Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/66d980-d817-41cb-a03d-4354c47889b7/1/Ruq09IUnXu5I0gMhF_OTrAoWa50.roa
File: Ruq09IUnXu5I0gMhF_OTrAoWa50.roa (raw, json)
Hash identifier: 9ZP6Qm9tmVU+yF1B1d29XBaqRK2bhRZeplaNFatKJog=
Subject key identifier: 46:EA:B4:F4:85:27:5E:EE:48:D2:03:21:17:F3:93:AC:0A:16:6B:9D
Certificate issuer: /CN=b18b79133b3b0a11d52d99e1b7c172207fe4578c
Certificate serial: 018434BD46CB8BDA401B0A495FF14384C39A
Authority key identifier: B1:8B:79:13:3B:3B:0A:11:D5:2D:99:E1:B7:C1:72:20:7F:E4:57:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYt5Ezs7ChHVLZnht8FyIH_kV4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/66d980-d817-41cb-a03d-4354c47889b7/1/Ruq09IUnXu5I0gMhF_OTrAoWa50.roa
Signing time: Tue 01 Nov 2022 19:48:50 +0000
ROA not before: Tue 01 Nov 2022 19:48:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48551
IP address blocks: 45.150.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:34:bd:46:cb:8b:da:40:1b:0a:49:5f:f1:43:84:c3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b18b79133b3b0a11d52d99e1b7c172207fe4578c
Validity
Not Before: Nov 1 19:48:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46eab4f485275eee48d2032117f393ac0a166b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:73:b3:e7:7c:44:65:a6:9b:39:26:e9:43:96:
d8:63:72:7f:47:f1:51:df:0e:7b:f9:8a:46:87:fc:
9d:7d:c5:c8:56:e3:6a:a3:f9:c8:a9:fe:fe:98:c9:
3e:b5:3d:2d:f2:7e:dc:64:1e:13:b7:4c:08:30:c3:
97:fe:d3:c5:fa:cc:35:ba:b5:a6:de:62:1f:99:33:
12:6c:90:07:7d:ab:93:3c:d8:e6:64:ba:d3:d6:29:
5b:97:54:f8:b9:33:36:6b:c2:72:37:82:2e:73:f3:
f3:47:e5:9c:09:a3:47:38:7e:02:dd:7a:26:05:a7:
e3:51:d7:e7:8c:9e:1d:c1:0e:e1:e3:ac:9d:d5:f6:
18:07:4d:9a:03:7f:42:6d:15:0d:2d:a7:25:22:45:
3d:28:fc:1f:ec:a3:88:9e:32:33:13:b2:4f:df:af:
ea:94:7b:2d:e8:13:67:ec:d3:3a:d6:39:54:33:b5:
ac:73:28:f6:69:1c:81:5d:cf:58:bb:56:12:6f:0b:
1c:f3:ee:eb:13:c2:61:d3:0e:0c:e2:71:40:6c:41:
c2:7b:cb:78:5c:fe:14:89:3f:42:2e:c7:a3:24:3d:
1a:36:7a:d5:d4:95:eb:e1:58:81:e3:1c:1f:1e:b6:
1e:72:c2:6c:30:3b:2b:b3:37:a8:9a:02:73:f5:f4:
e4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:EA:B4:F4:85:27:5E:EE:48:D2:03:21:17:F3:93:AC:0A:16:6B:9D
X509v3 Authority Key Identifier:
keyid:B1:8B:79:13:3B:3B:0A:11:D5:2D:99:E1:B7:C1:72:20:7F:E4:57:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYt5Ezs7ChHVLZnht8FyIH_kV4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/66d980-d817-41cb-a03d-4354c47889b7/1/Ruq09IUnXu5I0gMhF_OTrAoWa50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/66d980-d817-41cb-a03d-4354c47889b7/1/sYt5Ezs7ChHVLZnht8FyIH_kV4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.150.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:36:26:f2:d8:f0:af:2f:fd:62:f5:80:02:c5:6e:6c:2a:ea:
e2:23:3b:90:88:61:7b:ca:06:f9:a1:3e:49:1b:a5:ff:e6:96:
4d:1e:db:64:64:ea:8b:b2:09:1b:f2:58:fa:46:44:ad:ed:63:
91:c6:ec:76:02:52:a1:52:d5:67:81:a9:77:40:f9:90:cc:c1:
af:36:06:61:7f:e0:a9:a7:63:10:2b:f8:42:09:b3:eb:60:be:
64:98:9c:c4:10:3a:68:1c:fa:58:ac:6a:71:97:72:ac:57:80:
02:3f:cc:f4:56:b1:44:1e:34:88:c6:b5:01:9e:6e:b7:1a:cb:
e6:8b:4a:c2:e4:36:0d:15:b3:7c:1d:49:47:18:f2:f5:ce:45:
39:f8:24:1a:a2:a9:ca:7d:1b:6b:51:9b:40:50:bc:03:64:be:
ca:75:30:90:19:0a:67:0d:78:1e:e7:e7:c4:cd:37:e5:f2:80:
0e:6d:75:4a:98:f4:84:58:a0:5b:8d:c3:dc:1f:46:5d:33:44:
26:13:0b:4e:ee:8f:39:23:4b:7d:4d:fa:da:a2:86:e2:94:82:
9e:05:eb:39:b0:dc:01:e1:e6:75:22:93:3b:df:85:c9:34:3f:
35:f6:6e:7c:f6:03:a6:f5:60:50:87:b3:ef:8e:cb:8e:ff:6f:
25:bd:76:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:50 2024 by rpki-client on console-fra.rpki-client.org