Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/eMHIEHnetbLHRlW5RCc_Kv2GMWU.roa
File: eMHIEHnetbLHRlW5RCc_Kv2GMWU.roa (raw, json)
Hash identifier: uTQPHVTU/n3Bae/uLTy5PiQLzi6CZdz1UkiPhJ3dBQU=
Subject key identifier: 78:C1:C8:10:79:DE:B5:B2:C7:46:55:B9:44:27:3F:2A:FD:86:31:65
Certificate issuer: /CN=b960b14746c5875244ae3b694162ec6d8c63255e
Certificate serial: 07B38DBC
Authority key identifier: B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/eMHIEHnetbLHRlW5RCc_Kv2GMWU.roa
Signing time: Sat 01 Jan 2022 07:53:39 +0000
ROA not before: Sat 01 Jan 2022 07:53:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208390
IP address blocks: 45.135.209.0/24 maxlen: 24
45.135.208.0/24 maxlen: 24
45.135.208.0/22 maxlen: 22
2a0e:8ec0::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129207740 (0x7b38dbc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b960b14746c5875244ae3b694162ec6d8c63255e
Validity
Not Before: Jan 1 07:53:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=78c1c81079deb5b2c74655b944273f2afd863165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:53:53:eb:f7:c7:dd:60:f2:7a:1f:3e:1e:a2:
92:e0:e0:02:80:33:1c:88:24:86:32:57:76:ba:ac:
6b:31:dd:34:c3:6a:e2:1b:ec:fd:e5:9c:8e:4e:8b:
49:60:09:ce:7c:ed:40:b7:4d:a2:94:45:44:c0:14:
8e:24:2c:00:f5:99:68:8a:17:00:76:06:b5:e9:d3:
72:fd:32:93:0f:89:a6:0d:e3:dd:44:0e:f7:9d:5b:
56:5e:17:32:96:e8:c6:6b:c6:93:16:29:a4:a8:fb:
f4:b2:44:2f:00:30:c0:b6:d9:f5:78:46:81:c1:87:
51:46:cb:2a:59:0e:ff:ad:8e:66:69:08:b8:5c:43:
bc:02:eb:0a:71:38:cb:79:2c:33:ec:41:57:53:f9:
be:a7:a5:b9:8e:7c:0d:9d:d7:f2:87:f7:d1:7d:ca:
ae:f5:35:ba:bf:e3:b7:d7:f3:c7:55:d8:3d:e7:e0:
ae:ec:96:7d:a6:55:bd:8e:1b:2a:11:f5:c8:4d:dd:
6d:29:00:f8:ec:c3:ce:b8:d1:57:13:95:ce:c8:13:
08:fd:a1:2b:10:c3:2f:70:c7:ad:aa:0b:c5:72:41:
00:12:44:98:18:91:e5:0b:61:04:06:2e:4d:99:68:
c1:f1:ad:f6:2b:fc:5a:e7:ed:41:53:5b:c0:15:15:
60:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C1:C8:10:79:DE:B5:B2:C7:46:55:B9:44:27:3F:2A:FD:86:31:65
X509v3 Authority Key Identifier:
keyid:B9:60:B1:47:46:C5:87:52:44:AE:3B:69:41:62:EC:6D:8C:63:25:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uWCxR0bFh1JErjtpQWLsbYxjJV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/eMHIEHnetbLHRlW5RCc_Kv2GMWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/458078-426e-4449-a2a9-18882a2809b2/1/uWCxR0bFh1JErjtpQWLsbYxjJV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.208.0/22
IPv6:
2a0e:8ec0::/29
Signature Algorithm: sha256WithRSAEncryption
54:c1:95:6d:78:cf:9f:81:66:01:6f:11:b7:e9:da:63:1d:d2:
89:80:03:5f:a2:f2:de:21:40:54:96:3a:a3:0b:07:0d:8e:81:
fa:94:e1:55:3f:f8:ea:ef:af:3e:c8:39:7a:de:66:26:fa:e6:
6b:84:4a:88:a9:e3:91:1b:75:10:2a:b2:0c:eb:b4:e7:51:e1:
66:00:10:c7:6a:76:5a:08:9c:d9:fa:b2:b9:2e:2f:1b:b2:ec:
b0:35:22:00:b0:76:cb:b2:4f:35:96:59:35:92:54:76:c2:ac:
8d:e6:7d:9b:c4:c0:15:d2:97:b9:36:56:0b:13:09:d0:87:53:
81:32:80:db:8a:0a:21:98:8d:f7:bc:97:80:9f:85:bc:17:bf:
52:32:e8:bf:17:ed:12:3a:2e:c5:3c:75:58:72:d8:20:94:81:
1d:2d:7c:75:12:34:38:bc:97:9a:61:d3:37:99:4b:3b:8f:5e:
45:d6:c5:78:76:73:f6:f5:b3:30:33:ae:d5:6d:d6:a0:4f:9d:
ce:8b:91:bf:96:f2:09:c4:c6:16:94:89:ea:bf:ba:3d:fc:e6:
f9:88:80:d5:6d:23:24:e2:2d:d3:a6:cc:f5:5b:ac:ab:c4:53:
7d:7b:34:13:34:25:84:70:f9:54:e8:9b:39:44:27:b3:d9:9a:
14:59:98:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:41 2024 by rpki-client on console-ams.rpki-client.org