Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/s1MT524Tel5nlGoKNKM042wi0u0.roa
File: s1MT524Tel5nlGoKNKM042wi0u0.roa (raw, json)
Hash identifier: r4wZBuMUUY6wIzlJef/6VHaM8ws6Iz5PGBLxjQVx2cE=
Subject key identifier: B3:53:13:E7:6E:13:7A:5E:67:94:6A:0A:34:A3:34:E3:6C:22:D2:ED
Certificate issuer: /CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Certificate serial: 05BCD375
Authority key identifier: 8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/s1MT524Tel5nlGoKNKM042wi0u0.roa
Signing time: Mon 27 Jun 2022 20:49:33 +0000
ROA not before: Mon 27 Jun 2022 20:49:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60667
IP address blocks: 45.84.211.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 96260981 (0x5bcd375)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd4bcbf35db7fe2ef663522a5a3a3979a4f1ff8
Validity
Not Before: Jun 27 20:49:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b35313e76e137a5e67946a0a34a334e36c22d2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d8:74:20:e0:d0:a2:90:3f:fc:87:be:9a:8f:
05:ce:56:31:f2:54:6b:5e:b7:af:d4:4b:9f:eb:6b:
0a:61:5b:ef:bc:4e:4d:e2:f8:dc:3a:ed:ea:e7:bf:
e7:da:82:31:a4:22:98:7a:3d:3b:46:a0:04:c2:53:
11:a4:22:a1:27:38:4b:9d:b9:b6:2d:f0:a8:7d:e3:
56:81:36:d3:fe:58:4a:42:2d:9b:34:92:6b:ae:5c:
3f:86:3e:00:39:b4:a9:13:6a:d7:20:1e:e3:cd:01:
8d:33:8c:ec:c4:32:43:42:e4:50:66:42:cf:42:da:
12:86:7f:ae:f8:09:58:d7:f4:b6:55:49:4c:b3:25:
ad:72:21:9c:e0:a2:2d:ce:ec:c2:da:10:da:f6:4f:
00:f7:81:39:f5:2b:95:10:35:0c:c2:d0:30:24:46:
e9:b3:f9:ee:d9:83:b2:ae:4f:d1:11:03:aa:83:ad:
a8:0f:97:cc:f3:ed:10:0f:76:ea:64:45:37:06:eb:
49:84:47:b3:86:af:6c:b9:77:89:da:c1:93:fd:fe:
70:08:81:a7:49:fa:3f:63:28:9c:3d:3c:45:da:26:
dd:b9:72:fd:55:39:4a:5a:c1:63:8e:60:52:95:ef:
1d:25:2a:6f:a4:54:22:11:39:b2:b2:e7:2d:47:cb:
af:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:53:13:E7:6E:13:7A:5E:67:94:6A:0A:34:A3:34:E3:6C:22:D2:ED
X509v3 Authority Key Identifier:
keyid:8B:D4:BC:BF:35:DB:7F:E2:EF:66:35:22:A5:A3:A3:97:9A:4F:1F:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9S8vzXbf-LvZjUipaOjl5pPH_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/s1MT524Tel5nlGoKNKM042wi0u0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a14272-2794-4f38-9640-478ed7f8d05e/1/i9S8vzXbf-LvZjUipaOjl5pPH_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.211.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:c5:81:f7:42:88:1a:25:b8:b2:d9:2b:8a:b5:22:fd:a1:28:
b4:f3:0e:f0:0d:bb:d7:57:43:e7:76:e0:b7:46:01:4e:7b:77:
d7:df:1e:8c:04:5d:d9:11:92:d6:ec:25:bd:af:09:12:b4:11:
33:c6:ae:3d:14:e2:35:49:42:ea:b5:6a:25:37:bd:0e:82:ae:
d7:d1:38:46:92:4d:1b:d0:1d:22:76:23:46:a8:28:21:96:4e:
48:83:67:f1:a8:f4:af:ac:72:c8:69:ff:48:3a:97:33:7e:9c:
56:b5:63:37:b2:09:88:4a:6b:8b:e5:84:d0:9b:df:63:88:5b:
16:5e:f4:62:01:a6:dd:17:f0:50:51:f5:89:9a:b8:42:6b:ce:
64:ff:e0:d6:c5:c2:8e:2e:72:f1:26:07:4c:0d:eb:39:7c:32:
96:4a:73:70:46:0e:a1:b7:09:b5:ee:29:d7:88:01:5f:09:c9:
ef:38:42:11:67:db:ae:db:ff:ac:d0:05:2f:5c:42:ec:fa:8e:
9e:27:f2:15:8d:89:32:aa:6c:1a:7d:fd:32:7f:35:4e:16:41:
d8:1c:4a:ee:5f:08:ac:df:7a:b2:04:58:71:b9:3d:cf:11:85:
0f:88:48:34:e2:53:a8:b2:7e:25:59:38:04:eb:b4:2f:29:51:
f1:53:77:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:19 2024 by rpki-client on console-fra.rpki-client.org