Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/pISn175OKxHZiCrhnN9p6uwnmuA.roa
File: pISn175OKxHZiCrhnN9p6uwnmuA.roa (raw, json)
Hash identifier: hNG3OgIQdeF+yGNns1EIf75dF1/o/U29KBCDx7ypDgg=
Subject key identifier: A4:84:A7:D7:BE:4E:2B:11:D9:88:2A:E1:9C:DF:69:EA:EC:27:9A:E0
Certificate issuer: /CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Certificate serial: 06779CE7
Authority key identifier: 5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/pISn175OKxHZiCrhnN9p6uwnmuA.roa
Signing time: Wed 11 May 2022 13:59:31 +0000
ROA not before: Wed 11 May 2022 13:59:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211975
IP address blocks: 45.152.176.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108502247 (0x6779ce7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Validity
Not Before: May 11 13:59:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a484a7d7be4e2b11d9882ae19cdf69eaec279ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:95:d9:22:71:39:19:36:5f:5a:0b:a4:42:46:
e6:dd:db:48:b4:34:37:87:3d:72:24:50:ce:af:1b:
06:4b:88:90:52:ae:f7:08:c4:aa:84:07:48:82:b9:
e8:29:e7:a0:51:ac:cd:71:cd:a5:7c:d0:58:78:4e:
72:50:13:88:56:12:f0:13:63:37:e0:63:6b:86:49:
f0:18:18:08:ed:c8:40:b2:7f:f9:4c:fa:a5:c3:2d:
e3:c7:ed:ef:81:e3:83:fd:29:a7:e0:fd:46:40:b9:
4d:43:46:9f:fc:22:e6:e9:23:2f:e4:a7:08:ce:78:
5c:09:fe:0b:35:ea:58:41:d8:ac:5c:93:51:d0:a3:
9e:aa:3d:d4:67:6c:c8:04:56:67:eb:b8:bb:af:39:
a5:16:54:ea:66:7d:8c:c8:af:f5:85:f1:44:56:8d:
e7:30:a6:cb:1a:b7:e9:db:6f:96:60:28:1e:a3:72:
33:86:a3:ce:96:d2:88:af:ee:25:33:a6:57:96:e2:
b9:2c:e4:46:f5:c1:67:92:67:40:f0:76:8c:1b:5a:
7b:62:48:2e:08:76:d1:84:4c:25:ec:bd:42:f9:66:
1a:db:6b:6d:07:17:c9:69:cc:59:3f:a8:2b:c5:71:
44:42:32:ed:93:5b:6e:80:01:30:a3:ce:a0:89:89:
bb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:84:A7:D7:BE:4E:2B:11:D9:88:2A:E1:9C:DF:69:EA:EC:27:9A:E0
X509v3 Authority Key Identifier:
keyid:5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/pISn175OKxHZiCrhnN9p6uwnmuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.176.0/24
Signature Algorithm: sha256WithRSAEncryption
38:c2:b8:e1:e6:7e:db:22:9a:fc:db:5c:5a:78:ce:f9:4b:06:
86:4e:1f:a6:0a:09:36:51:c1:7f:f0:d4:52:57:c6:9c:b9:5d:
ff:eb:44:d2:92:14:c7:e0:7c:85:17:0c:01:c9:61:f5:d8:e6:
4e:6d:89:56:a8:5b:09:f8:e5:93:91:fc:00:b4:e7:57:52:f8:
c2:bb:1f:a2:28:cf:b2:33:c6:ab:21:af:41:d9:86:7f:d1:3c:
07:37:85:94:f7:94:dd:7e:a7:eb:27:61:b8:2b:5c:90:90:17:
91:dd:30:88:a8:c6:68:ab:ff:c9:51:71:52:2f:a1:09:cc:79:
c9:b1:5a:27:bb:8a:f5:a4:f4:60:3d:2d:78:48:b8:fe:9a:4c:
e1:60:cc:b8:32:75:e9:fe:4f:18:f5:3b:e2:b5:fc:69:80:2a:
14:f6:6c:86:d6:65:ce:9a:3c:70:0c:1f:ae:c1:21:1a:02:2c:
fe:0d:8d:31:6d:34:5a:04:0c:35:51:bb:cb:c3:09:15:a1:20:
43:85:5d:60:b3:62:bb:30:0f:c6:07:40:50:71:6a:1b:27:d1:
0a:9a:26:0c:df:02:7a:76:ff:ea:68:87:b5:0d:d2:08:3c:dc:
9f:9b:8b:62:18:02:52:da:91:77:d6:3f:18:22:6a:83:38:c2:
f9:54:5e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:06 2023 by rpki-client on console-fra.rpki-client.org