Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/3jd9ZQiCL83iT41PcNKx8YA9TN8.roa
File: 3jd9ZQiCL83iT41PcNKx8YA9TN8.roa (raw, json)
Hash identifier: aK5j5mUuAHyO088zEElYkpS+uaKbubnkkRKKI2DLf8I=
Subject key identifier: DE:37:7D:65:08:82:2F:CD:E2:4F:8D:4F:70:D2:B1:F1:80:3D:4C:DF
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 02FAE31F
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/3jd9ZQiCL83iT41PcNKx8YA9TN8.roa
Signing time: Sat 25 Jun 2022 09:45:44 +0000
ROA not before: Sat 25 Jun 2022 09:45:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 45.129.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49996575 (0x2fae31f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Jun 25 09:45:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de377d6508822fcde24f8d4f70d2b1f1803d4cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:83:d6:7b:36:2d:9a:75:92:25:1c:6e:cb:
39:38:f9:51:a7:c7:ab:6e:b6:81:18:d2:e5:d5:e7:
47:74:84:79:56:fc:f7:9b:24:02:c8:95:09:2d:d7:
33:ce:1e:1c:d7:a3:77:6b:db:5c:85:d8:41:06:46:
b2:6a:ac:1a:09:ed:dd:7e:08:e6:ff:ad:1a:18:dc:
f3:b3:99:2c:2d:d4:7c:44:b2:10:74:e7:88:e8:b6:
f2:bb:06:2c:92:74:0f:0b:65:b1:1f:ea:59:d8:9a:
0a:14:c2:37:1d:ac:9e:e2:94:6b:a9:43:a1:53:41:
46:45:67:60:7e:cd:0c:a4:84:37:38:50:d6:6d:b2:
76:db:d6:ab:a9:66:e8:7b:8b:a2:34:0a:26:24:b6:
8e:ff:2d:b0:e3:32:b1:2b:66:ee:88:ff:30:06:74:
54:d5:b3:65:1c:65:b5:6d:2f:7c:c3:15:0c:8e:c8:
d2:09:98:b3:82:1a:74:57:55:b8:6e:b6:df:0e:7d:
20:06:cb:3c:50:d3:7f:23:00:55:89:a6:78:25:f8:
98:32:d4:e2:42:46:cb:07:fc:de:8f:53:f8:f3:e2:
0b:64:8d:e3:1a:85:e9:cb:18:f6:29:4c:9b:61:13:
b0:57:ad:ce:9b:7e:9f:3d:02:fa:cf:be:58:4d:a7:
37:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:37:7D:65:08:82:2F:CD:E2:4F:8D:4F:70:D2:B1:F1:80:3D:4C:DF
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/3jd9ZQiCL83iT41PcNKx8YA9TN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.92.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:37:50:bb:a9:e4:78:54:e0:75:cb:07:56:22:7b:93:b8:0c:
05:ae:c5:26:d5:b1:bf:9b:26:41:67:44:e0:3a:9b:2a:30:37:
bc:38:bd:9f:40:e1:59:36:ef:04:df:82:73:52:21:72:20:07:
5a:84:e6:5b:65:d8:e8:b9:2e:93:f0:be:ba:b0:83:7c:8b:97:
a6:f1:33:5d:8c:04:94:7b:1c:2d:11:fc:f4:a2:40:4e:62:e6:
19:ff:3f:4f:3a:d8:52:40:aa:47:04:30:6b:d5:4b:58:70:9e:
1a:e8:50:d3:84:05:d1:6d:d4:99:a9:38:39:16:50:65:8a:05:
ad:dd:0c:85:f6:23:38:b3:58:06:ab:cb:38:0c:5c:18:17:7a:
9c:c3:53:0f:df:3d:a9:fb:d1:13:73:c9:30:29:1e:97:4e:18:
59:ff:4a:3c:82:42:e7:d4:fc:5a:3f:57:5f:47:0e:01:1b:54:
1d:f1:ba:24:1e:a3:dd:57:5a:f4:bf:ee:33:93:a9:f1:b3:f5:
8b:71:6a:71:4b:b8:82:e4:17:d1:95:c4:4b:93:07:b1:8c:43:
3a:69:14:7d:99:7a:ea:a2:77:07:f6:68:34:7a:8f:77:b9:6f:
0d:66:e7:2b:db:1a:0f:19:3b:e3:da:7e:6f:31:22:51:6f:69:
30:5b:1a:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:32 2023 by rpki-client on console-ams.rpki-client.org