Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/BsuAEbo9xdDKU6uhC51ddOOawGM.roa
File: BsuAEbo9xdDKU6uhC51ddOOawGM.roa (raw, json)
Hash identifier: 2wDBOiAnV95LpLRlpMQ/Bomr1NPe5IwVOTqILY3v3vU=
Subject key identifier: 06:CB:80:11:BA:3D:C5:D0:CA:53:AB:A1:0B:9D:5D:74:E3:9A:C0:63
Certificate issuer: /CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Certificate serial: 033DCD92
Authority key identifier: 55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/BsuAEbo9xdDKU6uhC51ddOOawGM.roa
Signing time: Wed 23 Mar 2022 13:20:09 +0000
ROA not before: Wed 23 Mar 2022 13:20:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208115
IP address blocks: 45.157.55.0/24 maxlen: 24
45.157.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54381970 (0x33dcd92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5598ae5d5f12825a84e6c401c013ca5e5dcd9ec9
Validity
Not Before: Mar 23 13:20:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=06cb8011ba3dc5d0ca53aba10b9d5d74e39ac063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e5:71:8d:c5:75:3e:8e:bf:29:c4:8b:30:60:
eb:67:55:d2:bd:99:24:23:16:a6:64:a7:c4:2b:5e:
31:e7:c8:bd:a3:c1:ef:ff:0d:ef:5a:60:ea:80:be:
e8:5f:2d:41:53:80:1f:6c:90:d9:26:f9:07:5b:58:
1f:73:76:d0:d8:10:b3:1d:f8:42:e9:40:1d:26:35:
da:d7:31:46:6c:8a:ed:e6:4e:30:a4:6c:34:a2:2c:
6a:7b:97:c1:e0:8c:0b:1f:0e:2c:b2:04:14:b1:fb:
ae:0c:3a:ee:fa:ba:37:e4:19:2e:d4:1e:1a:0b:e8:
a4:4e:a8:69:4c:05:22:2c:f8:1e:9c:b0:30:5b:55:
0e:c8:ac:81:56:e1:7d:a1:0f:ab:75:77:0d:a8:06:
6c:77:1c:95:0e:63:ec:05:eb:dc:d3:16:56:d3:af:
5f:f1:2b:9e:d6:34:6f:f2:d4:2a:5e:04:13:a9:d4:
e1:8b:bb:05:a9:fd:3f:34:5a:a4:9b:6d:e6:88:bc:
0b:8a:6a:32:fa:5b:d0:9d:8b:72:dc:c1:14:2e:2c:
7b:b7:8b:69:0b:fa:77:0e:f7:d9:7e:9f:02:0b:1b:
d9:bb:77:5f:5f:cb:0b:07:73:b6:94:b1:a2:3e:ec:
0d:bd:d0:31:36:9a:9e:39:28:73:c0:d1:1d:06:f6:
fc:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CB:80:11:BA:3D:C5:D0:CA:53:AB:A1:0B:9D:5D:74:E3:9A:C0:63
X509v3 Authority Key Identifier:
keyid:55:98:AE:5D:5F:12:82:5A:84:E6:C4:01:C0:13:CA:5E:5D:CD:9E:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZiuXV8SglqE5sQBwBPKXl3Nnsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/BsuAEbo9xdDKU6uhC51ddOOawGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/1f6073-87b2-4bb3-acb7-5c3db98bf864/1/VZiuXV8SglqE5sQBwBPKXl3Nnsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.53.0/24
45.157.55.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:81:77:10:c0:a5:7f:ae:4e:05:7c:44:df:f4:a9:b7:cf:3a:
3b:a5:cf:21:f2:1c:05:ce:b7:4d:ed:b3:9f:11:fd:f7:46:b5:
91:b6:82:18:68:56:fa:4b:82:62:75:0a:3f:f1:9e:93:20:60:
5a:11:fb:72:6d:79:9d:af:ae:2e:a8:56:de:b1:86:bf:7b:85:
ac:34:ae:90:5d:49:b2:d6:d8:bf:fc:3e:be:ae:4a:a3:9f:d2:
7f:58:aa:e0:40:49:f7:16:77:d0:4b:9e:e9:be:34:01:e0:af:
4c:bc:30:b5:3e:28:c8:18:1e:86:4c:6b:c9:85:c4:b7:28:2e:
f8:d3:53:02:1f:bf:81:e3:ea:8f:4c:3e:72:9e:05:76:b4:b3:
f8:43:d2:1d:a8:4f:98:06:17:c5:e1:20:fd:b4:11:c7:53:e4:
ac:77:d4:86:c8:32:3d:7c:27:f4:68:3b:c2:bd:4e:8b:d5:75:
17:d9:bb:21:ae:c0:96:25:f0:43:33:07:f1:73:3f:ce:4f:38:
62:77:83:e9:92:66:ab:79:97:24:2a:d0:0d:b2:83:09:4f:8e:
07:f3:e2:b5:c2:75:ef:e8:96:50:4a:9a:c0:b5:a4:5a:d9:0a:
59:ec:df:c6:f9:fb:d6:f5:bf:11:6f:03:60:bc:c0:c2:87:42:
48:76:dc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:16 2024 by rpki-client on console-fra.rpki-client.org