Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Ii9CmpbIdFYDyWkkfcJl3k61Lvc.roa
File: Ii9CmpbIdFYDyWkkfcJl3k61Lvc.roa (raw, json)
Hash identifier: utvLllIdkfvTRPisvIqJ+KyCWKsx/FkyEs1Se24lMDQ=
Subject key identifier: 22:2F:42:9A:96:C8:74:56:03:C9:69:24:7D:C2:65:DE:4E:B5:2E:F7
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0328C104
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Ii9CmpbIdFYDyWkkfcJl3k61Lvc.roa
Signing time: Sat 01 Jan 2022 16:04:23 +0000
ROA not before: Sat 01 Jan 2022 16:04:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 59994
IP address blocks: 45.137.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53002500 (0x328c104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 16:04:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=222f429a96c8745603c969247dc265de4eb52ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f7:ba:7e:e0:06:35:50:0b:da:89:e8:3e:dc:
7e:71:4c:e5:42:8f:82:3b:52:8b:20:ad:c1:b5:81:
d1:56:ac:f7:6b:2c:09:5d:a4:f1:46:9c:d3:0c:a6:
9a:e8:fa:fe:c1:25:3e:55:d1:85:d6:b7:5c:d5:d0:
0a:5a:24:c8:63:bb:6e:15:d6:ec:8e:9a:20:0f:5b:
80:75:c8:95:9f:57:43:a2:2d:cd:80:bf:e4:f5:46:
18:05:65:8e:95:60:95:13:30:f2:22:49:db:b8:03:
d4:07:38:a2:ce:e1:8a:6a:a5:05:d1:56:26:f0:77:
86:b4:d2:3e:d4:3d:6a:d7:8b:9c:af:3a:55:30:90:
70:6c:95:b0:af:32:52:4d:32:1b:90:9a:86:72:bc:
ad:2e:25:5f:6b:67:41:23:81:a8:e1:4a:38:eb:78:
f1:c7:85:90:b5:c8:a7:38:55:1e:6d:6b:3c:1a:dc:
97:60:cd:e8:f8:2d:92:34:8b:d1:83:18:ed:26:03:
fa:68:45:27:f6:bb:78:eb:63:f6:0c:e9:7d:c1:61:
4e:11:5d:93:5a:85:b5:3a:f1:ef:7c:ea:9e:56:0a:
fe:49:8f:8f:d3:40:df:aa:43:77:ea:15:38:de:2e:
97:b1:bf:a9:95:51:96:9b:7c:bc:73:41:94:21:e4:
8f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2F:42:9A:96:C8:74:56:03:C9:69:24:7D:C2:65:DE:4E:B5:2E:F7
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Ii9CmpbIdFYDyWkkfcJl3k61Lvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.107.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:23:ea:bd:50:c1:37:9e:4a:65:04:db:87:3e:24:03:55:73:
a2:db:c4:13:b7:f2:1e:aa:12:a0:2a:63:98:e2:e2:90:ef:a4:
97:9f:b7:0c:d0:7b:48:98:2d:79:f3:c2:c5:96:c9:92:61:9d:
44:a8:b1:60:a5:dc:b5:fb:37:44:fd:a6:cc:70:b7:28:e6:ef:
ef:28:3d:bb:28:f6:6b:d6:a7:4b:8a:35:3b:7c:50:9f:23:20:
0d:b6:81:08:37:c6:cb:c7:8d:bc:3d:f0:fa:f1:89:97:b4:dc:
52:76:ee:83:08:c2:cc:d5:31:aa:f6:8e:c9:c8:12:44:43:8d:
17:97:8e:d5:66:ee:dd:df:f4:ee:9d:19:8e:1b:28:fd:01:fb:
3e:5c:6a:80:9e:98:65:68:08:9e:56:40:7f:27:c6:0c:d5:24:
83:8d:64:0b:68:04:ad:a2:47:63:d8:b0:43:2d:e3:15:b5:5d:
e8:ed:9a:95:7b:43:48:5c:9b:b7:8e:95:e9:5c:23:c8:5d:c0:
0b:f8:fd:ab:9f:fe:7a:3d:c6:62:16:bb:6b:60:d3:c4:c0:aa:
0e:45:1b:f0:c5:97:68:73:19:4e:1e:f2:64:ba:8e:1a:4a:53:
0e:ca:5f:72:02:a9:38:7a:d6:0b:32:01:3c:3c:f6:30:8f:c2:
f9:ab:5d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:29 2023 by rpki-client on console-ams.rpki-client.org