Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/asmrv2h1xKcXigFQpzcYQEYPbcs.roa
File: asmrv2h1xKcXigFQpzcYQEYPbcs.roa (raw, json)
Hash identifier: eaTbI8AwuDjCi8eFQBPqqmRy03we77kOUDmzKf29b/o=
Subject key identifier: 6A:C9:AB:BF:68:75:C4:A7:17:8A:01:50:A7:37:18:40:46:0F:6D:CB
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 0183359D61C6E086A55EBA5FC606AC24B387
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/asmrv2h1xKcXigFQpzcYQEYPbcs.roa
Signing time: Tue 13 Sep 2022 06:50:49 +0000
ROA not before: Tue 13 Sep 2022 06:50:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60995
IP address blocks: 45.13.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:35:9d:61:c6:e0:86:a5:5e:ba:5f:c6:06:ac:24:b3:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Sep 13 06:50:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6ac9abbf6875c4a7178a0150a7371840460f6dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:d8:0c:78:2e:34:d0:67:18:a5:79:b1:48:8e:
bc:08:d7:fd:ec:f9:c8:d3:a2:89:0a:83:3d:a9:87:
55:e8:2f:81:e0:63:ae:b4:9c:ab:ea:84:bf:76:78:
19:d7:f5:52:91:54:83:66:1c:10:b6:be:d8:4b:44:
c3:ed:5e:e7:b4:75:ca:44:82:dc:81:66:07:73:77:
e9:cc:39:9b:f2:5d:82:1b:66:be:e5:d6:bb:b7:9c:
e7:77:ca:67:c6:a2:fc:87:7f:c9:5f:bf:59:75:9a:
05:c6:a3:a3:05:3d:87:85:95:7b:21:f2:26:2d:ea:
3e:67:3e:cf:7f:a8:bb:aa:ae:90:fd:fb:a7:fd:7e:
b9:8c:00:d6:96:e4:a4:e0:08:b7:00:66:4c:b8:b2:
8b:fe:fa:8f:04:b1:70:f5:b5:73:3c:75:43:a2:2a:
b7:88:8f:57:6c:d6:10:3b:13:46:3d:1a:2e:43:31:
a9:5a:a6:13:27:ae:5e:a5:2f:1c:c0:e6:bc:67:de:
e0:27:1a:65:e5:1f:4d:1a:69:42:e8:60:6f:a2:f5:
92:7f:5b:4d:9d:2f:46:cf:89:e9:28:df:92:35:f9:
32:63:d6:2f:21:e6:32:5a:38:78:10:5a:1f:ab:93:
b8:3d:4f:e1:3c:33:db:21:7e:0e:07:24:c1:1f:56:
3f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:C9:AB:BF:68:75:C4:A7:17:8A:01:50:A7:37:18:40:46:0F:6D:CB
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/asmrv2h1xKcXigFQpzcYQEYPbcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.136.0/24
Signature Algorithm: sha256WithRSAEncryption
79:58:66:bf:88:1b:c3:e8:aa:a0:d3:d4:47:b2:35:cd:3b:a2:
76:ab:70:2e:76:c5:71:33:3b:d5:99:96:b3:0e:93:35:03:83:
3c:14:5f:21:e1:e7:28:4c:82:1e:2e:ba:ef:ef:aa:82:8a:7e:
ed:d0:1f:4f:a8:67:e8:b2:ba:0a:60:60:f9:c8:6c:ec:29:24:
5a:db:08:ea:e2:fc:0f:34:12:f5:40:74:2d:80:ed:c2:ce:54:
74:70:8d:3c:6c:a5:6d:8d:9f:aa:cc:0a:8f:31:94:21:1e:c2:
94:a0:00:ad:67:52:6f:c2:c0:ff:10:b0:e6:a7:92:62:c5:92:
64:6a:2e:86:e3:a2:f6:b8:d9:fd:fa:b0:39:2f:4a:40:a9:72:
cb:73:cf:5c:02:1b:fb:fc:b0:69:71:46:9b:5b:84:5d:72:9d:
a7:f5:73:0e:f4:94:04:e3:e6:df:ed:9a:8d:f4:87:d8:dc:3b:
c3:d7:a3:9c:21:88:c5:31:77:0b:db:66:c8:a7:8f:2a:00:4b:
a3:1e:9d:79:bc:a7:9b:82:46:1b:d4:74:bb:c6:13:27:81:09:
b1:76:91:4e:05:78:16:13:09:18:69:1a:aa:c0:e6:94:a9:91:
a3:23:06:ac:56:6c:ea:6f:2b:ae:bc:6f:2a:3d:de:ed:8d:4e:
0b:9d:2d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:08 2024 by rpki-client on console-ams.rpki-client.org