Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/jXvSbYRrpMX8BuzG5WybF299nWA.roa
File: jXvSbYRrpMX8BuzG5WybF299nWA.roa (raw, json)
Hash identifier: dYlKUjPZyoiPFNhcfqwA8P0eUXxMYbT0CQSzk6cSExs=
Subject key identifier: 8D:7B:D2:6D:84:6B:A4:C5:FC:06:EC:C6:E5:6C:9B:17:6F:7D:9D:60
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 17E6EF42
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/jXvSbYRrpMX8BuzG5WybF299nWA.roa
Signing time: Sat 01 Jan 2022 04:54:42 +0000
ROA not before: Sat 01 Jan 2022 04:54:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209060
IP address blocks: 45.12.161.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 401010498 (0x17e6ef42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:54:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8d7bd26d846ba4c5fc06ecc6e56c9b176f7d9d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:fd:d2:45:1a:bb:7c:e6:42:6b:30:6b:33:78:
01:7e:0e:d9:a9:ec:fb:1b:11:1f:79:31:ed:af:04:
ba:9e:f1:9d:6f:76:48:8b:06:b7:16:23:09:b7:e7:
ca:33:08:24:d4:13:b4:88:dc:9c:1c:83:1a:f8:ba:
8c:c1:d7:2b:7c:b1:da:74:8e:a9:60:40:39:1a:78:
04:51:03:78:98:65:57:25:a8:93:ad:84:0f:d0:de:
b6:a0:b2:c1:be:30:00:06:df:64:ab:e7:ce:73:00:
38:c2:5b:dc:20:bd:60:c4:1d:53:ff:4e:9c:95:e9:
5d:d7:e0:1c:1e:01:94:05:ec:37:39:b4:f3:aa:22:
3b:9d:9e:32:d1:f2:a1:62:e8:6f:b2:a0:24:57:04:
ff:03:ca:b9:8e:f8:b6:27:40:5c:b3:fd:93:63:78:
30:ee:45:93:83:26:c2:6d:aa:05:56:bb:e7:74:32:
3a:a3:f6:05:c8:13:09:54:79:b1:bd:01:ae:f9:01:
05:a1:9e:ca:85:0e:28:13:97:8e:e0:2f:bd:01:4e:
a6:f5:93:89:44:52:c0:0e:cd:73:f3:c0:4b:a5:58:
27:9f:1e:c9:ea:b3:62:42:ff:e6:7b:61:b0:f5:ef:
af:59:44:6d:c5:dc:78:b8:c7:5a:72:ed:96:e5:dc:
fb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:7B:D2:6D:84:6B:A4:C5:FC:06:EC:C6:E5:6C:9B:17:6F:7D:9D:60
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/jXvSbYRrpMX8BuzG5WybF299nWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.161.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:d8:20:98:ef:0b:60:0a:2c:9c:68:e8:28:ad:51:23:11:c2:
6f:b8:46:fe:06:7b:b0:1e:92:98:22:44:75:06:40:9e:ba:5f:
8c:0e:31:00:63:35:f2:e8:fd:4e:56:fa:09:b5:85:ed:9e:49:
a7:dd:ef:89:b9:5a:d7:55:b5:64:a9:28:a2:9a:c0:d0:4b:67:
e4:79:ed:4a:12:c3:f1:81:aa:6d:78:cf:55:c0:4d:e0:66:b7:
c9:b6:70:c2:b7:57:85:e6:84:89:5c:ba:0f:7a:0d:cc:45:61:
0b:35:cd:02:20:83:be:a0:39:73:7a:63:ec:8d:d4:59:5a:db:
e8:9c:aa:a5:bf:36:27:10:b5:5e:ae:a1:0b:97:79:36:dd:7d:
a6:55:2d:a4:e7:3f:57:96:37:20:fe:28:8e:59:b5:a8:06:0c:
39:fc:07:39:00:86:08:ba:cc:7a:0c:d7:95:7a:e5:05:83:e8:
91:9c:d3:76:b2:cc:7a:c3:af:59:69:e5:d2:d2:50:75:fb:b2:
f2:93:41:65:91:d0:5a:64:41:6e:90:28:12:9a:89:5c:a9:12:
f6:8b:e5:c8:88:6b:7d:d4:e7:2d:ef:55:6c:61:d1:fa:15:91:
2d:48:30:60:ee:85:b0:78:7d:02:c6:13:0c:11:f6:39:06:e1:
e3:f8:81:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:46 2024 by rpki-client on console-fra.rpki-client.org