Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/hIKq-P4y8CKm21EJzrmtERUyKew.roa
File: hIKq-P4y8CKm21EJzrmtERUyKew.roa (raw, json)
Hash identifier: T1RpKi1qMJ1MIl3HMhQ3aAzUqZ9gvyz3qrvvV13WUu4=
Subject key identifier: 84:82:AA:F8:FE:32:F0:22:A6:DB:51:09:CE:B9:AD:11:15:32:29:EC
Certificate issuer: /CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d
Certificate serial: 0813D739
Authority key identifier: D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/hIKq-P4y8CKm21EJzrmtERUyKew.roa
Signing time: Sat 01 Jan 2022 15:01:12 +0000
ROA not before: Sat 01 Jan 2022 15:01:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.91.61.0/24 maxlen: 24
45.91.63.0/24 maxlen: 24
45.91.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135518009 (0x813d739)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65c1b7d9f04c7f04327e6c446416e2f8c31d57d
Validity
Not Before: Jan 1 15:01:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8482aaf8fe32f022a6db5109ceb9ad11153229ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c6:96:11:10:d1:62:87:c3:a2:4c:33:38:bc:
25:c9:f1:64:eb:20:36:c6:8a:6a:80:28:ca:d3:b7:
ff:72:f7:80:c3:93:d0:63:2c:fe:15:34:4b:3f:d6:
87:2a:a3:44:68:b8:a5:71:1a:35:78:12:2c:84:8b:
66:10:7f:45:e0:e3:d8:5f:0d:f0:ad:a7:af:f6:04:
35:51:c6:1d:aa:2d:d9:d9:4b:a8:19:d9:05:1e:93:
38:6c:d4:76:19:f5:06:75:c8:7a:17:7b:01:4b:dc:
6c:f5:db:8d:ff:37:45:70:2f:76:01:1f:f6:9d:2f:
76:f9:fc:ed:36:d1:23:de:d3:78:e1:59:9c:a4:35:
d3:e0:4f:ee:79:52:d8:c1:89:8e:5d:a7:15:9c:92:
9d:fe:41:3e:cd:dc:5c:6f:22:e1:e2:e5:1e:1a:4e:
1e:ba:07:11:d9:de:c6:0c:35:de:19:6b:07:69:f2:
92:2c:63:96:07:c3:4c:43:a1:85:de:c0:da:4d:7d:
0c:8b:bf:68:0c:3b:e1:15:7c:a9:cf:d8:d0:3f:b1:
61:bb:b8:84:5e:0d:a3:aa:3b:d7:04:55:05:97:f1:
de:69:57:5a:3d:fc:2f:c0:2c:b5:ab:0d:96:98:de:
4c:83:50:89:ec:08:67:b7:ae:6b:35:e5:2e:73:86:
d5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:82:AA:F8:FE:32:F0:22:A6:DB:51:09:CE:B9:AD:11:15:32:29:EC
X509v3 Authority Key Identifier:
keyid:D6:5C:1B:7D:9F:04:C7:F0:43:27:E6:C4:46:41:6E:2F:8C:31:D5:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/hIKq-P4y8CKm21EJzrmtERUyKew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/96d072-d129-42be-a75f-110ea8585354/1/1lwbfZ8Ex_BDJ-bERkFuL4wx1X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.61.0-45.91.63.255
Signature Algorithm: sha256WithRSAEncryption
a6:76:10:99:29:2f:33:cd:fc:20:6e:f5:83:3c:d5:df:83:13:
81:d9:7d:7c:30:5d:b5:13:40:1a:56:0b:0e:02:7d:13:87:60:
46:7b:db:57:c3:cc:ee:68:bd:e9:b9:d9:c7:70:5f:51:48:43:
a0:72:94:8b:46:c6:56:7c:d2:9e:a7:51:5b:c1:ac:1a:d1:6b:
5b:d4:9e:aa:ff:73:e5:c3:bf:38:3a:dd:54:14:55:c2:49:97:
5c:4a:f0:08:35:77:dc:e7:dc:90:35:c3:20:59:f7:0b:ba:32:
f4:99:53:34:17:83:b9:b0:02:78:bb:1d:4a:f5:6c:49:30:44:
38:06:b4:c6:2d:ba:d1:9b:9d:91:f6:ec:0e:61:8c:6b:9d:07:
37:4a:f5:bf:1e:95:d0:8e:ba:ac:2f:aa:2a:e0:8c:06:a7:4c:
41:f7:9c:88:8e:6d:78:12:20:da:21:db:4c:c8:ff:54:fc:aa:
9f:84:49:e7:f9:ae:5a:41:c9:91:a2:d2:d2:c1:a5:59:25:62:
d5:7a:3d:eb:cc:50:c3:f5:ed:ab:bf:92:65:0c:da:18:2c:ad:
4a:7c:2f:42:61:b1:ab:e4:62:38:3e:12:bb:49:a7:1c:53:fd:
22:1d:3f:d4:16:66:c7:9c:17:11:35:ba:1c:7f:99:16:62:1f:
94:05:03:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:46:20 2024 by rpki-client on console-ams.rpki-client.org