Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/1TZa4dk9AWm3NN-SV7xX-8Ud-ZA.roa
File: 1TZa4dk9AWm3NN-SV7xX-8Ud-ZA.roa (raw, json)
Hash identifier: UBZ0rCpGGHc4BhoC3N35Mmnp/+QClIlFE1f1VuVYaZM=
Subject key identifier: D5:36:5A:E1:D9:3D:01:69:B7:34:DF:92:57:BC:57:FB:C5:1D:F9:90
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 0182261D8318CE09F8BD7FC501C54EAF131B
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/1TZa4dk9AWm3NN-SV7xX-8Ud-ZA.roa
Signing time: Fri 22 Jul 2022 13:34:04 +0000
ROA not before: Fri 22 Jul 2022 13:34:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43431
IP address blocks: 45.13.136.0/24 maxlen: 24
2a0e:eb00:1::/48 maxlen: 48
2a0b:1784::/30 maxlen: 30
2a0b:1780::/30 maxlen: 30
2a0e:eb00::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:26:1d:83:18:ce:09:f8:bd:7f:c5:01:c5:4e:af:13:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Jul 22 13:34:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5365ae1d93d0169b734df9257bc57fbc51df990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f1:1d:4a:9a:6d:91:29:e0:05:40:9a:30:c3:
4a:25:83:6e:07:a5:46:9a:e4:72:cd:37:e8:be:28:
15:5e:33:a0:8d:9a:92:7f:56:f6:33:2e:54:bc:42:
07:33:ba:87:75:32:cf:5b:65:79:26:83:f0:13:17:
df:00:09:26:58:6e:cd:20:26:1d:87:8d:a0:ea:57:
81:58:f2:f0:bf:5a:60:11:64:82:a5:cc:e9:ba:6b:
f1:9c:0d:37:9b:58:d4:9c:35:57:68:f6:84:3e:91:
49:a1:4d:97:ab:a3:59:e1:ec:6e:3f:ff:39:12:70:
ba:2b:72:4b:db:95:43:ed:30:37:1a:72:38:61:36:
68:c8:4b:d6:ae:81:08:42:f8:d4:06:33:d9:f8:99:
4e:af:50:08:b4:af:fb:a1:b9:94:02:ab:5e:eb:23:
8c:79:cf:be:7d:74:74:ab:c1:95:34:57:42:b8:d8:
79:c4:d0:7c:5c:79:8e:89:14:0a:94:6a:5f:19:b2:
39:b5:19:ca:71:ba:52:99:ad:af:7d:6b:f1:17:09:
fb:60:47:5e:81:e4:66:f2:d2:cc:72:01:a9:87:5e:
ed:1c:11:7b:0f:39:80:b1:a9:73:b7:1c:4f:1e:fa:
86:97:88:03:52:99:ec:0c:97:aa:61:77:f2:49:68:
eb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:36:5A:E1:D9:3D:01:69:B7:34:DF:92:57:BC:57:FB:C5:1D:F9:90
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/1TZa4dk9AWm3NN-SV7xX-8Ud-ZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.136.0/24
IPv6:
2a0b:1780::/29
2a0e:eb00::/47
Signature Algorithm: sha256WithRSAEncryption
6f:00:e2:d7:80:97:2d:7d:eb:ef:94:3d:4b:ff:9b:26:51:ce:
cd:81:13:89:0c:1e:62:f8:b6:2f:e9:bd:2e:fc:1d:df:6d:ca:
f2:ff:09:16:2c:7c:5e:62:56:ff:50:72:e7:51:70:32:68:53:
28:77:69:ad:3f:32:cb:fc:11:e4:71:47:c7:fc:84:7f:c4:95:
a3:ec:7d:5f:d6:cb:37:52:da:b5:12:e9:7c:f3:a3:8a:54:fb:
09:26:aa:4c:fc:6c:3a:98:44:4b:11:7b:3a:fd:70:01:80:73:
80:78:e1:28:dc:8a:a6:67:42:37:d3:cd:0e:d2:a8:42:4b:c3:
d8:1f:51:bf:f6:9e:e0:57:d1:73:a6:d6:f7:55:1c:df:ac:f6:
15:00:9b:fe:33:ee:cc:2b:05:3e:c1:ef:90:0a:9c:ba:0b:87:
cc:b5:21:a2:1a:a8:43:9f:e8:db:66:8c:c6:6c:49:99:20:b9:
84:5e:ce:41:f3:a0:3c:ba:5f:49:29:b2:28:3f:48:91:47:fe:
cf:30:0a:59:5d:bf:03:c7:36:23:eb:47:72:bb:96:83:c4:9b:
43:ea:83:7c:be:19:d7:01:17:76:63:01:66:df:54:85:f3:3c:
37:0b:80:c9:5c:7d:7d:e0:b0:9e:89:16:69:ce:b4:1b:f9:ba:
0c:48:6a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:08 2024 by rpki-client on console-ams.rpki-client.org