Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/i2bNrQpDnnFD2d395XmtuV8edgE.roa
File: i2bNrQpDnnFD2d395XmtuV8edgE.roa (raw, json)
Hash identifier: /L1XkElmpvBwtfNDf4zSTzdCrU+IpgIJOeNWTHzYNvQ=
Subject key identifier: 8B:66:CD:AD:0A:43:9E:71:43:D9:DD:FD:E5:79:AD:B9:5F:1E:76:01
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 179A51D7
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/i2bNrQpDnnFD2d395XmtuV8edgE.roa
Signing time: Sat 01 Jan 2022 04:53:56 +0000
ROA not before: Sat 01 Jan 2022 04:53:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23338
IP address blocks: 45.153.170.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 395989463 (0x179a51d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:53:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b66cdad0a439e7143d9ddfde579adb95f1e7601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:15:69:7d:09:5e:d7:b0:00:db:e8:d4:93:92:
da:b9:67:2d:f1:d6:2d:07:02:20:66:e9:ba:8a:1a:
ab:27:7a:c6:55:b8:f8:b2:0e:e5:98:e2:88:60:92:
1b:96:ac:4c:3a:3d:1a:1b:5f:f0:b6:fd:f5:1d:a9:
66:bf:5a:da:58:8a:57:40:0a:49:90:64:06:a7:8c:
f5:f8:a0:80:92:47:e0:f1:9d:47:87:89:99:7b:19:
51:86:11:75:bd:f4:ab:ce:5a:c6:f8:a5:2a:28:b8:
9b:4c:97:a4:e6:31:cb:eb:4a:72:e3:95:7f:be:52:
ed:6c:b4:26:71:b1:3e:8a:19:ee:81:94:c3:c8:60:
ed:56:7d:27:f2:6e:35:a8:48:0e:0c:a9:99:b9:02:
ca:35:6d:d6:7d:a2:7a:24:76:17:cd:c0:f0:f1:4d:
6d:94:39:b2:65:58:50:80:52:b1:d7:74:f5:a7:fb:
14:85:dc:35:0e:94:24:64:e9:33:0d:8f:0e:a7:a1:
31:4b:c0:6e:31:27:f0:58:24:6c:bf:c0:b9:35:90:
0f:12:89:4f:fa:d8:04:32:f1:32:82:7f:bd:82:76:
8b:4d:7f:de:97:0c:c6:a3:a4:74:bb:1f:87:35:0b:
ce:9b:5d:11:79:bd:dd:43:27:a9:66:e0:7c:4d:88:
f1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:66:CD:AD:0A:43:9E:71:43:D9:DD:FD:E5:79:AD:B9:5F:1E:76:01
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/i2bNrQpDnnFD2d395XmtuV8edgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.153.170.0/24
Signature Algorithm: sha256WithRSAEncryption
90:36:74:5e:52:fe:4f:5c:2f:7f:e2:64:29:5f:ef:fd:c7:83:
58:c9:9b:8d:cc:5b:4d:a6:4e:7b:6b:77:25:98:16:71:4b:4a:
78:46:af:0c:77:39:7c:df:59:05:87:cd:0d:5a:d2:d2:14:c8:
c5:b7:b5:8b:a8:ab:57:99:f1:52:f7:c3:4c:bc:75:51:07:2b:
7c:f6:b4:85:d5:2f:42:a0:c1:47:fd:52:a7:65:65:2b:80:b9:
05:d0:c4:91:ec:56:64:59:10:70:06:bd:f4:f3:3f:19:dc:01:
85:fb:d2:4b:2c:b5:a6:a9:53:f8:05:83:9f:08:8c:69:65:b5:
7e:77:ae:6a:73:09:3f:41:59:6e:7f:a3:89:d0:63:f4:03:ac:
d6:a4:08:64:ab:c6:b3:69:67:f1:34:4b:aa:78:2f:cd:78:e8:
20:0f:61:e1:39:ec:4d:2c:c2:ca:93:8a:b4:97:10:ad:84:68:
c9:26:37:38:4d:90:16:ee:e6:81:30:42:dc:56:ec:fd:56:f7:
ba:a7:18:54:a9:1e:0e:91:98:85:3b:61:f0:4b:2a:42:5b:80:
e0:15:6e:d1:f3:85:53:ca:81:f4:5d:41:4f:85:3d:67:96:cf:
fa:70:ae:ee:ad:62:ac:84:36:24:ad:85:80:5d:2f:0d:d7:e7:
30:c9:3e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:33 2024 by rpki-client on console-ams.rpki-client.org