Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/TOKn2R34oD1aOgsFt_KHbGi3Eqk.roa
File: TOKn2R34oD1aOgsFt_KHbGi3Eqk.roa (raw, json)
Hash identifier: vr3sduJVOXGpqyGYYMXJMqhU/0xZTRN6WuyodgKsSz4=
Subject key identifier: 4C:E2:A7:D9:1D:F8:A0:3D:5A:3A:0B:05:B7:F2:87:6C:68:B7:12:A9
Certificate issuer: /CN=6832c32d2259013991260d530d9120031aaefcd0
Certificate serial: 0182B108009DE4DB27A1CD040F20DB6B84EB
Authority key identifier: 68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/TOKn2R34oD1aOgsFt_KHbGi3Eqk.roa
Signing time: Thu 18 Aug 2022 12:57:47 +0000
ROA not before: Thu 18 Aug 2022 12:57:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8075
IP address blocks: 145.46.160.0/24 maxlen: 24
145.46.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:b1:08:00:9d:e4:db:27:a1:cd:04:0f:20:db:6b:84:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6832c32d2259013991260d530d9120031aaefcd0
Validity
Not Before: Aug 18 12:57:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ce2a7d91df8a03d5a3a0b05b7f2876c68b712a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:da:58:70:39:09:f5:41:24:9c:a1:d6:69:72:
35:b3:89:47:6a:4d:0f:8c:17:8b:01:17:d3:c1:4f:
2f:79:00:64:9f:e7:93:63:d7:c3:a3:70:ef:07:c8:
14:b4:a1:b2:91:b5:a2:11:c9:0d:9c:59:57:0b:76:
a9:d8:b0:96:b1:96:49:5e:45:2f:3c:24:2e:4d:43:
11:fa:28:1d:64:7c:0d:b8:19:82:17:47:bf:b4:81:
84:94:ea:af:64:52:1f:db:47:04:68:b2:d6:a8:43:
f8:c8:e2:a6:10:4c:c5:50:08:6e:1a:ad:05:76:fb:
4f:d2:42:25:31:2a:5e:64:07:60:6b:46:62:e6:aa:
27:35:8f:73:d8:48:34:41:64:22:33:1e:11:f5:6f:
f5:20:d5:31:d8:40:22:9b:d9:06:58:a8:de:c0:ae:
ef:b1:cd:8a:c6:4e:9b:d0:c6:70:9f:34:05:bc:54:
22:81:de:8f:82:85:64:a9:29:4e:4c:b7:b4:f4:ef:
96:1b:58:25:a0:bf:b2:37:2f:bb:dc:b5:6d:1c:3e:
4c:a7:ce:5f:d2:74:ec:b9:2b:9f:35:85:fa:ec:7f:
36:59:8b:17:9c:81:ee:8c:e5:84:1d:24:f7:7a:79:
d4:d8:33:44:30:2b:ce:af:5a:d9:41:6e:ba:c9:dc:
19:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E2:A7:D9:1D:F8:A0:3D:5A:3A:0B:05:B7:F2:87:6C:68:B7:12:A9
X509v3 Authority Key Identifier:
keyid:68:32:C3:2D:22:59:01:39:91:26:0D:53:0D:91:20:03:1A:AE:FC:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aDLDLSJZATmRJg1TDZEgAxqu_NA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/TOKn2R34oD1aOgsFt_KHbGi3Eqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/94b66e-3e0d-4332-ab4f-770f8eab2ae7/1/aDLDLSJZATmRJg1TDZEgAxqu_NA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.46.160.0/23
Signature Algorithm: sha256WithRSAEncryption
66:65:5b:39:39:86:80:43:d0:96:95:35:b3:ad:10:f7:97:7c:
59:fa:33:ec:ff:39:c1:b7:a5:1f:2b:0f:65:55:0d:38:5e:de:
e0:ef:2f:58:54:57:37:64:15:cb:f2:c3:09:3c:70:ed:67:37:
5a:39:19:be:50:8c:60:08:66:c6:cd:a5:e0:5c:f1:e2:eb:6e:
d3:f2:8f:6a:24:18:97:25:9c:15:38:f1:34:42:aa:87:9e:ce:
33:e0:2d:8b:67:82:31:47:74:72:99:b8:c5:56:dd:14:0d:e2:
fe:4f:fb:2a:24:54:f4:76:86:e4:4c:01:13:ff:19:89:ab:4c:
d3:6e:fa:c1:9c:b4:cd:65:f3:de:13:23:0f:0a:d0:44:b6:2e:
71:33:8d:ed:db:3f:b1:f5:f1:b3:0d:f1:70:43:23:b6:7e:23:
7b:b4:16:b1:1d:28:3a:34:c9:6d:1c:04:90:ea:fd:56:09:8b:
b0:34:52:9b:42:94:6d:2e:8c:41:df:11:ce:fa:cd:87:39:f9:
d4:20:9e:72:40:e3:14:f3:14:6a:e8:9a:6f:fe:40:81:39:f1:
66:dd:55:d1:12:b1:97:e9:33:45:85:83:7f:d3:e6:5c:26:59:
ee:ae:94:c2:23:81:26:21:b6:f7:28:23:d7:ac:b3:20:9f:8b:
03:15:d1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:20 2024 by rpki-client on console-fra.rpki-client.org