Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/K0kdKIBzLuADQths-LosroFkfvA.roa
File: K0kdKIBzLuADQths-LosroFkfvA.roa (raw, json)
Hash identifier: hfSKYRSvbDaRZz7fNvPRJ5kyArKWNIPJSJEtszainKI=
Subject key identifier: 2B:49:1D:28:80:73:2E:E0:03:42:D8:6C:F8:BA:2C:AE:81:64:7E:F0
Certificate issuer: /CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Certificate serial: 024F309C
Authority key identifier: 00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/K0kdKIBzLuADQths-LosroFkfvA.roa
Signing time: Sat 01 Jan 2022 01:59:06 +0000
ROA not before: Sat 01 Jan 2022 01:59:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23528
IP address blocks: 45.156.161.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38744220 (0x24f309c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00e2c33731adca57dcc33b2fb8233fc038b095e9
Validity
Not Before: Jan 1 01:59:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b491d2880732ee00342d86cf8ba2cae81647ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:47:e5:79:91:2f:fe:c2:43:85:b0:7c:04:a2:
26:ac:33:a5:c9:75:4d:c2:e1:85:e3:cf:9a:47:ba:
eb:b6:3b:83:42:62:2f:d4:7d:c8:3a:28:a1:3d:32:
26:8b:c9:ed:dd:37:ae:fe:3a:f9:4c:25:ff:f9:4d:
88:2e:f0:40:bf:e9:9d:e9:b4:a2:7d:59:c8:65:f0:
e1:4a:31:4b:30:cd:af:6e:77:0a:c9:59:d4:98:d0:
64:d5:78:6e:e1:a0:49:bd:e2:f3:23:af:a5:40:c3:
23:55:ff:26:02:a2:f4:9f:62:b6:fc:ed:08:96:67:
72:d1:31:fd:31:13:ea:e3:63:58:25:ae:26:f0:56:
27:8c:57:00:4b:b2:8a:13:fd:1e:d8:68:33:ed:01:
f5:17:c8:d1:2a:ff:fe:83:b1:f6:cc:cc:69:38:ce:
2f:05:12:1d:8d:11:6e:12:00:24:84:76:b6:da:6a:
ea:54:47:65:91:90:a0:17:56:bb:ac:b6:d7:93:d4:
58:20:ec:6a:bd:3b:a8:e6:d6:2c:4f:ba:ce:0d:ae:
eb:b1:33:46:c6:33:21:d9:8e:e3:40:38:ba:be:fe:
a6:ec:6b:a3:1e:1f:76:34:8d:21:4c:2e:b0:71:af:
4f:2e:60:3e:23:86:e6:75:fb:99:54:2c:e1:03:aa:
9e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:49:1D:28:80:73:2E:E0:03:42:D8:6C:F8:BA:2C:AE:81:64:7E:F0
X509v3 Authority Key Identifier:
keyid:00:E2:C3:37:31:AD:CA:57:DC:C3:3B:2F:B8:23:3F:C0:38:B0:95:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AOLDNzGtylfcwzsvuCM_wDiwlek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/K0kdKIBzLuADQths-LosroFkfvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/9d5feb-beda-4147-9d83-c9ad37f94cd7/1/AOLDNzGtylfcwzsvuCM_wDiwlek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.161.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:6f:f2:32:9b:75:e5:ad:fd:81:75:06:54:b1:20:57:fa:31:
90:90:20:e1:ef:bd:fa:d1:2a:9c:98:32:8e:e1:6e:68:a5:4b:
29:45:1d:5a:1a:d2:27:30:1f:4a:81:fa:2d:2e:47:5a:0c:00:
9b:e2:8e:07:b2:04:f9:67:31:6a:e7:c4:57:e2:8f:6d:99:4a:
30:af:62:d5:fe:34:fd:de:a0:7b:f5:f7:2d:9e:72:1a:6c:19:
20:e4:95:ed:d6:18:11:dd:55:56:44:7e:d9:c8:3f:57:91:23:
75:15:66:43:5c:c1:b5:b4:bc:c2:50:61:85:6f:98:2e:81:db:
9c:f8:cc:c4:0e:f1:1f:bc:2a:41:3e:3d:95:21:f4:5f:1d:2e:
09:c5:1c:00:61:62:d7:91:ce:bd:d9:83:4a:d3:59:5e:2b:67:
7a:2e:52:08:1a:8e:9f:e5:7a:9c:5d:f1:78:8a:8b:96:32:60:
49:fc:81:dc:34:7d:3d:20:a2:14:ef:11:fc:74:9b:0d:d1:ba:
d5:98:9b:55:97:f9:3c:29:86:10:86:45:35:72:41:c9:7f:95:
b5:78:9b:36:09:59:7a:28:2b:c5:07:9c:e3:33:3f:f6:ee:d6:
d0:74:9e:63:cb:19:cd:62:be:cf:78:82:47:e2:9f:24:87:a9:
47:8c:18:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:43 2023 by rpki-client on console-ams.rpki-client.org