Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/ukwP9VM69R-TNWl8RzRgO2ahmUw.roa
File: ukwP9VM69R-TNWl8RzRgO2ahmUw.roa (raw, json)
Hash identifier: +XH/CFO6pKx3xNcGC86DHjfPGxZFZY566KWFZ4SAIJo=
Subject key identifier: BA:4C:0F:F5:53:3A:F5:1F:93:35:69:7C:47:34:60:3B:66:A1:99:4C
Certificate issuer: /CN=32316cd4881562da3bf3925b4918b6e11d76514c
Certificate serial: 011751
Authority key identifier: 32:31:6C:D4:88:15:62:DA:3B:F3:92:5B:49:18:B6:E1:1D:76:51:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MjFs1IgVYto785JbSRi24R12UUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/ukwP9VM69R-TNWl8RzRgO2ahmUw.roa
Signing time: Thu 17 Mar 2022 19:47:04 +0000
ROA not before: Thu 17 Mar 2022 19:47:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49397
IP address blocks: 45.81.180.0/24 maxlen: 24
45.81.180.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71505 (0x11751)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32316cd4881562da3bf3925b4918b6e11d76514c
Validity
Not Before: Mar 17 19:47:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ba4c0ff5533af51f9335697c4734603b66a1994c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:7a:b6:ae:21:95:f9:fa:41:2d:a1:b3:e5:c9:
f5:52:79:2b:98:12:54:9a:9f:95:87:5a:a5:82:75:
bb:5b:f8:69:32:00:ca:a4:87:c3:94:3c:74:3e:72:
44:95:98:fc:24:16:4e:fb:81:02:a7:7a:84:d4:c0:
83:95:4b:09:56:ad:c8:fa:0a:04:f2:71:6a:b4:fd:
09:87:1f:1c:94:0b:bc:d1:8e:ed:98:75:b3:59:2a:
58:e0:f7:f2:5d:08:db:0d:50:40:0b:f5:43:8d:2d:
a6:10:9c:4e:37:6b:2a:84:9a:70:bf:3b:2a:4c:02:
d1:8c:5d:84:17:c1:2b:c1:3e:a5:48:aa:e5:4a:2d:
ce:ba:d0:a8:73:bc:fa:df:97:0f:f1:5e:7a:40:c8:
73:0c:40:19:c6:af:eb:cb:64:2e:85:96:df:70:f5:
85:2f:20:98:ea:c0:34:60:44:9b:93:96:f4:f6:b1:
d4:6a:59:d8:22:73:13:bf:94:70:d8:ca:9c:b3:d3:
4e:b9:8e:4f:d3:27:44:ec:b3:7e:af:76:74:83:b2:
a8:34:75:41:4a:d8:b7:0a:a7:cc:6e:77:fa:bd:f5:
cd:38:ae:99:f1:de:83:26:e5:ba:97:99:70:f2:cb:
34:9e:86:1d:f7:ff:01:a5:d0:12:76:3e:68:be:cb:
49:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:4C:0F:F5:53:3A:F5:1F:93:35:69:7C:47:34:60:3B:66:A1:99:4C
X509v3 Authority Key Identifier:
keyid:32:31:6C:D4:88:15:62:DA:3B:F3:92:5B:49:18:B6:E1:1D:76:51:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MjFs1IgVYto785JbSRi24R12UUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/ukwP9VM69R-TNWl8RzRgO2ahmUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/f0358f-0d50-4704-85cf-262da883c8e2/1/MjFs1IgVYto785JbSRi24R12UUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.180.0/22
Signature Algorithm: sha256WithRSAEncryption
03:74:a4:ee:9f:ca:fe:fa:03:15:6b:33:06:96:af:71:ad:c6:
03:00:34:ef:3d:c4:89:fe:b6:6d:3c:db:a3:ec:32:33:96:22:
15:05:03:76:44:b8:46:b3:f4:82:2c:6e:fd:a0:1d:97:f8:48:
23:23:aa:44:1a:b4:47:fe:d0:cf:60:ea:7f:b4:34:76:2f:e9:
0b:06:93:19:ac:a5:29:28:e5:a4:7b:59:ab:2a:8d:4d:cf:3c:
14:90:80:5d:11:68:ee:ad:5f:19:6f:20:f0:8c:75:99:b3:bc:
53:51:76:50:d1:e3:a3:ed:94:bb:76:41:09:23:94:b6:62:7c:
84:a4:62:65:44:c7:1f:b4:5a:6a:cf:f1:2a:e9:00:84:29:c2:
b6:90:1c:f2:ff:c3:b3:66:56:0f:18:be:c8:51:15:39:4b:dd:
26:4e:f2:1e:b6:0c:67:53:d3:fe:22:b9:fc:6b:80:41:cb:3d:
92:6c:04:c8:76:da:05:05:d9:b6:81:a8:46:a6:71:83:51:67:
6f:fb:0d:32:0a:6c:b6:70:71:95:90:aa:51:27:69:7e:f1:b3:
26:0a:8d:9f:9d:87:d4:2b:7f:7a:6c:68:a6:e1:0a:ba:11:22:
dc:8f:63:ec:02:65:80:a1:71:d6:b4:e8:b3:53:0c:f0:b1:d4:
dd:75:98:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:59 2024 by rpki-client on console-fra.rpki-client.org