Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/6ZdxPCyKcxIc41m1ISsDB02BON4.roa
File: 6ZdxPCyKcxIc41m1ISsDB02BON4.roa (raw, json)
Hash identifier: V/4CrkpmF3TpQ/2tuAG8TndJDYzKRL9rCS7GHjuMaOY=
Subject key identifier: E9:97:71:3C:2C:8A:73:12:1C:E3:59:B5:21:2B:03:07:4D:81:38:DE
Certificate issuer: /CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
Certificate serial: 9EC295
Authority key identifier: B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/6ZdxPCyKcxIc41m1ISsDB02BON4.roa
Signing time: Sat 01 Jan 2022 02:57:05 +0000
ROA not before: Sat 01 Jan 2022 02:57:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14618
IP address blocks: 45.152.134.0/24 maxlen: 24
45.152.135.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10404501 (0x9ec295)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1814a28a8c1ebe0adc33a1519b9883e3084bb59
Validity
Not Before: Jan 1 02:57:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e997713c2c8a73121ce359b5212b03074d8138de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:59:9c:90:90:ff:23:08:a2:2b:f0:0f:64:43:
5e:5f:4b:d6:7e:cb:39:c1:bf:15:fd:0d:4b:f9:cf:
43:4b:08:9a:65:56:cc:ae:ce:c3:9e:9a:4b:69:df:
3d:f9:16:39:25:1a:e3:b4:c1:3c:8d:b6:b1:6e:e9:
62:a9:4a:7c:74:d6:14:2b:93:78:a7:37:14:3e:42:
2a:d2:50:31:ed:bc:93:ea:47:7b:ea:90:53:2a:8f:
48:a7:fb:d0:53:97:4a:d3:5d:3b:95:e0:95:11:54:
96:a2:6f:b9:77:76:d0:db:d7:79:42:fb:4f:27:23:
af:a7:e2:5f:ca:8f:9f:e6:82:be:7f:4a:03:ac:da:
41:62:5b:e4:e7:69:de:a3:c8:47:b1:f4:25:8b:ad:
7d:c3:9b:a0:a5:b3:d1:43:4b:30:11:84:90:9f:23:
d2:59:b8:ce:8b:9f:a4:cd:7b:d6:b1:d6:75:25:ed:
4d:ee:c0:52:fe:fe:c2:b4:3d:20:2b:78:2e:4e:a4:
5e:da:cc:49:46:15:ff:d3:ed:7c:7d:9c:03:09:bc:
7d:7b:28:53:1f:34:ab:ec:38:6b:d3:27:26:26:26:
6b:9f:90:87:88:fd:d6:be:9a:aa:ef:96:b4:af:11:
d8:ec:80:99:f2:72:c7:be:40:2c:b4:97:c2:ff:4c:
2a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:97:71:3C:2C:8A:73:12:1C:E3:59:B5:21:2B:03:07:4D:81:38:DE
X509v3 Authority Key Identifier:
keyid:B1:81:4A:28:A8:C1:EB:E0:AD:C3:3A:15:19:B9:88:3E:30:84:BB:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sYFKKKjB6-CtwzoVGbmIPjCEu1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/6ZdxPCyKcxIc41m1ISsDB02BON4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3fbff6-73ee-4812-8e4b-81dabc81c05c/1/sYFKKKjB6-CtwzoVGbmIPjCEu1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.134.0/23
Signature Algorithm: sha256WithRSAEncryption
29:bb:31:66:e9:4a:9d:6f:b5:1f:f4:88:d2:8f:94:6b:9e:5d:
47:a8:a4:81:24:7d:43:a8:d0:1d:28:13:37:0a:af:be:03:0b:
3a:14:e7:1c:5e:38:7f:07:a5:93:53:5e:97:ff:b8:b2:99:ce:
6e:86:26:52:b7:67:2a:08:d2:4b:c4:65:dc:2c:44:64:6d:38:
aa:2f:94:b1:c6:7c:92:df:f1:50:aa:dd:b0:1f:b8:0b:d4:3d:
74:28:1b:58:07:2e:0d:43:d6:89:d7:e3:a5:b6:ba:73:b1:7b:
11:a5:85:b5:77:8e:dd:17:61:ad:01:b2:53:ee:f8:d4:06:c0:
ba:a7:87:db:62:7e:ef:94:ea:18:72:99:0f:e6:b9:32:fa:a0:
0c:23:f1:52:c6:17:ec:7a:a0:d0:e8:e2:92:30:23:eb:cd:85:
7b:0d:86:12:d4:9a:e1:50:a8:cc:83:79:2b:d2:9d:28:93:ea:
af:b5:21:80:86:d4:92:65:0e:9c:25:43:6e:4f:45:5d:e5:01:
8b:d4:e9:38:5c:ec:91:17:f7:de:c9:8c:70:0c:e5:4d:fc:47:
ba:72:e6:69:42:c2:5c:08:c7:09:e9:ac:32:6b:f4:10:df:08:
d9:98:c7:9f:99:50:c8:9b:88:23:2b:7b:f7:4a:b3:fb:e4:76:
fe:6e:a5:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:25 2024 by rpki-client on console-ams.rpki-client.org