Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/1--ugDpFibR_n0m-UwMxAdhQcHfI.roa
File: 1--ugDpFibR_n0m-UwMxAdhQcHfI.roa (raw, json)
Hash identifier: 2UcMtAwlduifyGJjpTCUNM8uhQAhsJ34ijNQ/1O/6Uo=
Subject key identifier: FB:EB:A0:0E:91:62:6D:1F:E7:D2:6F:94:C0:CC:40:76:14:1C:1D:F2
Certificate issuer: /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial: 018337730D29C4250667F1E9D02E27D75D8A
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/1--ugDpFibR_n0m-UwMxAdhQcHfI.roa
Signing time: Tue 13 Sep 2022 15:23:50 +0000
ROA not before: Tue 13 Sep 2022 15:23:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 45.56.224.0/21 maxlen: 21
45.56.228.0/22 maxlen: 22
45.56.236.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:37:73:0d:29:c4:25:06:67:f1:e9:d0:2e:27:d7:5d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Validity
Not Before: Sep 13 15:23:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fbeba00e91626d1fe7d26f94c0cc4076141c1df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b4:1c:b0:31:7b:77:8f:5c:29:b2:3c:c8:53:
2d:cf:08:be:21:c2:53:e0:82:66:d3:b6:31:fe:c6:
29:c8:7a:70:a4:30:d9:53:7d:76:0b:03:61:68:cc:
c1:cb:52:6f:4f:fe:54:d7:5f:b1:c0:7c:d4:3c:40:
36:db:e9:58:8b:c1:a1:90:fe:4f:fd:6f:48:2b:2b:
ac:73:5a:c8:5f:76:71:54:24:3f:82:cc:09:04:e6:
1a:ab:5a:81:29:b9:59:f0:75:6a:28:57:bc:15:45:
6a:96:9a:ac:8b:2b:b5:70:be:7f:d8:7b:f3:2e:f7:
37:45:92:23:09:84:51:5f:37:3a:84:64:d6:dd:39:
42:02:83:2e:7f:c4:bf:d8:95:cd:b2:c8:80:76:bb:
19:0e:91:71:0c:e5:10:c1:21:b4:91:81:2a:fd:db:
a2:8b:a7:96:96:b0:66:5a:c3:64:ba:26:02:0a:3d:
98:30:67:5e:58:39:0e:b5:74:10:a2:c6:34:cc:44:
77:7e:22:62:a7:05:36:f5:40:9c:cc:16:31:5e:c1:
1e:4d:a5:ff:fb:af:01:5d:81:c4:4e:60:d4:90:32:
af:c0:15:72:07:65:1f:8e:45:67:a7:b4:35:3d:b5:
79:27:65:a3:ba:56:5a:64:fa:1e:e9:b9:ec:4b:ad:
fc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EB:A0:0E:91:62:6D:1F:E7:D2:6F:94:C0:CC:40:76:14:1C:1D:F2
X509v3 Authority Key Identifier:
keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/1--ugDpFibR_n0m-UwMxAdhQcHfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.56.224.0/21
45.56.236.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:e8:67:bf:14:71:d4:03:7b:ff:73:26:79:cc:0c:f4:c0:56:
3d:24:45:cc:3a:cd:5d:2c:a4:17:65:bc:b3:0c:ca:68:9e:f8:
e4:c7:75:3c:aa:f8:a3:80:c8:aa:44:31:e4:ad:50:55:0f:25:
66:4b:41:ed:1c:75:32:2e:dc:92:b4:4e:a2:3a:67:80:ba:2c:
e1:80:7b:00:11:fd:2f:1a:79:6b:de:a0:1c:a3:3c:6e:5f:a4:
32:92:54:f8:81:06:71:c7:d9:4c:e4:11:dd:d3:28:ea:a9:b0:
94:8d:22:3c:7d:af:50:8b:07:96:18:8f:df:f0:81:0c:4c:b8:
5b:93:5c:f6:a4:a9:26:4c:50:43:be:61:c7:99:bb:6f:0e:02:
b7:87:d6:3d:01:96:79:fa:c7:5c:d3:dd:2a:8a:71:7a:28:7e:
7f:1a:82:5e:c6:d0:ec:d4:d3:67:b8:66:a3:0b:7d:58:33:f0:
2a:d1:c8:19:fd:a6:89:a0:56:09:b2:36:9d:67:7e:ce:93:8f:
18:69:98:47:a2:67:3e:2d:f6:8f:30:20:a5:14:48:42:83:52:
84:7d:3b:2e:a6:d1:43:18:52:cb:62:c4:12:34:c7:4d:c9:41:
79:40:c1:2d:49:7a:97:33:5d:96:13:5f:43:07:50:f3:ce:ad:
09:ed:db:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:29 2024 by rpki-client on console-fra.rpki-client.org