Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/gaItbPlRwpXEXKLJ9RkLqi4gioo.roa
File: gaItbPlRwpXEXKLJ9RkLqi4gioo.roa (raw, json)
Hash identifier: goicBW6U9ukk/d3Kdv2zx1BeopsQbwLo0+bziNg/5p8=
Subject key identifier: 81:A2:2D:6C:F9:51:C2:95:C4:5C:A2:C9:F5:19:0B:AA:2E:20:8A:8A
Certificate issuer: /CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Certificate serial: 079BCF8C
Authority key identifier: 48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/gaItbPlRwpXEXKLJ9RkLqi4gioo.roa
Signing time: Sat 01 Jan 2022 12:04:38 +0000
ROA not before: Sat 01 Jan 2022 12:04:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43402
IP address blocks: 45.150.12.0/22 maxlen: 24
2a0f:8a00::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127651724 (0x79bcf8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Validity
Not Before: Jan 1 12:04:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=81a22d6cf951c295c45ca2c9f5190baa2e208a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cc:32:52:ad:dc:d4:a1:75:54:70:df:85:f7:
d1:de:08:1a:a7:05:a0:72:ce:76:8b:6e:2e:ec:3b:
e8:20:f1:54:2b:9b:14:8a:39:78:3c:29:c2:ea:aa:
5a:1a:48:29:f1:11:fc:c3:6f:b6:c7:ee:0e:cc:00:
e2:29:5a:65:39:a0:c5:51:cb:a7:bf:eb:66:d2:9f:
6a:f4:7a:a3:6a:e2:9a:d0:8e:d6:db:28:de:b2:f8:
19:4d:18:56:4b:59:a8:39:f7:56:85:da:07:f3:61:
0a:86:8e:df:bc:b3:a7:61:8b:49:97:2a:46:32:ed:
2c:05:0a:a7:8c:39:48:86:9e:5b:76:2c:7d:7c:12:
50:4e:f1:8d:d4:fe:16:64:cd:bf:83:1a:ab:e6:b3:
ee:c4:c9:29:bc:2f:0d:ec:45:dc:7b:94:7b:0f:16:
3c:e6:65:8a:28:b6:64:2d:7b:f0:72:4f:7b:0b:fe:
25:67:4d:0e:66:dc:1e:df:d8:5e:98:41:1b:e3:f6:
e6:44:ad:06:03:dc:cc:6d:23:b2:80:07:fc:6a:fa:
7b:d5:c9:82:aa:da:d4:63:52:84:c0:75:18:45:92:
d4:c7:a8:2d:09:66:16:60:9c:04:fb:6e:98:4e:e8:
c3:4c:8e:8f:60:32:49:65:3c:fd:c9:cb:08:63:e4:
b7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:A2:2D:6C:F9:51:C2:95:C4:5C:A2:C9:F5:19:0B:AA:2E:20:8A:8A
X509v3 Authority Key Identifier:
keyid:48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/gaItbPlRwpXEXKLJ9RkLqi4gioo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.12.0/22
IPv6:
2a0f:8a00::/29
Signature Algorithm: sha256WithRSAEncryption
ce:12:92:41:ee:bd:1e:76:7f:8d:c1:36:b6:b9:e0:95:d3:af:
65:92:16:67:10:9d:5f:df:33:a1:8e:8a:34:9f:da:90:6c:2f:
69:63:31:52:af:8b:9f:69:a3:7f:fa:ba:13:93:f5:46:c4:f5:
87:8d:ab:57:c9:e7:8d:cf:26:82:2d:a5:00:9a:dc:67:0c:0b:
15:96:ee:25:2f:33:7f:e0:b0:f6:7a:c8:ec:30:51:bf:53:a4:
24:b3:2b:de:2e:2d:46:86:22:c7:57:3b:f9:31:43:eb:8d:1c:
4b:1b:6a:4a:01:f6:4e:3d:62:10:bc:ab:e4:aa:9d:1a:36:74:
34:a2:d1:50:d9:99:b2:aa:09:b6:61:cf:45:94:0e:51:4a:aa:
2e:61:a5:3b:4c:b6:ad:b4:81:6d:c1:72:f5:a0:f8:df:5b:fa:
3f:a9:c0:be:6c:36:8b:75:a6:fc:b9:50:29:55:90:61:b3:1b:
53:c5:a4:14:11:05:d7:ec:54:64:e7:85:b0:44:0f:93:94:e8:
cf:e0:a0:42:b0:ed:22:02:c2:c7:53:5b:5b:fa:e7:04:2c:90:
19:47:98:56:40:34:4e:74:9a:b2:66:a5:8e:ae:3c:d2:c8:31:
7a:69:63:1f:20:3e:40:23:60:a7:fc:07:72:63:11:2f:4c:be:
39:fe:59:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:51 2024 by rpki-client on console-fra.rpki-client.org