Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/n9E8Fiiq3AOStwpK9FVjpUayuQc.roa
File: n9E8Fiiq3AOStwpK9FVjpUayuQc.roa (raw, json)
Hash identifier: Xc3F2uY2F/H8VGnc2vtww+09c//dGO7XZIqZDagIUGI=
Subject key identifier: 9F:D1:3C:16:28:AA:DC:03:92:B7:0A:4A:F4:55:63:A5:46:B2:B9:07
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 17D26EDA
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/n9E8Fiiq3AOStwpK9FVjpUayuQc.roa
Signing time: Sat 01 Jan 2022 04:54:33 +0000
ROA not before: Sat 01 Jan 2022 04:54:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 139805
IP address blocks: 45.138.208.0/24 maxlen: 32
45.153.170.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399666906 (0x17d26eda)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:54:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fd13c1628aadc0392b70a4af45563a546b2b907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ae:ab:1d:05:3f:f0:7a:c4:67:84:0d:c0:59:
ce:ee:95:45:9a:70:18:1e:11:33:09:01:a2:73:49:
6d:bf:4a:8e:ba:e4:27:c2:7e:0c:e5:67:24:f0:2a:
8b:b2:2d:00:4d:6b:52:91:db:6b:10:c7:17:73:b2:
c7:5c:7a:3d:2d:70:c9:30:14:1b:32:06:0c:36:7d:
a6:45:a4:8f:83:7f:b8:5b:57:ae:26:65:b7:56:b4:
4b:cf:43:2a:66:fe:90:7a:eb:4d:86:04:83:36:9b:
07:9b:7e:d2:0b:cf:9e:9d:28:e5:78:ab:fe:eb:a4:
50:06:5e:b1:de:26:e1:83:b2:4c:cf:8c:c1:f9:8b:
6f:07:f8:91:28:a1:3b:84:d7:e6:ed:86:df:74:05:
9b:bb:71:c6:b7:7d:64:a1:5f:1f:61:fe:27:ce:ea:
ad:54:b4:fb:7a:ad:34:68:51:d0:58:58:8c:d8:46:
ee:ec:69:aa:90:d2:3d:c7:37:09:70:5a:fb:3e:7a:
2a:49:84:cc:25:4f:c2:9b:ea:ae:77:8f:fe:15:94:
d9:c5:ec:86:ad:f7:8e:b3:12:6d:f0:b7:1f:e4:43:
a2:ee:42:b0:51:06:09:11:2a:92:51:7a:4b:1a:1e:
ed:1f:77:25:e2:8e:a4:1e:66:1a:29:0e:d8:7c:b2:
61:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D1:3C:16:28:AA:DC:03:92:B7:0A:4A:F4:55:63:A5:46:B2:B9:07
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/n9E8Fiiq3AOStwpK9FVjpUayuQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.208.0/24
45.153.170.0/24
Signature Algorithm: sha256WithRSAEncryption
64:f9:a0:17:90:5f:46:a7:28:30:28:dd:ee:72:c1:0b:ed:81:
4a:d5:d3:ab:1b:b8:e0:8e:ce:b2:1c:3c:5d:3f:a7:cf:37:0c:
e3:ee:ad:d0:cc:4a:a0:e3:42:c5:66:24:66:30:35:8d:7f:78:
1f:9c:0e:a4:d9:f1:74:5a:f0:f4:e3:fd:82:77:81:a1:0b:a4:
68:cf:a0:ec:95:0c:73:60:9c:7b:b9:d7:79:b6:e6:89:9e:d9:
ef:71:d6:82:8d:ba:23:e9:d2:62:46:cf:c8:07:66:d0:90:7c:
32:5e:94:2b:62:6d:b6:3f:bb:d3:1e:8b:e8:86:cf:46:6d:a1:
4e:46:b3:9a:16:09:30:d1:1f:47:4c:6d:b6:87:9a:b5:99:06:
5c:44:f0:de:72:70:8f:0f:07:e1:bb:b3:cb:61:fd:d4:ef:7a:
11:37:94:0f:e1:73:da:63:14:5e:56:0c:2d:75:fa:b3:9e:d1:
54:35:2b:de:e0:4d:6b:40:34:1a:cd:50:4f:90:75:00:0a:cf:
45:7a:95:8e:07:51:03:fe:01:d1:e5:bd:9e:ba:7a:7b:6f:cc:
ed:3c:7e:59:7b:06:b7:ee:df:c0:79:fa:c5:1b:3d:c3:ed:e4:
0d:b7:76:db:9e:9f:0e:b9:99:29:47:37:1f:35:df:57:e8:39:
77:29:20:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:46 2024 by rpki-client on console-fra.rpki-client.org