Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/Na6_IWx2caJHzC1yTlIG5phMZk8.roa
File: Na6_IWx2caJHzC1yTlIG5phMZk8.roa (raw, json)
Hash identifier: 4EfU/8hJW52nOxRBBvD0AXyiO5i5m6YH+OWjq09SZ6Q=
Subject key identifier: 35:AE:BF:21:6C:76:71:A2:47:CC:2D:72:4E:52:06:E6:98:4C:66:4F
Certificate issuer: /CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Certificate serial: 072FF03B
Authority key identifier: 94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/Na6_IWx2caJHzC1yTlIG5phMZk8.roa
Signing time: Sat 01 Jan 2022 13:02:28 +0000
ROA not before: Sat 01 Jan 2022 13:02:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39246
IP address blocks: 45.15.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120582203 (0x72ff03b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=940a10a256728f11a4bbaadc3204b7f0a35a5000
Validity
Not Before: Jan 1 13:02:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35aebf216c7671a247cc2d724e5206e6984c664f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b1:90:cc:3f:3c:4d:87:39:5d:fd:c4:aa:14:
6a:99:aa:8d:d8:d1:9f:84:9d:bd:3b:17:d8:49:aa:
38:bc:04:f6:5b:04:df:b5:7a:e3:93:ea:c4:95:a1:
c5:ab:54:0e:b2:44:2d:12:3c:57:4a:06:56:54:54:
f0:bb:35:bf:05:d7:35:ce:7a:a8:3f:f3:1b:d4:fd:
2b:a6:d4:a8:5c:03:c7:f5:89:02:43:91:27:be:6c:
5c:92:12:b9:44:b1:c5:9d:a5:37:f9:b4:23:35:6f:
c9:d6:9a:48:b4:44:50:06:d6:fe:de:dc:06:8b:1a:
4f:e0:3b:69:d3:fa:11:2a:0c:bc:f1:01:ab:7a:65:
40:c4:03:be:e3:57:b0:f0:bb:c2:ce:e5:e6:a2:7e:
48:e0:d8:77:68:f8:93:f0:4b:6a:24:62:a6:14:48:
96:41:f9:1f:fc:ee:0e:f6:85:3b:26:19:bc:73:3f:
55:de:ca:93:2f:4b:66:1e:0e:e6:c9:f5:5f:eb:63:
1e:1b:19:78:65:12:ca:38:03:62:a3:1f:8b:42:77:
8e:fa:19:d9:af:4c:ec:a3:e2:36:c5:32:41:f0:bc:
9e:90:97:b7:b1:a1:32:b4:0f:4d:c4:37:fe:b9:5f:
44:ac:f1:4e:cf:67:88:81:ce:12:bc:88:02:2d:74:
fb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:AE:BF:21:6C:76:71:A2:47:CC:2D:72:4E:52:06:E6:98:4C:66:4F
X509v3 Authority Key Identifier:
keyid:94:0A:10:A2:56:72:8F:11:A4:BB:AA:DC:32:04:B7:F0:A3:5A:50:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lAoQolZyjxGku6rcMgS38KNaUAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/Na6_IWx2caJHzC1yTlIG5phMZk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/a1ae75-2d6b-4cc6-acef-dce6d6909247/1/lAoQolZyjxGku6rcMgS38KNaUAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.183.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:d9:3c:a6:05:bc:55:0e:a2:7d:76:7a:9d:9e:48:71:24:ed:
ff:ca:76:c4:5f:f7:65:7d:94:e2:bb:b5:31:5b:1c:6e:2e:1c:
8a:8c:41:84:99:b6:ec:d5:a2:a5:fe:39:cd:4e:70:e6:35:65:
b2:08:ea:90:1c:a3:52:f1:f4:e8:62:6b:09:25:7d:8d:21:f1:
bc:b7:e2:11:33:61:9f:e5:11:0b:71:df:04:1a:3e:03:76:4e:
9e:c4:50:42:60:f8:57:ea:43:cb:ed:d9:6b:97:7d:5c:a5:94:
ea:52:18:44:e2:25:a5:59:25:63:24:db:60:d0:f4:9f:a0:53:
76:49:05:15:98:17:a6:99:dd:e8:9b:53:b0:25:b3:c7:dc:15:
49:d8:fd:0f:a0:a1:3e:c6:8b:26:27:3b:4e:35:12:61:d4:7e:
24:89:29:8d:ac:b0:ce:f1:d4:7e:90:36:f2:48:01:33:c5:7b:
a8:71:ae:fd:43:68:23:3a:92:26:14:b6:c7:be:8b:db:ae:8a:
3d:cc:25:a0:b8:b4:a1:43:d3:71:19:bd:05:26:c8:c8:38:32:
39:2f:b6:ba:32:df:35:69:fb:90:ee:87:6d:6a:d8:55:4d:4d:
b6:15:8b:8d:f0:0d:09:fe:a0:63:62:d0:08:1c:81:eb:a8:c6:
cc:93:2e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:08 2025 by rpki-client