Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sSo6JKD82cOpVfhNswezcy87wnw.roa
File: sSo6JKD82cOpVfhNswezcy87wnw.roa (raw, json)
Hash identifier: BdS+mC8VQemCw2NxiZettgYrCntsPvmaujkMyXIcWzs=
Subject key identifier: B1:2A:3A:24:A0:FC:D9:C3:A9:55:F8:4D:B3:07:B3:73:2F:3B:C2:7C
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 0B9BA42C
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sSo6JKD82cOpVfhNswezcy87wnw.roa
Signing time: Wed 04 May 2022 07:25:05 +0000
ROA not before: Wed 04 May 2022 07:25:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60985
IP address blocks: 45.10.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 194749484 (0xb9ba42c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: May 4 07:25:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b12a3a24a0fcd9c3a955f84db307b3732f3bc27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:63:c3:ad:b9:b4:50:8b:e1:fa:69:92:ce:1c:
f3:6e:e1:76:c3:08:8d:7a:b0:ee:43:e3:58:8e:87:
0f:82:64:2d:3e:e2:1f:9e:ca:b4:85:2e:14:21:f6:
e3:e3:e3:cf:94:93:9e:41:81:91:b9:7e:0a:78:82:
e2:c3:ae:9d:a8:94:03:d9:db:d3:10:6e:9a:95:4d:
be:d0:df:8b:38:85:d5:40:6e:28:05:ac:2d:81:68:
a6:e4:77:5d:62:70:38:c1:32:66:f5:85:f5:4b:2a:
49:4a:96:21:bf:91:d0:12:6e:31:61:88:ef:89:b0:
4f:f2:44:44:a8:a1:51:75:1f:ca:d1:e2:fb:d7:90:
49:2c:f9:3f:6a:a1:c6:09:dc:2d:50:2b:74:c3:f2:
28:db:98:d6:4b:f2:ca:41:c6:71:3b:bd:1b:3c:c5:
1f:15:92:6a:48:ea:87:d8:4b:2e:ee:6c:36:63:fc:
33:91:16:ed:c3:81:17:8a:f0:88:45:d7:07:85:dd:
c0:23:2b:8b:46:2d:a3:2d:35:fd:85:e4:f6:59:cb:
c2:06:fd:d5:ad:49:dc:ff:25:6d:a3:7b:17:7f:68:
e6:e6:8a:53:83:62:a3:c4:a5:5c:0c:00:6f:b5:31:
3d:32:2e:12:dd:1d:ef:b1:15:8b:a9:6e:bf:91:83:
ae:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2A:3A:24:A0:FC:D9:C3:A9:55:F8:4D:B3:07:B3:73:2F:3B:C2:7C
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sSo6JKD82cOpVfhNswezcy87wnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.96.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:b9:ad:98:81:e3:c8:fa:c2:49:bb:5b:5c:ad:60:af:d0:8f:
81:33:4d:42:d7:1b:23:c8:8b:e8:ad:90:70:86:f2:0f:42:9f:
b9:6e:fa:15:5b:ca:2b:ff:79:db:c1:f7:80:2b:26:3b:57:7d:
43:a2:af:44:81:43:23:a9:40:91:ff:64:ce:37:9b:b5:c6:0b:
7b:57:cb:85:64:a1:5e:36:53:d6:6f:dd:ee:a3:35:13:55:b1:
e5:1c:9c:b4:24:a6:cc:5d:2f:8e:8f:27:49:34:33:5d:06:b1:
1e:af:dc:27:89:6d:12:b7:1f:dc:2a:6d:ce:1b:d0:60:9b:4b:
08:1f:19:eb:85:96:76:a3:3b:51:b6:b0:2b:f8:f8:23:bd:df:
3a:fd:1a:dc:a8:d7:11:26:df:40:dd:b9:95:e8:a5:3b:3b:ea:
a6:de:c9:12:f0:6a:75:97:05:94:63:9b:de:3e:8a:19:8c:ff:
3d:25:10:c4:b3:ca:46:f0:30:b9:d9:f8:a8:79:8d:2d:ab:b1:
e6:27:a5:6b:66:93:b3:97:5d:22:0f:68:f7:fe:df:61:db:c6:
81:d3:5b:ca:bd:ad:c5:a2:3b:88:db:bc:12:74:1e:c7:29:28:
6f:d7:fc:f3:4a:32:36:cf:78:e2:5c:69:7d:ed:c3:31:7d:83:
a7:eb:40:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org