Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/j1PA8JkffNTuMo-DjB53pklbHvU.roa
File: j1PA8JkffNTuMo-DjB53pklbHvU.roa (raw, json)
Hash identifier: ple8xUDBW+Kk9RsA2WhMlbn8C9NfXYxgz012RJe+j2g=
Subject key identifier: 8F:53:C0:F0:99:1F:7C:D4:EE:32:8F:83:8C:1E:77:A6:49:5B:1E:F5
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 17EC16FB
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/j1PA8JkffNTuMo-DjB53pklbHvU.roa
Signing time: Sat 01 Jan 2022 04:54:46 +0000
ROA not before: Sat 01 Jan 2022 04:54:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209956
IP address blocks: 45.136.0.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401348347 (0x17ec16fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:54:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f53c0f0991f7cd4ee328f838c1e77a6495b1ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:06:bf:0c:6a:37:0f:b2:54:9b:eb:d3:b8:bb:
33:8d:5e:ab:53:a9:60:b3:34:50:47:af:1e:ec:30:
8f:2c:3b:da:ce:f4:13:28:21:51:66:8c:51:e7:03:
b7:16:e3:1d:96:a6:0c:77:eb:b9:90:5d:f3:66:0e:
8b:1e:bb:76:68:90:f6:39:f8:79:9c:c0:4c:96:0f:
72:01:16:06:9e:9b:f5:1d:9f:88:99:58:c2:59:4d:
0e:b7:94:ca:9e:ac:85:8c:5d:71:1c:f2:fd:f9:1c:
fd:33:f7:42:44:52:22:df:db:20:40:20:54:f9:8f:
16:e9:d3:41:de:98:f3:c3:36:d3:b7:9e:e9:c1:5a:
6a:0b:d5:f7:63:90:11:dd:ea:00:3d:67:a1:a6:55:
68:4a:8e:8d:27:32:86:cb:84:d2:44:2d:d9:6d:f7:
40:03:f8:85:cb:2b:da:20:d9:d0:83:56:50:bb:42:
be:c4:8a:cd:14:85:82:58:02:34:72:54:86:a2:7b:
3b:e6:8a:89:4d:eb:54:59:56:f9:21:2b:36:4e:d1:
21:fe:c9:76:7c:2e:c3:5b:ef:bc:1a:45:64:8d:47:
86:b4:38:87:85:b9:20:33:46:5b:ea:89:bd:84:bd:
17:af:e6:eb:56:fd:27:38:9d:68:a4:96:df:8d:a4:
3b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:53:C0:F0:99:1F:7C:D4:EE:32:8F:83:8C:1E:77:A6:49:5B:1E:F5
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/j1PA8JkffNTuMo-DjB53pklbHvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.0.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:10:27:87:5b:9a:9f:40:58:5f:e7:75:fc:8d:67:64:64:ee:
7b:9f:5e:f6:5e:0f:0b:28:aa:b6:3d:9e:9b:1b:d3:b5:b7:cd:
6f:9c:ed:85:b4:b0:01:39:9d:4d:23:4a:e7:19:97:2f:48:31:
f6:2f:7a:9b:da:67:43:3e:15:47:0b:54:82:53:07:70:45:35:
17:22:db:48:d6:f3:d5:b6:f7:d8:f9:81:20:e9:7b:d2:f6:9a:
a5:ee:d7:7f:89:93:4f:52:f2:ff:b2:36:b5:49:ad:94:16:ae:
6e:06:57:4c:db:52:df:e0:6f:0a:0b:7f:25:53:1d:18:ca:ef:
5e:6a:ad:62:af:58:a7:33:83:42:ae:b1:4d:65:9e:ee:89:2c:
75:dc:18:12:81:67:05:b2:e1:90:97:23:a5:5c:0c:ce:de:89:
cf:e2:50:17:03:1d:8b:30:3a:4f:fe:93:fd:68:8c:b0:51:ba:
83:11:c2:94:f9:ef:45:db:44:23:92:d1:02:62:b9:ae:52:14:
9e:1e:ad:06:40:00:83:ef:59:73:02:3b:08:29:2a:f1:b2:bb:
1f:7c:94:91:46:01:30:78:a8:7e:5d:6d:88:ff:37:81:9f:e3:
7c:d7:ec:b5:55:85:7b:d4:83:0d:41:b0:15:e1:0d:71:07:e2:
19:cf:a3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:33 2024 by rpki-client on console-ams.rpki-client.org