Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/4sbptR-2tVEjGSRDp1AQ5msIrJs.roa
File: 4sbptR-2tVEjGSRDp1AQ5msIrJs.roa (raw, json)
Hash identifier: OZbx4Q2f7ZIVc+RFO1t80Nk4Swee4WcwK2CGtdpKP/M=
Subject key identifier: E2:C6:E9:B5:1F:B6:B5:51:23:19:24:43:A7:50:10:E6:6B:08:AC:9B
Certificate issuer: /CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Certificate serial: 03EC61C3
Authority key identifier: 8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/4sbptR-2tVEjGSRDp1AQ5msIrJs.roa
Signing time: Sat 01 Jan 2022 15:56:30 +0000
ROA not before: Sat 01 Jan 2022 15:56:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208896
IP address blocks: 45.156.199.0/24 maxlen: 24
45.156.198.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65823171 (0x3ec61c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e6bd3d545eeb0be40f283899d218cf4868e9490
Validity
Not Before: Jan 1 15:56:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2c6e9b51fb6b55123192443a75010e66b08ac9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:fb:6b:b3:3e:de:f9:d8:b6:cd:dc:63:82:0a:
8c:d7:43:fc:2d:0f:16:2c:2d:79:69:90:ee:24:13:
a3:88:54:2f:b8:36:f1:ef:70:3d:2a:ad:da:c6:9f:
f0:b3:e8:d5:0d:34:2b:11:12:66:5d:c2:28:da:31:
d9:d3:a8:e8:50:44:3b:b3:a9:7d:03:37:f5:50:e8:
3e:62:03:bd:9e:95:b4:e0:a8:96:43:ab:20:33:db:
e1:ed:f7:04:d6:9b:f4:80:ad:da:c8:17:6d:39:a3:
22:5d:38:5b:29:4d:6e:8e:b8:21:bf:e0:73:19:4a:
0e:2f:94:5d:08:53:30:e8:e0:ff:34:77:85:c7:97:
1b:d2:34:15:77:b6:f5:e1:84:25:6c:cb:bf:fd:a6:
20:65:8f:06:f6:7e:f0:13:8b:dd:5a:38:1d:a2:7b:
22:13:a0:e1:2a:ce:d6:ae:3f:8a:39:e1:7a:59:4c:
3c:ff:88:34:9c:97:cd:a6:ad:6d:f9:88:bf:4c:d4:
21:b9:6e:4c:ee:31:3f:bc:b5:0f:03:b4:95:10:5e:
aa:e3:f0:8d:04:08:d5:c8:d5:5c:f6:ac:45:2d:62:
4d:20:62:5d:0e:80:9e:7d:39:67:a6:44:82:f8:ec:
af:3b:fc:c9:1b:24:bb:52:ad:bf:72:17:26:40:34:
f1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:C6:E9:B5:1F:B6:B5:51:23:19:24:43:A7:50:10:E6:6B:08:AC:9B
X509v3 Authority Key Identifier:
keyid:8E:6B:D3:D5:45:EE:B0:BE:40:F2:83:89:9D:21:8C:F4:86:8E:94:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmvT1UXusL5A8oOJnSGM9IaOlJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/4sbptR-2tVEjGSRDp1AQ5msIrJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/1d7046-dcf5-452e-8849-b10a22d0a476/1/jmvT1UXusL5A8oOJnSGM9IaOlJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.198.0/23
Signature Algorithm: sha256WithRSAEncryption
29:20:f5:1e:1b:ec:e2:10:f8:17:18:a9:5f:fd:d4:e6:aa:f4:
b1:bb:c8:a3:60:7c:0c:d3:1c:1c:0b:0c:2d:d6:d2:fb:d4:01:
8a:54:56:77:cf:91:b9:60:e9:38:61:eb:f5:0f:9f:f9:16:3c:
88:a6:0a:bf:36:31:1d:a0:70:4a:b6:75:12:0b:dd:a2:37:16:
44:73:8c:3e:a8:94:f1:dd:b5:44:2d:bc:13:30:b1:57:bd:35:
aa:68:41:e2:bb:3f:e5:c9:c5:53:4d:61:56:b6:3e:90:89:42:
0d:77:68:12:41:a1:2e:5c:46:90:0d:74:12:e3:ed:ff:08:a9:
a2:fa:53:19:9a:99:f7:b9:18:e3:d3:a0:5e:62:c0:57:cd:3b:
ab:07:d6:bc:07:55:a8:41:bc:18:fd:fc:b9:c8:c1:28:a0:4a:
a3:cf:05:aa:18:69:e2:5c:55:05:f7:10:c0:4d:41:2a:b1:12:
c6:d3:bb:f6:ed:68:19:cc:dc:37:c2:f4:77:f2:f6:bc:12:da:
34:88:16:1a:8d:40:1d:68:33:3e:c4:e6:b6:dd:44:05:a4:54:
17:61:07:ad:4c:fd:f7:ca:1b:6f:cb:9f:b8:47:fd:99:f6:c0:
55:73:10:99:92:03:92:d9:c5:48:9f:64:ac:e2:65:ca:18:7d:
3f:c3:3e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:37 2024 by rpki-client on console-fra.rpki-client.org