d1:c5:a4:13:a7:3b:06:86:80:b8:8e:
cc:d5:52:7d:92:df:84:26:ed:2e:7b:8a:a8:b4:81:
f4:45:a7:c7:76:41:fe:28:11:eb:2c:d8:b7:03:5e:
8f:f0:c2:ae:34:bc:98:3c:e2:9c:3a:1d:74:7e:98:
90:0e:08:a6:d1:00:4c:73:62:01:6d:da:86:f5:53:
f4:7c:11:ee:5a:21:bb:b2:27:6f:96:6e:9c:d3:ca:
0d:ce:02:b1:a1:f1:5a:e5:78:02:87:88:59:67:4a:
b0:d4:92:2d:3f:4b:1e:dc:32:5d:23:58:d6:6b:f1:
9e:ba:aa:60:43:c8:60:75:b6:a7:c1:31:ec:fe:e1:
0a:91:6d:09:0b:5d:1e:a1:0d:12:ba:a8:bb:e2:7f:
58:49:e9:dc:9d:5f:92:f8:a4:c3:32:60:7e:b2:a9:
11:f8:5e:94:79:e3:25:89:1b:71:b2:ba:ee:de:2f:
3a:0e:97:5d:28:b8:1b:7d:78:d1:a0:e0:9d:9d:f6:
6f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:4C:E8:9C:EE:65:2D:BC:E3:6B:EB:25:4F:6A:E6:8F:21:5B:BC:4A
X509v3 Authority Key Identifier:
keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/P0zonO5lLbzja-slT2rmjyFbvEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.52.0/24
IPv6:
2a05:4741:f::/48
Signature Algorithm: sha256WithRSAEncryption
2d:a4:cf:6a:5b:60:53:ee:bc:c3:9a:7a:45:5d:d7:79:78:1c:
b1:65:05:66:dc:a7:f2:e7:ce:b8:96:f6:e0:23:2f:40:28:24:
27:74:e3:a7:5f:08:69:89:f4:1f:cc:f8:93:3c:5c:70:51:9a:
8b:f6:e1:68:7e:41:15:c1:1a:70:06:61:29:b6:4f:fa:e7:a7:
d9:ef:b6:9f:2f:e7:92:4a:bf:36:e2:6b:a7:79:ec:0f:44:aa:
9f:e1:67:1b:e0:b2:d9:ab:76:93:b3:6b:7b:b9:de:a9:5d:d4:
5f:a1:4c:ac:38:b3:bf:91:ed:e1:6d:33:ce:af:7f:0e:13:de:
8e:53:ab:93:2e:a3:59:22:03:3b:5f:1c:68:f4:45:86:7b:6a:
b3:6f:b9:21:4a:2c:0f:17:6a:0b:c7:fb:5d:2e:45:03:fe:16:
3a:6a:c1:30:a1:98:87:52:0f:53:07:18:35:ab:d9:b3:e3:04:
69:97:92:1f:9c:75:92:57:25:28:42:7c:2f:07:ed:bc:da:b0:
e7:ff:4c:70:0b:98:71:db:6e:94:75:99:6c:ac:ee:9f:ef:fb:
d8:03:07:ce:e7:8c:a4:28:23:6d:e5:62:01:5a:b0:91:90:f1:
5f:1d:9e:16:19:4a:62:d7:bc:52:83:dc:02:bc:61:a2:83:18:
fd:75:ad:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:53 2024 by rpki-client on console-fra.rpki-client.org