Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/CUD_SmTEClmHrVV2P_8CBmyM9BI.roa
File: CUD_SmTEClmHrVV2P_8CBmyM9BI.roa (raw, json)
Hash identifier: MckeEYZqrSSkS+p34BUgIStFsRTmZBdUZ9lzIb4mdDo=
Subject key identifier: 09:40:FF:4A:64:C4:0A:59:87:AD:55:76:3F:FF:02:06:6C:8C:F4:12
Certificate issuer: /CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
Certificate serial: 01856FD52635B218B5281E3D58D12112EB4C
Authority key identifier: C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/CUD_SmTEClmHrVV2P_8CBmyM9BI.roa
Signing time: Mon 02 Jan 2023 00:15:17 +0000
ROA not before: Mon 02 Jan 2023 00:15:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49810
IP address blocks: 45.84.146.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:26:35:b2:18:b5:28:1e:3d:58:d1:21:12:eb:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2d82ccf0c8dea7d7f6ad72e8e62462d7be20d56
Validity
Not Before: Jan 2 00:15:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0940ff4a64c40a5987ad55763fff02066c8cf412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1c:91:3a:9f:cc:e2:24:ea:b4:d5:07:f3:8d:
c8:17:a5:ab:a7:1c:4b:b8:9b:c2:37:ff:d1:3c:a5:
60:1c:f5:30:3f:ed:fb:ad:7d:b5:54:ac:40:ec:b7:
ac:69:71:0c:17:2a:ed:dc:43:04:43:b5:92:a7:c9:
85:97:88:75:ae:57:06:af:4f:a9:27:82:7a:21:f5:
51:8f:ad:a4:c1:7a:a7:e4:50:36:27:3f:b7:12:cb:
94:ca:6e:c4:54:3a:53:2d:09:6d:08:28:a7:7b:e4:
b3:e7:b4:05:b5:b9:8d:b9:ba:9b:42:29:76:29:b6:
31:45:98:80:bf:cd:d7:3b:03:cd:cd:1e:1b:b1:00:
bd:44:39:59:64:99:72:67:44:87:94:f8:c0:cf:07:
f4:73:f0:f2:c3:5f:52:00:93:02:3e:22:20:95:b6:
e7:3a:40:c2:e3:1d:7c:42:94:4a:24:bc:86:1d:b0:
30:c6:e9:6b:4e:1a:cb:2e:14:0c:1e:68:6d:ef:c4:
51:d0:83:c8:0c:04:0e:1b:7a:6f:2b:f0:dc:c1:72:
ae:20:b8:5e:8e:51:eb:9f:5a:4a:85:89:41:9c:5d:
6b:63:9e:b6:4f:7c:51:e7:87:b8:b9:a6:4e:d2:5e:
3c:37:24:27:c5:5b:db:28:93:1c:0b:68:85:15:ec:
53:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:40:FF:4A:64:C4:0A:59:87:AD:55:76:3F:FF:02:06:6C:8C:F4:12
X509v3 Authority Key Identifier:
keyid:C2:D8:2C:CF:0C:8D:EA:7D:7F:6A:D7:2E:8E:62:46:2D:7B:E2:0D:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wtgszwyN6n1_atcujmJGLXviDVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/CUD_SmTEClmHrVV2P_8CBmyM9BI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/327952-4c66-4b95-b6de-43118e496d40/1/wtgszwyN6n1_atcujmJGLXviDVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.146.0/24
Signature Algorithm: sha256WithRSAEncryption
34:0f:f7:66:d6:61:03:a5:46:4d:49:23:3f:09:e0:18:a5:8a:
51:43:75:ea:a3:07:47:17:3f:2d:72:3b:31:29:f9:38:3f:6c:
46:33:08:09:be:b3:be:cb:45:d9:27:ca:e1:c7:4e:b8:52:95:
06:34:32:e6:d2:e5:9e:7e:ed:36:db:b1:9b:ec:bf:7d:30:6f:
d4:72:07:c3:fe:bb:a9:f2:7f:e4:c4:78:a3:d5:97:45:fa:f9:
7e:37:09:25:e8:e0:44:9c:5b:c0:c6:08:86:fc:ce:ef:36:24:
11:c8:d4:20:7a:3d:c4:22:a8:f1:e0:4a:ef:0a:b4:77:29:b0:
29:df:7a:2f:e4:f0:f1:4f:4c:b5:7f:e1:17:ee:5e:6b:36:7a:
fb:1d:be:2e:a6:7c:47:f8:d8:85:b7:f1:12:e6:48:8f:c4:c4:
06:72:8e:c7:d5:7d:23:bd:e5:0d:1c:71:e6:92:42:aa:66:4a:
d3:9f:27:6a:b1:ce:30:6d:6f:84:7f:91:a5:6a:a5:1b:dc:7f:
29:7c:89:f9:6c:db:5a:d1:26:d6:49:13:0d:b5:b6:3c:f7:a1:
75:08:5f:cb:82:65:1f:50:ea:31:6c:c9:e2:5e:0e:b6:70:53:
8b:6f:06:ce:8a:27:ae:d8:ce:22:24:d3:34:1d:ce:46:c7:04:
75:4f:92:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:50 2025 by rpki-client