Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/AcgejKyNZDdH4HpaDCqrcZcjQzw.roa
File: AcgejKyNZDdH4HpaDCqrcZcjQzw.roa (raw, json)
Hash identifier: +U2tiAUescj1UcfgdGdBZEphxh51Qx3aNI7w2mmBtjI=
Subject key identifier: 01:C8:1E:8C:AC:8D:64:37:47:E0:7A:5A:0C:2A:AB:71:97:23:43:3C
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 01849A123AF0011E9B482F68E683680B4A03
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/AcgejKyNZDdH4HpaDCqrcZcjQzw.roa
Signing time: Mon 21 Nov 2022 12:03:16 +0000
ROA not before: Mon 21 Nov 2022 12:03:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212335
IP address blocks: 45.156.56.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9a:12:3a:f0:01:1e:9b:48:2f:68:e6:83:68:0b:4a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Nov 21 12:03:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=01c81e8cac8d643747e07a5a0c2aab719723433c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:13:3d:43:17:ff:84:fe:29:9a:56:5d:0c:c7:
97:29:3b:ff:61:a4:e8:68:84:ff:34:06:79:b0:5b:
8e:40:ea:ab:17:13:52:30:be:ac:c8:b6:0c:bb:e2:
51:3b:85:5e:0a:e4:90:35:9e:bf:21:74:e0:69:0e:
d8:ca:3d:88:7a:01:5f:6f:2e:89:43:a3:d2:b1:4e:
6f:67:4a:31:08:3a:5a:bb:85:1b:77:56:91:b4:f9:
3e:ad:bc:01:41:38:a3:cb:ff:a5:68:1f:64:e0:10:
92:5c:0b:67:84:83:58:d4:f8:33:28:6d:4f:3e:02:
bb:f4:47:2f:30:0f:3c:bd:62:e1:f4:a4:9b:68:d9:
29:07:fb:a0:9d:13:e4:27:76:d8:71:6d:77:a0:1c:
60:34:4f:b9:d7:a9:05:75:d3:97:92:80:db:a9:2d:
e0:e2:14:90:8c:1c:56:42:a0:90:c1:95:07:f4:d6:
b9:c8:f7:00:1b:ac:5f:ad:a6:b6:90:b5:fa:24:44:
3e:34:a6:ed:f3:6d:93:e4:c3:46:a3:c6:9a:f8:90:
2a:82:c5:58:55:04:4d:87:86:b2:76:6b:7d:06:cb:
80:b7:99:37:33:07:5d:ce:11:d3:5b:fd:d6:84:6a:
0f:ae:c6:5f:a8:c9:11:71:4a:ef:c6:b9:5b:a6:e6:
ba:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C8:1E:8C:AC:8D:64:37:47:E0:7A:5A:0C:2A:AB:71:97:23:43:3C
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/AcgejKyNZDdH4HpaDCqrcZcjQzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.56.0/23
Signature Algorithm: sha256WithRSAEncryption
14:0f:0c:36:a4:f5:96:15:ff:5a:e8:e1:9d:ff:13:5d:7a:87:
fc:e8:f3:fd:72:24:bf:bc:68:79:2e:9c:98:0c:01:53:cc:38:
84:39:19:b8:d0:ab:3f:a8:ec:39:a6:d3:72:4c:df:13:39:e9:
e5:2a:e6:d1:df:97:88:7d:dd:05:3f:c0:34:d2:da:47:b0:f9:
2b:85:45:8d:60:52:76:8c:d1:a5:4c:58:7d:97:47:c8:ef:bf:
87:45:83:18:62:09:cc:f1:d9:61:69:1f:e5:4a:71:6b:26:53:
3c:26:78:a0:1f:70:ea:13:74:d6:d0:a3:40:28:e7:e8:ad:b2:
59:51:66:21:03:d0:5c:af:d6:a6:f3:b4:65:6b:aa:d8:80:ad:
00:2d:5e:f6:d0:cd:d2:8e:ff:6b:49:5a:99:39:bd:fb:02:0b:
56:43:b9:8c:25:a9:b8:08:b6:6d:20:1b:83:f8:01:54:c4:a0:
81:17:76:22:d1:98:5c:06:c6:13:52:c1:6a:f4:d0:31:12:1e:
90:a3:30:18:d3:d6:65:da:e7:88:a6:dd:1b:b9:35:3a:46:85:
b3:81:04:57:0e:fc:f2:73:6d:59:31:91:db:84:33:5e:59:ef:
af:2b:ab:51:4f:84:60:a3:32:4a:28:f8:da:61:84:95:3b:6f:
82:a7:df:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org