Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/pv2Ci2eEcZ09TwxZMoNomQMMGp8.roa
File: pv2Ci2eEcZ09TwxZMoNomQMMGp8.roa (raw, json)
Hash identifier: NVAn/T70wIZcDly+AJYkaYOPzelN1JGFWg5q4NnRyYA=
Subject key identifier: A6:FD:82:8B:67:84:71:9D:3D:4F:0C:59:32:83:68:99:03:0C:1A:9F
Certificate issuer: /CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Certificate serial: 0183E65AC6ED2A76E27C4202C10CC2F1F79E
Authority key identifier: 61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/pv2Ci2eEcZ09TwxZMoNomQMMGp8.roa
Signing time: Mon 17 Oct 2022 14:30:52 +0000
ROA not before: Mon 17 Oct 2022 14:30:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25540
IP address blocks: 45.86.204.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e6:5a:c6:ed:2a:76:e2:7c:42:02:c1:0c:c2:f1:f7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61877f4ce0d361617724d4b289a8918c5c6d722d
Validity
Not Before: Oct 17 14:30:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a6fd828b6784719d3d4f0c5932836899030c1a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cc:fa:d6:f6:62:f3:5e:70:0e:e4:6f:00:4a:
b0:75:c5:01:14:9b:04:29:14:c3:5c:21:38:c2:af:
e0:bf:68:4b:4c:cb:89:6d:a9:26:68:70:82:a4:41:
b3:bf:d8:77:2e:28:e7:de:ae:4d:31:70:2d:70:67:
7c:6b:de:fc:15:8c:36:31:6f:f3:91:c1:66:69:16:
cb:5a:a8:5c:52:54:47:d9:1d:ab:82:bb:18:58:6f:
55:d4:d4:8a:9a:74:45:4a:d9:43:7b:7c:f1:71:3b:
89:aa:24:46:00:a4:1f:89:2f:b4:40:9b:2b:6c:cf:
29:a7:a5:0e:a4:90:bb:e1:06:56:7d:98:89:27:22:
1b:b0:d2:97:eb:df:95:02:b8:fd:a1:b6:df:fa:00:
04:7b:3d:5f:34:ab:e4:c7:03:8b:f3:e9:fd:14:fc:
df:d6:e3:b9:e8:2d:ad:28:6a:a4:cc:3a:05:7e:6d:
15:68:46:62:55:40:d4:a8:a8:83:68:e8:62:39:0b:
3e:17:7c:7b:57:59:1b:20:93:5e:71:39:d4:3a:08:
02:7d:3f:ca:e7:89:f0:7a:37:d9:88:95:b1:ef:5a:
bd:f1:0f:23:b3:c6:4c:30:33:35:4a:2f:37:82:22:
17:62:99:9c:3e:e5:59:ab:3b:6b:2e:01:0e:d2:ca:
e9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:FD:82:8B:67:84:71:9D:3D:4F:0C:59:32:83:68:99:03:0C:1A:9F
X509v3 Authority Key Identifier:
keyid:61:87:7F:4C:E0:D3:61:61:77:24:D4:B2:89:A8:91:8C:5C:6D:72:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYd_TODTYWF3JNSyiaiRjFxtci0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/pv2Ci2eEcZ09TwxZMoNomQMMGp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/c43b2f-10ba-4170-b521-c722217e53b6/1/YYd_TODTYWF3JNSyiaiRjFxtci0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.204.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:45:b8:60:cf:3e:ec:37:60:f8:43:1d:a4:fd:27:5f:04:5c:
53:fd:5e:11:f1:63:a6:42:d9:cb:72:40:bb:f0:8d:be:e7:ff:
ef:ce:91:3b:0c:08:c8:9a:a6:e2:2b:78:25:30:63:03:ef:11:
ef:1e:f2:89:f4:4b:80:5c:13:3c:c9:a3:f1:17:51:fd:43:07:
aa:03:16:13:01:71:84:0c:9b:3b:d4:47:bd:33:c9:e0:0a:ec:
52:82:98:d9:71:37:61:0e:60:cb:5b:c3:99:7e:f3:27:51:60:
1d:4f:fd:13:45:00:d2:d3:44:51:35:9e:a9:60:94:a2:73:0e:
aa:32:f2:82:2a:58:24:b7:4d:a6:7d:f0:f5:26:9e:f6:d8:d9:
0b:ec:49:6e:a6:53:cb:3a:1b:3d:ca:dc:dc:38:1a:4f:f0:df:
99:76:df:44:7d:12:de:eb:2a:57:56:06:de:11:91:02:54:9d:
6e:8a:b0:d5:33:34:eb:76:4a:14:22:d4:d7:f0:f0:59:0f:13:
b2:24:2c:6f:25:2e:fe:bb:be:96:7a:e3:85:83:fd:7a:e0:e1:
ef:53:b6:8b:8e:91:7e:fc:42:dc:a2:b8:64:53:71:57:54:32:
45:30:b6:c9:4b:0b:f8:e9:dc:d6:cd:47:ea:04:2c:7b:92:ac:
b6:89:9a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:18 2024 by rpki-client on console-fra.rpki-client.org