Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/cHiSxGOBV-c6ineYpBrSAYWIGk4.roa
File: cHiSxGOBV-c6ineYpBrSAYWIGk4.roa (raw, json)
Hash identifier: t2Bm8a8yrvWUISCPFdX0oDGBKMHO6O3ZIU/yJw5Ply4=
Subject key identifier: 70:78:92:C4:63:81:57:E7:3A:8A:77:98:A4:1A:D2:01:85:88:1A:4E
Certificate issuer: /CN=51a0d9825103d9da4761efa91a60ea2ca758d003
Certificate serial: 06620110
Authority key identifier: 51:A0:D9:82:51:03:D9:DA:47:61:EF:A9:1A:60:EA:2C:A7:58:D0:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/cHiSxGOBV-c6ineYpBrSAYWIGk4.roa
Signing time: Sat 01 Jan 2022 07:00:11 +0000
ROA not before: Sat 01 Jan 2022 07:00:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 45.156.96.0/24 maxlen: 24
45.156.98.0/24 maxlen: 24
45.156.97.0/24 maxlen: 24
45.156.99.0/24 maxlen: 24
2a0f:1c80::/31 maxlen: 31
2a0f:1c84::/31 maxlen: 31
2a0f:1c82::/31 maxlen: 31
2a0f:1c86::/31 maxlen: 31
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107086096 (0x6620110)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51a0d9825103d9da4761efa91a60ea2ca758d003
Validity
Not Before: Jan 1 07:00:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=707892c4638157e73a8a7798a41ad20185881a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:62:29:7f:2e:a7:59:8f:20:87:93:6e:13:
42:0f:ce:b8:3e:6b:5d:6e:5b:c0:ee:0e:bd:e5:45:
a7:c6:ec:c1:fd:42:b5:69:b2:66:4a:8c:24:54:49:
e6:5b:b1:f5:54:34:fe:28:0e:be:d5:0b:f6:d0:c2:
94:7c:3d:b7:8f:90:a6:2a:72:fa:02:47:3e:de:14:
d1:c1:8f:e1:7c:49:55:d3:60:4e:f7:f9:99:36:bc:
2e:6b:63:00:82:d8:a3:b6:0b:11:73:5a:97:48:be:
e1:2d:85:2f:5e:09:c8:14:eb:0d:e5:a5:7e:5e:02:
84:d9:2e:9e:21:3e:20:58:40:5c:e1:42:9b:80:a6:
c8:32:2b:e5:a2:f2:e5:0d:ee:c8:44:06:fd:98:a9:
d6:71:29:b0:1d:09:4b:f9:d9:64:27:0d:0e:95:a0:
75:7b:1f:a3:96:80:9b:00:02:ad:12:60:73:63:54:
4f:7a:18:6f:79:fe:00:50:83:f0:a1:ba:b7:75:8d:
8f:5d:24:a6:53:7a:16:71:8f:4c:88:1a:94:fd:f8:
b9:ad:dd:26:1b:47:42:c6:1e:88:54:7b:e4:f6:b3:
81:3f:9d:b2:cf:df:d5:cf:7d:a7:f2:c0:e4:b8:21:
7a:db:73:fa:d7:13:f1:0a:91:1f:24:71:13:03:f8:
e5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:78:92:C4:63:81:57:E7:3A:8A:77:98:A4:1A:D2:01:85:88:1A:4E
X509v3 Authority Key Identifier:
keyid:51:A0:D9:82:51:03:D9:DA:47:61:EF:A9:1A:60:EA:2C:A7:58:D0:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaDZglED2dpHYe-pGmDqLKdY0AM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/cHiSxGOBV-c6ineYpBrSAYWIGk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b4f49b-75e5-4864-908e-6a3df01a3236/1/UaDZglED2dpHYe-pGmDqLKdY0AM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.96.0/22
IPv6:
2a0f:1c80::/29
Signature Algorithm: sha256WithRSAEncryption
22:68:40:a9:ef:d6:91:26:d7:41:39:25:09:0e:14:ee:2c:1a:
e0:0e:25:4d:da:e9:b2:ef:d4:90:a5:d6:eb:e2:17:bc:c6:e7:
a0:83:e9:ba:15:db:75:53:c3:e9:f8:8f:0b:ad:05:32:82:02:
11:26:06:64:46:90:a4:49:89:1d:45:26:c0:b3:1c:ec:57:55:
25:cd:ad:f7:ef:e2:d4:a5:6c:69:6d:53:e2:bd:92:a0:3e:a8:
07:11:fa:ac:d9:ae:37:b6:39:99:38:84:db:1c:ab:19:37:5b:
10:9b:46:22:7e:6f:c3:e0:79:6c:29:f9:2f:17:41:17:c5:07:
0e:75:90:14:78:a7:90:2c:32:21:f9:e5:3a:6a:34:be:4c:b0:
5c:a1:c3:3e:15:42:87:8f:7e:7c:f5:79:5f:da:1b:70:53:7b:
56:74:ac:87:05:a0:66:82:b0:63:12:f0:ea:a3:41:97:41:95:
91:e5:eb:28:22:ed:f1:e7:48:2f:87:31:17:d4:23:ca:ed:7a:
9e:45:3d:20:3f:1a:c1:60:7d:29:43:28:9c:4b:62:f7:aa:c8:
fb:a6:27:c2:a3:01:30:be:f2:ff:dc:8e:4b:97:89:56:9f:2c:
a0:43:70:d5:72:5a:d2:37:2d:00:7f:7f:eb:45:2f:46:f6:6e:
db:52:7a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:31 2024 by rpki-client on console-ams.rpki-client.org