Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/bkOlYxN-ku2JFpVkcAtkTL8BeCE.roa
File: bkOlYxN-ku2JFpVkcAtkTL8BeCE.roa (raw, json)
Hash identifier: FOM2kJNoADUZ677bWEaxmXwC/s3wtZ0TsiVSrralwZE=
Subject key identifier: 6E:43:A5:63:13:7E:92:ED:89:16:95:64:70:0B:64:4C:BF:01:78:21
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 031AFC33
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/bkOlYxN-ku2JFpVkcAtkTL8BeCE.roa
Signing time: Sat 01 Jan 2022 16:04:16 +0000
ROA not before: Sat 01 Jan 2022 16:04:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 45.132.255.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 52100147 (0x31afc33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 16:04:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6e43a563137e92ed89169564700b644cbf017821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:01:d9:b9:ae:ef:09:50:4a:35:3a:1d:46:
29:6b:01:1c:b8:1d:25:66:87:6a:d4:5d:98:16:d8:
03:56:4c:63:0b:2c:ed:cf:d8:32:a2:13:b8:7a:22:
18:c0:8b:66:b0:9a:9d:42:c6:8e:b9:ef:66:96:5e:
66:02:20:d4:45:25:57:66:e9:33:04:bb:1a:0d:7e:
92:95:1c:23:f2:f1:e7:2a:22:8e:82:cb:11:9b:96:
ec:7a:7c:ba:89:62:02:00:75:07:99:09:a4:77:2f:
73:8f:1b:f1:d6:6e:d0:22:0f:ef:37:de:dc:a0:d2:
00:98:96:89:1f:3d:b0:5e:2d:75:b1:5b:4a:b4:76:
d6:da:44:4b:a6:42:a3:37:40:4e:c8:af:d2:ca:30:
4f:2f:dc:df:48:3f:06:7a:5c:03:d5:b3:b3:7e:93:
fa:46:d8:30:ca:02:f3:7d:76:a2:90:98:d9:42:5d:
2e:2c:cb:32:f9:36:20:13:a9:62:b2:29:46:e4:9f:
f5:27:20:db:45:b2:32:8a:06:5e:51:46:3f:aa:de:
3f:25:f6:2d:c6:39:20:1a:f3:41:cd:a4:0d:68:f9:
5e:30:91:2f:b5:d2:1d:19:7c:00:ff:65:26:f4:32:
87:b8:2e:f6:4d:7c:67:6f:d3:fa:9a:98:56:58:77:
56:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:43:A5:63:13:7E:92:ED:89:16:95:64:70:0B:64:4C:BF:01:78:21
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/bkOlYxN-ku2JFpVkcAtkTL8BeCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.255.0/24
Signature Algorithm: sha256WithRSAEncryption
86:96:d4:97:32:3e:5d:03:79:56:00:ed:b9:7d:22:e2:44:3c:
a1:48:f9:eb:18:bc:f2:41:92:8b:44:7d:79:3a:b1:7e:c9:a1:
ab:a4:f9:5d:bf:19:9b:82:17:e0:67:09:12:64:1c:19:b8:ef:
18:bd:01:c6:60:00:70:0e:76:ad:59:91:fa:28:8a:cb:7a:6d:
de:84:28:21:fc:3c:e1:2b:46:8a:9a:97:6d:bd:47:e6:75:c7:
48:ae:7c:71:47:fe:09:14:81:1a:5b:1c:8b:3b:d3:9e:b5:f0:
62:8d:b3:e1:f8:5c:9c:2c:d7:2a:53:f0:0f:fe:2a:80:08:35:
ba:bf:10:0a:5c:58:69:d2:10:d2:34:64:57:d8:35:ff:24:a6:
54:60:22:fc:54:b8:bb:31:f6:4f:9c:bf:9e:14:ca:6c:01:14:
35:f0:ea:bb:c4:e5:33:d7:e2:5c:42:14:b5:d9:e5:af:1b:7e:
b6:a0:78:35:1f:bc:9a:d7:a9:14:51:c3:d8:19:cf:e5:16:b3:
96:3d:a8:3a:b7:04:b5:f6:7d:23:10:92:ad:35:22:4d:0f:b0:
e9:67:59:52:f4:e8:52:d6:b2:a2:74:e7:9c:3a:df:e9:f9:d6:
4c:9c:92:ef:73:ff:1e:54:f7:a5:6e:1f:b7:c8:8b:d9:cb:f7:
4c:2b:da:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org