Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/nOBbkDxyeRDnSobXLUNwyJTsnj4.roa
File: nOBbkDxyeRDnSobXLUNwyJTsnj4.roa (raw, json)
Hash identifier: Q8buGpUFevDwyUw5INcV/mQ2pQk38ejMLrAaTLsHjOg=
Subject key identifier: 9C:E0:5B:90:3C:72:79:10:E7:4A:86:D7:2D:43:70:C8:94:EC:9E:3E
Certificate issuer: /CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Certificate serial: 05676FD0
Authority key identifier: E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/nOBbkDxyeRDnSobXLUNwyJTsnj4.roa
Signing time: Sat 01 Jan 2022 07:02:04 +0000
ROA not before: Sat 01 Jan 2022 07:02:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208259
IP address blocks: 45.129.107.0/24 maxlen: 24
2a0e:47c7:1000::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90664912 (0x5676fd0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e88c04771e2bfac8f60f1b4c9cbd093aafea974e
Validity
Not Before: Jan 1 07:02:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9ce05b903c727910e74a86d72d4370c894ec9e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e7:a3:9d:28:37:26:82:54:02:82:fd:ce:9c:
e5:bd:c1:49:2f:9b:95:bb:79:99:76:99:14:07:5c:
aa:a1:92:59:83:8a:14:c1:62:0f:2f:05:96:1e:09:
b7:64:9f:20:f3:6b:be:b2:e7:eb:34:34:f9:87:f3:
e7:cc:17:b3:61:5b:17:e4:5f:2c:f2:c2:77:4f:d0:
65:b2:a8:c3:bb:39:79:7e:40:af:3d:34:4d:c3:46:
e7:da:96:ee:c2:60:5e:e8:80:1a:e2:40:e5:54:b1:
7d:92:4a:8e:6a:71:fd:4c:59:2f:58:ca:29:36:b2:
59:5e:cf:16:99:7e:1e:a2:8e:15:ce:56:dc:99:97:
9a:80:e5:75:da:c4:b4:88:1c:39:91:e3:49:07:45:
43:ce:59:a9:be:91:26:20:e1:f3:4b:e6:b1:59:a2:
7f:00:50:0d:30:fc:e5:cd:da:03:09:a7:0c:8a:9f:
45:a0:3c:7d:0e:54:c8:d9:02:a2:de:76:f1:ff:52:
19:fc:e9:6f:c2:e2:8c:bd:4e:a4:21:f8:7b:d8:72:
2a:b0:3c:c4:e2:8a:d2:0a:7c:58:98:fa:c1:b4:d9:
de:bc:20:f4:44:08:00:3c:e9:44:86:03:04:a5:33:
25:e9:d8:cb:a6:e3:c1:af:fb:8e:0d:74:79:46:3d:
be:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E0:5B:90:3C:72:79:10:E7:4A:86:D7:2D:43:70:C8:94:EC:9E:3E
X509v3 Authority Key Identifier:
keyid:E8:8C:04:77:1E:2B:FA:C8:F6:0F:1B:4C:9C:BD:09:3A:AF:EA:97:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6IwEdx4r-sj2DxtMnL0JOq_ql04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/nOBbkDxyeRDnSobXLUNwyJTsnj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/2ae7c3-98a5-4cda-9bae-ba645f19915a/1/6IwEdx4r-sj2DxtMnL0JOq_ql04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.107.0/24
IPv6:
2a0e:47c7:1000::/48
Signature Algorithm: sha256WithRSAEncryption
a1:a6:65:39:83:5d:58:8a:76:fa:f7:1a:89:83:91:a4:c2:b9:
92:a9:41:c9:7b:9e:2e:87:1b:9b:45:3a:78:1e:f4:22:a0:90:
21:8d:f9:74:38:3a:1c:77:f1:3f:58:38:c0:ff:4a:95:60:6e:
72:2b:ef:c4:3f:fd:a9:0b:98:7d:d3:a7:a7:64:44:61:88:4f:
55:12:80:c8:e8:d9:ed:12:9f:d9:df:74:64:04:f1:83:02:ce:
b5:d9:ac:d8:b4:bf:28:88:bd:3d:4f:55:48:98:7d:59:9c:84:
4a:e1:5f:51:9f:51:f3:f8:4c:76:8c:bd:06:fe:3c:13:4e:59:
5c:ba:34:35:d1:0e:28:95:93:8e:f3:05:51:f9:f4:da:c1:1b:
c7:de:ae:e2:82:ae:ef:b0:7d:c0:0f:e8:78:3c:8d:2e:42:c8:
85:fe:35:5d:84:7a:0b:0a:c7:1b:ce:59:8e:f5:e1:16:c9:37:
e7:fb:9e:9a:9f:30:67:d1:3e:7d:c7:cd:e4:e4:7b:aa:e4:18:
92:32:49:92:a6:55:fb:0f:dc:38:80:b2:ed:33:e6:14:9a:1a:
80:2f:d3:c5:15:4c:80:1b:1f:bb:b1:92:1f:75:25:f2:eb:ee:
28:af:30:93:60:2d:47:bb:1c:29:b2:bd:2b:c8:fa:a0:28:87:
d9:9a:e9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:00 2024 by rpki-client on console-fra.rpki-client.org