Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/4Q3RgQmYPw1SW6etADQEK8fempo.roa
File: 4Q3RgQmYPw1SW6etADQEK8fempo.roa (raw, json)
Hash identifier: dgcanoVj1rVIPPtnDN3a1/1KmgRgdTZtoUb+McsqxQ8=
Subject key identifier: E1:0D:D1:81:09:98:3F:0D:52:5B:A7:AD:00:34:04:2B:C7:DE:9A:9A
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 0266D921
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/4Q3RgQmYPw1SW6etADQEK8fempo.roa
Signing time: Sat 01 Jan 2022 15:03:50 +0000
ROA not before: Sat 01 Jan 2022 15:03:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3214
IP address blocks: 45.149.7.0/24 maxlen: 24
45.149.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40294689 (0x266d921)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Jan 1 15:03:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e10dd18109983f0d525ba7ad0034042bc7de9a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7d:26:4f:4c:d3:5a:39:d2:04:e0:6b:5c:e4:
b3:3c:d5:e8:86:0a:eb:61:df:22:13:a1:8d:6a:87:
b3:50:ff:b7:b5:9e:91:6f:d8:a6:cc:bf:1e:0a:29:
33:6f:f2:6e:6c:2d:c2:5d:58:08:55:12:6e:db:dc:
c6:2e:95:97:32:0d:dd:07:bd:b1:b0:19:8f:34:a7:
6e:5f:c0:65:72:5f:24:33:00:f6:a7:00:29:e1:47:
7a:3e:96:94:44:57:eb:8a:05:37:4e:cb:61:1c:4e:
96:f2:fb:61:7c:ce:f9:7b:1a:ff:5e:d2:41:90:d4:
c5:40:ea:6e:d6:df:81:62:83:86:19:cc:0c:a1:4e:
e0:ff:3d:ac:c6:62:6b:c4:30:89:2d:8d:b3:f9:0c:
93:4e:3c:fb:6f:23:83:32:24:24:e5:d4:62:f8:48:
56:c4:01:f9:ef:47:f3:f7:bc:70:9a:f4:d6:e6:24:
5e:4e:f4:a0:82:64:0f:42:76:2d:55:7a:ef:5b:18:
52:72:e6:40:1c:44:c1:6e:3e:fe:93:5d:52:eb:6e:
20:5f:6f:b4:6d:53:0a:f4:49:34:fe:b1:0c:16:a9:
c8:f3:44:a0:0d:f2:16:c3:6c:21:29:0f:f0:7a:0e:
e4:66:b6:1b:32:08:1f:ec:18:66:4f:33:cb:be:c5:
dc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0D:D1:81:09:98:3F:0D:52:5B:A7:AD:00:34:04:2B:C7:DE:9A:9A
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/4Q3RgQmYPw1SW6etADQEK8fempo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.6.0/23
Signature Algorithm: sha256WithRSAEncryption
49:34:6e:75:dc:32:57:7c:05:45:b4:91:de:64:c3:4d:8b:65:
85:4c:19:df:cf:0e:43:62:e0:f4:9c:74:e5:38:03:21:73:11:
90:1f:88:2c:1e:db:85:3b:ab:fb:52:3f:e9:bd:a0:81:d7:85:
3b:4d:48:69:a0:c3:e0:4c:e8:71:25:30:85:de:ee:8d:13:f9:
36:4c:16:ad:28:20:e2:f6:e1:48:3c:5f:2d:79:27:4b:14:46:
43:f0:0b:3d:7a:66:58:b6:03:84:a2:a8:2d:7c:a7:ff:7e:32:
5f:c4:0d:66:c8:12:d4:6d:51:bb:03:b6:f0:a0:5b:57:69:04:
34:30:3d:24:e7:3f:b3:60:ea:5c:4b:5e:df:32:fd:10:43:bb:
8b:93:10:df:4b:c3:f5:2f:8e:08:22:2e:47:78:22:1f:2c:b4:
48:ce:04:0c:f4:7f:6a:63:d8:2e:62:4a:a5:95:6c:3a:66:68:
e0:c9:e6:14:46:93:37:3f:d6:dd:26:e6:51:54:e2:69:93:8d:
43:c5:57:70:13:8a:0f:de:3c:b7:28:b2:1c:9f:95:68:b7:34:
43:57:e9:05:cc:04:b8:d0:bd:b7:a4:b7:a8:6a:88:e3:0b:2c:
ee:e7:61:b7:bb:ab:da:76:43:6b:fb:ea:b1:f8:9b:5a:f8:05:
d2:56:33:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:04 2024 by rpki-client on console-fra.rpki-client.org