Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/w2yb5fj8-wWr2_b-I4HwE2dITTs.roa
File: w2yb5fj8-wWr2_b-I4HwE2dITTs.roa (raw, json)
Hash identifier: Sykv7zmmD/g9dx9mQZZK73A2lfyNfsjPjosgENXABTw=
Subject key identifier: C3:6C:9B:E5:F8:FC:FB:05:AB:DB:F6:FE:23:81:F0:13:67:48:4D:3B
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 17D4AFA1
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/w2yb5fj8-wWr2_b-I4HwE2dITTs.roa
Signing time: Sat 01 Jan 2022 04:54:33 +0000
ROA not before: Sat 01 Jan 2022 04:54:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140224
IP address blocks: 45.142.60.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399814561 (0x17d4afa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:54:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c36c9be5f8fcfb05abdbf6fe2381f01367484d3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a3:70:1f:c8:9a:7f:67:50:11:0a:b7:e0:c8:
9a:44:1a:1d:9f:a5:cf:b3:a4:fe:22:5c:db:7b:99:
89:77:ec:13:cf:b8:7a:73:48:41:b4:65:02:94:22:
42:1f:06:0d:ad:00:e3:18:4c:a1:e8:e9:3e:31:d1:
c1:db:f6:b2:ee:21:7e:cf:85:71:5d:6f:00:1d:b3:
bc:be:75:25:d3:e1:8b:03:12:fb:98:a0:98:1d:dd:
35:ea:ee:14:38:37:9f:59:42:e2:c3:d6:fb:1d:01:
47:3d:93:f5:72:fb:c6:c5:f9:12:0f:96:87:73:6a:
70:98:a6:67:f6:d1:d7:7c:6d:ed:61:9f:17:aa:b4:
ad:83:46:aa:1d:c2:60:60:e6:0c:0d:d7:ab:58:cd:
cc:3c:30:7c:1a:de:af:de:ad:ae:72:dd:dd:34:06:
b6:14:3e:02:c2:3a:77:d9:e3:cc:59:ec:80:96:c2:
7d:62:0d:07:ad:6b:06:5c:4d:d7:b8:4f:74:05:19:
fd:ec:1f:0a:4c:ff:9a:d5:70:93:01:a4:2c:fa:7a:
5a:d2:0f:5b:35:69:36:ee:66:4d:cb:63:eb:51:4e:
39:5c:5f:9f:9d:a0:80:ff:17:9f:a4:6c:72:11:cf:
45:4d:c7:a4:2d:9b:17:28:39:e7:81:ab:94:f2:78:
64:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:6C:9B:E5:F8:FC:FB:05:AB:DB:F6:FE:23:81:F0:13:67:48:4D:3B
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/w2yb5fj8-wWr2_b-I4HwE2dITTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.60.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:30:e7:72:2d:ec:2b:67:07:0f:96:fa:87:a4:9a:ab:bf:4a:
c8:94:69:dd:cf:1f:ba:ec:ea:d1:5b:99:9f:98:e9:5c:05:da:
71:7d:be:a9:e7:0e:4d:c3:8d:52:0e:ef:1e:05:7e:d9:8b:fb:
1b:c3:7b:69:12:22:0c:4a:97:e3:ac:b4:5c:33:0b:57:83:8b:
47:c9:4c:47:ff:f9:a0:be:97:47:1f:20:2d:fd:c3:55:93:84:
25:e4:bd:0b:af:04:22:b9:ac:e7:8c:d5:3c:5e:4e:c7:82:0c:
b0:91:68:87:af:6e:fe:ba:db:69:8f:1e:04:1b:a4:67:5c:f6:
3e:9a:73:5c:d2:a1:6a:ce:f9:d0:cb:6b:37:8e:36:83:f7:9e:
34:2f:78:1d:22:bd:0d:c0:6b:20:0b:d8:c4:a1:13:36:6a:bb:
c4:79:fc:30:2b:87:75:16:d0:80:00:53:33:7c:2a:e9:f0:6d:
df:a8:64:b7:70:8e:2c:2a:56:6d:c1:55:1d:1a:37:a9:e9:3c:
88:61:ef:2a:56:87:06:b8:9d:a5:ea:0b:9b:7a:21:c5:92:27:
14:e7:e6:bd:bf:c2:7a:20:1c:53:b3:31:0d:83:c1:a5:26:55:
90:98:6e:da:cc:6a:b6:a2:19:41:3e:ba:e1:e6:b3:50:ee:03:
a4:60:ce:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:46 2024 by rpki-client on console-fra.rpki-client.org