Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/oAQdhfuZqljv5SkVbrE0LqUMqLM.roa
File: oAQdhfuZqljv5SkVbrE0LqUMqLM.roa (raw, json)
Hash identifier: IFACDj6x7Jqd7TDEnAMWYBWUU2K600q1F7YqOGAqW+Y=
Subject key identifier: A0:04:1D:85:FB:99:AA:58:EF:E5:29:15:6E:B1:34:2E:A5:0C:A8:B3
Certificate issuer: /CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
Certificate serial: 04BB6D3B
Authority key identifier: A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/oAQdhfuZqljv5SkVbrE0LqUMqLM.roa
Signing time: Sat 01 Jan 2022 09:53:26 +0000
ROA not before: Sat 01 Jan 2022 09:53:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35009
IP address blocks: 45.82.181.0/24 maxlen: 24
45.82.182.0/23 maxlen: 23
45.82.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79392059 (0x4bb6d3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a83f1debd5d4784843faa288b2e01c88506c1cc9
Validity
Not Before: Jan 1 09:53:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a0041d85fb99aa58efe529156eb1342ea50ca8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:25:19:71:f9:87:18:05:07:91:e4:d0:50:db:
ed:d4:52:28:5f:07:da:66:a9:d0:a3:e4:9a:e8:b4:
ee:df:9c:4d:8e:b9:80:3e:7f:e7:97:72:fd:fc:79:
48:77:3c:c0:8a:7d:3f:d5:57:a3:55:5d:a1:c4:66:
c9:d7:47:9c:68:a7:07:cf:00:00:ec:f5:43:0b:33:
95:9c:5f:12:a3:aa:34:7f:22:4e:82:c4:d3:35:eb:
e0:f4:54:13:94:d9:0e:af:74:dd:37:75:cd:04:10:
2d:a1:a4:c8:ae:5f:55:d2:e4:7f:17:66:d0:c5:3f:
5f:f5:09:7f:35:4f:3c:23:29:59:3a:2d:61:51:08:
cb:e6:d3:e5:b8:66:b1:9a:56:25:28:2b:a1:36:4e:
74:c7:a8:cf:d6:29:7c:ec:d1:62:d6:ad:24:41:54:
3e:e9:18:ef:6b:d7:46:70:6a:7a:09:73:ba:8e:a3:
a7:84:b8:d2:d8:01:34:70:d7:fc:25:9e:16:f8:94:
6f:24:cd:63:56:bc:d6:df:97:88:51:7e:83:db:2b:
85:6c:9d:e8:5c:8f:be:85:8c:a4:d2:95:d8:a1:ca:
65:1d:e4:75:56:55:a6:3c:57:41:25:87:d5:97:c8:
bc:65:0a:4e:78:1f:da:1f:84:a8:c9:98:8b:5b:6a:
c4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:04:1D:85:FB:99:AA:58:EF:E5:29:15:6E:B1:34:2E:A5:0C:A8:B3
X509v3 Authority Key Identifier:
keyid:A8:3F:1D:EB:D5:D4:78:48:43:FA:A2:88:B2:E0:1C:88:50:6C:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qD8d69XUeEhD-qKIsuAciFBsHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/oAQdhfuZqljv5SkVbrE0LqUMqLM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/393a0f-e456-46e2-a754-e46c13b1c76d/1/qD8d69XUeEhD-qKIsuAciFBsHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.180.0/22
Signature Algorithm: sha256WithRSAEncryption
11:26:b3:eb:71:75:8a:b5:32:9f:8e:5a:a0:4c:60:77:c1:32:
d2:ae:cf:04:16:1c:98:8c:58:64:cd:8a:f1:d8:bc:9d:da:92:
3c:7c:88:73:b9:66:36:e5:55:d2:b1:80:a1:98:18:32:ba:a2:
0d:3e:c8:7c:b5:38:f1:9d:96:e1:12:c3:9f:51:83:de:4c:a3:
ef:be:78:e7:48:7f:87:87:0d:bd:fa:1f:f9:2e:1d:22:31:66:
a8:45:ff:47:8f:1f:48:11:63:99:9a:f1:c7:1b:c6:6a:29:c1:
90:b5:2c:60:a0:1f:20:c5:7e:1e:f8:da:e2:44:84:b9:ed:52:
6b:92:63:c4:3a:21:37:ef:e3:79:05:b1:00:44:1e:5c:46:02:
2c:b7:ec:6c:f7:94:65:1d:ef:5e:df:40:ff:5f:c9:0a:b5:a1:
2f:40:c6:c7:71:d4:79:d9:60:38:4d:64:9f:59:37:4b:59:63:
22:7d:bb:cb:be:78:3a:44:42:24:f2:23:cd:70:0d:9d:11:ec:
25:ae:dc:cd:d7:4a:5e:52:87:31:02:cc:f6:9e:62:60:18:72:
5b:0b:47:43:c6:a7:91:7e:97:a3:a8:7f:f2:cb:4b:2b:36:80:
2e:d5:59:61:1e:69:d6:eb:c8:48:95:79:44:55:df:52:3d:e1:
a6:55:67:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:50 2024 by rpki-client on console-fra.rpki-client.org