Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/j34DiUo9HexWWzr2FZqWeHqzdlM.roa
File: j34DiUo9HexWWzr2FZqWeHqzdlM.roa (raw, json)
Hash identifier: /F31rNdS5xWsuSJfLmZxacLNB+UKGLINcYccUsJ5IQA=
Subject key identifier: 8F:7E:03:89:4A:3D:1D:EC:56:5B:3A:F6:15:9A:96:78:7A:B3:76:53
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 026717F5
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/j34DiUo9HexWWzr2FZqWeHqzdlM.roa
Signing time: Sat 01 Jan 2022 15:03:51 +0000
ROA not before: Sat 01 Jan 2022 15:03:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 4785
IP address blocks: 45.95.226.0/24 maxlen: 24
45.95.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40310773 (0x26717f5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Jan 1 15:03:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8f7e03894a3d1dec565b3af6159a96787ab37653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d4:b6:07:a1:78:16:a7:15:fd:d5:41:c9:74:
81:97:3d:7c:37:a2:27:ff:df:cc:86:65:85:0e:6c:
22:19:66:0b:c5:e4:a7:d3:33:09:dd:a8:44:97:9c:
fe:50:c9:6e:fa:08:30:61:7a:c6:19:c6:0c:ad:e6:
cb:0e:63:83:58:da:5f:a9:39:3d:40:69:61:dc:ab:
ba:e4:ce:59:db:fb:c9:2c:f7:eb:35:57:96:13:21:
41:4b:05:14:78:4d:e1:e0:ce:ee:04:12:6f:10:ca:
73:85:80:3d:0f:2f:63:ef:26:e4:17:94:fc:d1:ba:
91:c2:54:8b:90:dd:ee:e2:60:a1:76:57:e5:d6:92:
2d:17:8b:72:fa:75:50:9c:75:34:70:38:29:0d:6e:
65:b8:de:92:37:fe:3d:e5:80:43:1e:05:dc:3e:a7:
72:4d:45:35:3d:94:ef:22:84:51:d1:e5:ab:10:74:
22:6e:bc:ad:30:d4:d2:4f:fd:20:37:29:11:e3:60:
af:e9:fa:3a:bc:31:5c:58:15:43:62:7b:53:e3:c4:
5e:a0:dc:92:b4:9b:9c:70:6c:3a:c7:50:29:69:f3:
7d:f7:fd:40:38:5e:61:c4:83:fc:d2:4f:24:bc:45:
3d:32:ab:ce:e4:c1:52:e9:b3:c9:9c:ab:35:ef:c2:
07:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7E:03:89:4A:3D:1D:EC:56:5B:3A:F6:15:9A:96:78:7A:B3:76:53
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/j34DiUo9HexWWzr2FZqWeHqzdlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.226.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:b9:e8:38:42:dd:f9:5f:03:fb:74:64:9a:aa:ba:e4:1a:44:
16:3a:7c:f2:77:1c:7c:86:c9:74:7b:68:90:32:6a:74:b9:6b:
16:ef:39:d7:93:bc:6a:9a:9a:67:27:c7:2e:e6:4c:c1:2f:11:
3d:c8:fb:96:e3:f5:25:58:e6:6f:eb:46:9b:68:b1:5e:d9:87:
58:b7:0a:94:0c:de:fa:b3:47:bd:9c:c3:ed:28:62:1f:96:e8:
36:86:64:82:6f:11:9d:6e:41:52:a6:f6:f3:b6:1a:68:3f:14:
4a:dc:b1:4d:c8:88:73:b6:75:5d:5d:f9:3a:66:d0:18:3d:2a:
f2:49:0f:65:e5:6d:aa:b4:c0:3a:d0:27:cc:9e:f0:f8:3a:bf:
55:0f:89:c3:4e:ee:df:a8:2f:c5:e5:78:71:fc:90:49:96:92:
d3:fc:32:79:21:8d:11:d1:b0:5f:fb:82:9a:f9:d3:46:df:e4:
fd:77:8e:8d:93:cc:ab:52:6b:06:cf:8c:40:51:3c:d9:68:f5:
8d:c1:9d:13:95:4c:ce:b5:cd:16:1c:6d:fd:c0:e2:b4:79:81:
1c:6c:86:3b:ea:be:36:5c:fd:79:40:29:f0:05:c6:e3:ed:a6:
93:4a:dd:00:da:49:78:d5:ea:a4:1e:c1:b9:ed:d5:6e:f3:7d:
11:79:b4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:56 2024 by rpki-client on console-ams.rpki-client.org