Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/vLr2ik54ig2o0o-NhI468Xj2dqA.roa
File: vLr2ik54ig2o0o-NhI468Xj2dqA.roa (raw, json)
Hash identifier: jF9/pzFlKvrgXoZ/Bb81i8QGiE3IO+OIAygKlgw+Lrs=
Subject key identifier: BC:BA:F6:8A:4E:78:8A:0D:A8:D2:8F:8D:84:8E:3A:F1:78:F6:76:A0
Certificate issuer: /CN=29493731efccc74ad5c273874b9360f7aa689465
Certificate serial: 073E6ACD
Authority key identifier: 29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/vLr2ik54ig2o0o-NhI468Xj2dqA.roa
Signing time: Sat 01 Jan 2022 10:00:40 +0000
ROA not before: Sat 01 Jan 2022 10:00:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31638
IP address blocks: 45.141.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121531085 (0x73e6acd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29493731efccc74ad5c273874b9360f7aa689465
Validity
Not Before: Jan 1 10:00:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bcbaf68a4e788a0da8d28f8d848e3af178f676a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e7:fe:ea:55:d0:f5:4f:3e:83:e7:ca:02:b3:
af:25:01:ec:f5:d8:0c:9d:5a:f4:33:5c:24:a0:9c:
11:b2:d1:87:c6:db:33:03:38:25:4f:ea:b1:05:80:
ce:b7:a3:6a:31:1d:3b:33:2a:2b:a5:4d:01:3b:09:
47:55:32:8f:7f:8c:5f:bf:44:d9:72:82:70:fa:42:
80:5b:ee:5a:1b:82:b5:4b:1b:ce:b3:33:50:1d:d8:
29:33:7a:30:1d:b2:78:d1:8c:45:34:42:90:1d:69:
67:34:c1:37:54:b5:bd:f1:49:b5:aa:7e:12:46:cb:
bd:3a:87:9d:d5:33:15:82:bb:f6:f7:5a:b5:13:6a:
a2:b2:3b:a4:ac:aa:9e:40:72:a7:71:1c:92:a7:a8:
08:aa:9d:d6:05:c9:61:7c:28:d1:c0:a9:89:17:b4:
e5:e4:3c:0b:47:fa:87:c1:c6:8c:de:ad:b2:d1:75:
79:27:bc:e2:ab:70:59:3b:1e:8c:6a:5d:0c:f7:d6:
b8:f8:b3:84:92:cd:62:b4:2d:cf:85:40:e5:e3:61:
fb:77:37:f6:51:c9:72:b7:67:2a:a6:ac:fb:bb:e7:
2a:8e:ce:df:d0:ee:d0:1a:41:94:08:91:ea:79:97:
ee:70:06:31:f0:42:b4:63:95:5d:be:d7:8d:ff:b6:
66:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BA:F6:8A:4E:78:8A:0D:A8:D2:8F:8D:84:8E:3A:F1:78:F6:76:A0
X509v3 Authority Key Identifier:
keyid:29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/vLr2ik54ig2o0o-NhI468Xj2dqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.231.0/24
Signature Algorithm: sha256WithRSAEncryption
33:4b:3c:0d:18:5a:17:e7:d0:91:12:7f:00:f7:6e:75:aa:0d:
eb:01:ff:6c:22:7f:f6:de:33:8c:73:da:2f:77:cc:55:10:6b:
c1:52:15:fd:44:8a:a5:9c:40:0a:f1:aa:ea:43:7e:d1:c2:a9:
81:5e:a3:d3:f1:25:97:3f:a2:2d:e1:b8:9e:fd:9a:2a:29:3c:
1d:e0:a1:55:7b:7a:55:e1:60:2d:f5:58:0b:5a:ed:ad:3e:8b:
0a:4a:4e:8c:70:5a:77:04:6b:c5:af:96:e4:76:9a:28:74:e7:
4a:b5:dc:b2:e1:8d:20:44:13:60:e5:15:b9:b9:fd:71:23:5c:
59:e6:b2:74:24:f7:75:89:fd:34:2f:78:d7:95:a0:b9:11:93:
9f:b8:81:c2:f7:4e:b7:3f:3f:f3:3c:4d:85:e9:f3:a6:b6:9a:
a8:28:3f:a6:35:b6:89:c7:72:8e:cf:ba:a0:af:c7:36:ed:eb:
b1:10:0b:62:93:2c:cc:89:c5:a3:23:4c:c7:ee:6d:4d:31:a4:
86:af:3b:38:73:b4:1a:a7:cf:35:57:a8:1b:d1:1d:e3:74:8a:
4f:91:d7:8f:1e:60:80:67:71:c8:54:00:a2:5a:49:3a:5e:ce:
cf:80:ab:53:df:30:8e:fe:98:b1:6c:58:d1:99:b3:7c:af:ca:
ac:5a:25:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:03 2024 by rpki-client on console-fra.rpki-client.org