Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/SLselPlXMkYhiYEFaZH7VTKCkYg.roa
File: SLselPlXMkYhiYEFaZH7VTKCkYg.roa (raw, json)
Hash identifier: K8HdIXPczu3I5QNiPN6YnCV+l+G9VTFvBeF6n73UY60=
Subject key identifier: 48:BB:1E:94:F9:57:32:46:21:89:81:05:69:91:FB:55:32:82:91:88
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0320E816
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/SLselPlXMkYhiYEFaZH7VTKCkYg.roa
Signing time: Sat 01 Jan 2022 16:04:18 +0000
ROA not before: Sat 01 Jan 2022 16:04:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49444
IP address blocks: 45.86.44.0/24 maxlen: 24
45.86.46.0/24 maxlen: 24
45.86.47.0/24 maxlen: 24
45.86.45.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52488214 (0x320e816)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 16:04:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48bb1e94f9573246218981056991fb5532829188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7a:74:1c:59:f3:fd:4c:f4:3c:4c:a8:46:f8:
a9:12:4f:4f:8a:e7:12:21:c8:09:b0:3c:5e:c2:85:
3b:50:bd:3b:60:34:00:19:c3:0d:fa:3e:a4:47:7b:
fc:81:cb:91:56:7b:64:c2:26:6f:63:17:d4:82:36:
03:ea:32:36:7b:47:73:b0:a1:96:2f:43:5e:46:62:
60:50:10:a6:42:67:9d:20:10:b3:f4:cf:dd:e4:06:
9d:1f:88:ca:f3:ac:77:5d:69:03:84:93:bd:ce:8d:
ed:27:c1:0d:a1:fa:ec:02:25:be:e0:ce:39:e1:ff:
0b:a5:b5:34:f4:82:89:79:5d:18:30:ba:2a:9a:d1:
39:a9:e1:13:b2:51:f1:d7:69:16:aa:1a:3c:97:55:
b9:a8:9e:24:90:f0:ca:a3:db:80:7d:ae:b5:c1:3c:
2b:98:3c:13:53:57:17:04:c5:eb:e5:15:13:8c:45:
ba:fd:a3:2c:eb:52:1d:84:fa:98:5e:4f:65:a3:25:
e8:ee:a9:16:bd:86:a0:72:aa:b7:7f:32:53:b6:f0:
3a:19:f6:93:58:45:99:4f:24:bd:99:ba:73:dc:c6:
7d:ee:71:7a:66:48:b8:d8:47:fb:a1:87:2d:f5:8f:
ae:a5:ee:b4:14:4b:d3:04:5f:dc:ee:01:44:cd:12:
95:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BB:1E:94:F9:57:32:46:21:89:81:05:69:91:FB:55:32:82:91:88
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/SLselPlXMkYhiYEFaZH7VTKCkYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.44.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:58:17:ea:13:ec:7f:36:d5:e5:f5:21:8b:3f:5d:75:7b:ec:
3f:84:1a:80:2e:d9:60:05:70:e4:df:1d:ca:a8:b4:ab:26:da:
45:bc:f5:c0:0a:40:ac:52:3a:f0:0c:24:fb:50:22:d1:c6:a8:
fb:f2:86:ca:27:c2:7b:1d:5e:a3:73:4a:ed:27:5d:41:b5:5f:
49:f4:8e:73:a2:ae:4a:27:fa:e6:f1:1f:8f:9e:12:d5:75:9a:
62:2e:f7:02:70:51:cc:0a:b2:2c:5e:9d:58:9e:69:1a:2e:cf:
5c:53:89:3b:75:77:c5:51:11:b4:40:42:2d:af:25:65:f0:95:
2c:aa:c5:ff:40:cb:a6:69:5e:0e:3f:79:6e:00:de:e5:14:6e:
8e:a8:d9:78:fc:19:dc:64:41:e0:a7:e9:46:f3:50:5c:51:04:
dc:4a:ba:66:ff:72:35:1e:5c:fd:8a:95:c9:62:85:4a:fb:d4:
ca:e9:07:92:f7:73:66:2a:cb:19:88:ef:cc:7b:7a:dd:bd:2e:
a4:c0:21:a4:02:49:3c:04:a0:3f:b1:2a:9f:40:1c:45:05:47:
bd:8e:0c:71:3f:1a:ae:49:d2:47:bb:0f:8e:79:65:6d:9b:ce:
f3:00:b1:4f:94:3d:24:2d:97:ab:39:29:ea:d8:20:c1:00:8c:
36:63:cc:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org