Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/r-YM1BSFWeqZcUFEpsJ2ia4VANo.roa
File: r-YM1BSFWeqZcUFEpsJ2ia4VANo.roa (raw, json)
Hash identifier: +Qq4E3vxghKxcNrDmQ4DmglwY2xt7WaE1TusIX8SGPs=
Subject key identifier: AF:E6:0C:D4:14:85:59:EA:99:71:41:44:A6:C2:76:89:AE:15:00:DA
Certificate issuer: /CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Certificate serial: 0183F53299952F2E7DFD9D786D92A9A6C5F8
Authority key identifier: 81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/r-YM1BSFWeqZcUFEpsJ2ia4VANo.roa
Signing time: Thu 20 Oct 2022 11:41:17 +0000
ROA not before: Thu 20 Oct 2022 11:41:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20473
IP address blocks: 45.156.56.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f5:32:99:95:2f:2e:7d:fd:9d:78:6d:92:a9:a6:c5:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8193ffe9db37626b13f85d7cc457aad5c1f30c9f
Validity
Not Before: Oct 20 11:41:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=afe60cd4148559ea99714144a6c27689ae1500da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:41:4c:25:75:32:e3:f8:37:ab:49:23:a4:8d:
0d:33:e1:50:8b:68:2b:f6:d0:eb:80:fe:68:87:53:
5c:50:51:b4:74:60:11:e2:ac:75:2c:29:e3:58:b2:
8c:2d:49:b8:d7:2b:24:dd:fd:86:ca:08:6d:cd:fc:
c4:ee:20:d3:63:1e:45:40:a3:61:4d:15:ef:36:22:
df:ef:91:de:6f:aa:49:6b:1b:24:b4:d4:d0:6d:11:
0f:14:2d:66:5f:07:d3:dd:82:5e:70:65:49:e4:7b:
25:99:17:58:d2:e0:51:3c:d7:e0:ef:35:d1:d5:7f:
0c:0b:15:14:96:f7:17:91:bd:ee:36:66:e1:6a:d7:
69:f1:52:6d:ba:e7:28:6d:32:8c:60:97:63:a3:cc:
d4:d9:3c:41:99:8b:8c:1c:8e:10:2f:fe:66:d1:b1:
b0:64:81:a2:4a:5e:58:8b:44:ee:a8:c6:9c:19:46:
c9:55:fd:a5:f1:da:b4:4c:a6:eb:a9:db:d9:9e:4d:
bd:2f:ec:e5:f6:90:5f:bb:d6:c0:56:a2:10:f2:c9:
77:93:f4:af:c5:81:ca:2e:35:83:ff:80:39:95:0d:
96:51:cf:58:d9:dd:57:46:01:0e:ae:32:d4:fb:27:
01:cd:35:a9:a5:e3:69:25:47:d1:57:e1:02:d9:22:
06:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E6:0C:D4:14:85:59:EA:99:71:41:44:A6:C2:76:89:AE:15:00:DA
X509v3 Authority Key Identifier:
keyid:81:93:FF:E9:DB:37:62:6B:13:F8:5D:7C:C4:57:AA:D5:C1:F3:0C:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZP_6ds3YmsT-F18xFeq1cHzDJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/r-YM1BSFWeqZcUFEpsJ2ia4VANo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/76bc1e-b6f4-408a-bb89-08d1270c2e71/1/gZP_6ds3YmsT-F18xFeq1cHzDJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.56.0/23
Signature Algorithm: sha256WithRSAEncryption
ae:df:38:c6:b4:ba:05:2d:99:e3:ea:a2:5b:e1:48:5c:66:40:
81:1c:4c:0d:2f:d5:4a:b4:88:cb:cc:1e:39:6f:94:e2:68:c9:
84:fb:4f:73:e4:5c:8d:c2:bf:8a:4d:7d:fc:c4:c6:0d:f8:00:
0b:21:28:e2:68:3a:84:f5:04:fe:c2:2d:c8:25:72:f4:f5:ca:
e6:ed:b4:c1:37:20:6e:de:d2:70:6d:b6:d7:87:1e:8d:3e:0f:
d9:21:01:23:f8:85:6d:18:3b:b3:6f:db:ec:aa:1e:91:1d:81:
9f:ae:87:cf:21:cc:6f:94:7f:5d:d9:c8:70:2c:2c:bd:4c:d9:
24:c9:fd:67:59:de:a5:5a:63:b3:39:33:3e:ca:b3:77:c5:02:
db:ab:9c:67:0e:ac:77:23:75:8f:02:7a:a8:59:1d:05:06:4d:
4b:9c:e4:18:e2:79:64:05:e3:f0:f2:6c:5f:5f:b7:19:9a:25:
92:06:ba:ce:d6:5d:ed:89:54:e3:1f:a1:e4:d4:44:b2:39:16:
2a:10:6a:6a:9e:48:a9:ec:83:ab:64:fb:5b:7f:ea:f8:00:d3:
f1:5e:37:f3:e6:73:99:f7:cc:18:f8:e0:a3:55:69:b4:ee:f1:
46:46:02:09:98:ee:ee:a7:7c:1e:fe:68:a3:8f:f4:aa:e5:a8:
bf:c4:14:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:01 2024 by rpki-client on console-ams.rpki-client.org