Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/0w3GyaB95ew8YoObc_2QK8cTvGY.roa
File: 0w3GyaB95ew8YoObc_2QK8cTvGY.roa (raw, json)
Hash identifier: +XkeON4HLH99qeQkIUIFbULS9QZzsg4I1v7Vc5q0aq0=
Subject key identifier: D3:0D:C6:C9:A0:7D:E5:EC:3C:62:83:9B:73:FD:90:2B:C7:13:BC:66
Certificate issuer: /CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Certificate serial: 05AC75F9
Authority key identifier: 49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/0w3GyaB95ew8YoObc_2QK8cTvGY.roa
Signing time: Sat 01 Jan 2022 08:52:46 +0000
ROA not before: Sat 01 Jan 2022 08:52:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44066
IP address blocks: 45.81.232.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 95188473 (0x5ac75f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Validity
Not Before: Jan 1 08:52:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d30dc6c9a07de5ec3c62839b73fd902bc713bc66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4d:4a:45:f7:de:00:a2:6b:a0:42:88:aa:31:
4c:7c:ba:a7:3f:89:47:64:c6:2a:d6:50:e5:da:b4:
14:80:13:66:c2:d1:67:ff:e2:7f:5c:5e:41:01:d8:
8b:52:a2:41:15:95:57:ca:76:cd:e3:2b:a7:30:6c:
b0:8e:f7:aa:73:dd:7c:54:45:d7:32:63:4e:a3:49:
b2:a1:06:4c:0c:be:02:58:1f:0a:8d:90:55:57:c1:
94:93:3c:80:10:6d:07:e9:92:e8:68:d4:d6:f8:b5:
e6:78:5b:3d:f3:e3:22:61:78:ed:7c:0b:db:ca:4e:
11:d5:a5:0e:2a:c6:10:c7:75:ff:c8:f1:55:92:7e:
83:71:31:43:d7:16:e7:f8:4a:66:fc:75:bb:87:2d:
57:19:fc:a9:de:1e:28:3a:4d:2a:2d:3d:95:10:ca:
ef:f8:eb:8f:df:c1:de:32:5f:77:ff:9b:c0:7e:fd:
d9:30:b6:40:82:b2:07:ce:46:5a:d6:6a:41:28:da:
7c:25:58:4c:fe:99:5e:d5:07:fd:6c:da:33:8f:a7:
d5:25:ce:54:91:05:f6:17:e0:ef:65:3f:c9:83:ba:
1f:63:cd:38:73:60:9f:2e:0c:7e:bd:cb:4c:3c:5a:
85:cc:ee:7f:ea:0a:46:8e:6c:e4:9b:4a:38:13:8d:
6f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0D:C6:C9:A0:7D:E5:EC:3C:62:83:9B:73:FD:90:2B:C7:13:BC:66
X509v3 Authority Key Identifier:
keyid:49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/0w3GyaB95ew8YoObc_2QK8cTvGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.232.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:89:11:b7:73:37:1d:09:0b:fd:d6:7c:c4:fc:fd:f5:48:56:
66:67:51:6f:02:a6:f0:b3:af:6d:a1:f9:23:3a:e7:0e:69:55:
c9:15:14:8f:29:cb:66:58:80:37:67:3e:92:40:fb:50:ae:83:
0d:d3:01:53:c4:6a:29:b9:7d:12:a9:a2:d5:d4:4f:6c:a0:28:
36:79:55:7d:ef:27:a6:92:3e:9b:b0:e0:99:2e:c7:09:ca:15:
38:28:c1:37:f8:b2:6e:1f:4e:0c:f5:1e:1c:ee:38:a5:a2:f3:
79:ab:18:18:ed:f5:fb:1d:45:30:ba:66:39:4a:40:20:a0:15:
3f:19:6e:08:d4:c9:45:a7:e1:63:46:3b:90:6a:37:04:8c:ff:
2b:ed:8a:1c:67:7c:98:05:37:a1:56:00:73:30:1d:ca:69:41:
87:b0:98:ad:a5:bd:4c:8d:6c:16:5d:5f:e4:f8:07:1c:5f:18:
41:a7:24:fb:74:64:e0:08:bd:ea:cb:4e:34:26:5a:67:0b:0e:
8b:07:ff:bb:5e:83:30:5b:32:14:3e:76:41:9b:c1:41:7d:0c:
23:c4:63:44:4a:e4:3d:9b:ed:e1:23:b6:01:eb:7e:e4:4c:68:
d2:c4:4f:e4:a8:c2:4b:0e:9d:7d:1e:f1:ba:ae:a3:99:14:b8:
38:88:57:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:11 2024 by rpki-client on console-ams.rpki-client.org