Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/l01a8DhF_tM5tv6gohNCa7Sj9io.roa
File: l01a8DhF_tM5tv6gohNCa7Sj9io.roa (raw, json)
Hash identifier: WBr0ho3Afr6fi7LExXWgSQebWNgITmJgl/aUGrV/yiA=
Subject key identifier: 97:4D:5A:F0:38:45:FE:D3:39:B6:FE:A0:A2:13:42:6B:B4:A3:F6:2A
Certificate issuer: /CN=8251e7fb6b960d406b2236d25e4e20e245359db2
Certificate serial: 0847745A
Authority key identifier: 82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/l01a8DhF_tM5tv6gohNCa7Sj9io.roa
Signing time: Sat 01 Jan 2022 01:57:46 +0000
ROA not before: Sat 01 Jan 2022 01:57:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60610
IP address blocks: 45.13.152.0/24 maxlen: 24
45.13.153.0/24 maxlen: 24
45.13.154.0/24 maxlen: 24
45.13.155.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138900570 (0x847745a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8251e7fb6b960d406b2236d25e4e20e245359db2
Validity
Not Before: Jan 1 01:57:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=974d5af03845fed339b6fea0a213426bb4a3f62a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:25:46:85:dd:19:ca:e8:4c:b5:af:ca:90:da:
99:5f:84:af:6b:7b:89:d3:11:4f:c6:6c:65:c5:19:
60:01:2e:9d:0d:75:9c:d6:5f:73:28:5d:04:53:65:
b8:ba:63:ca:e6:75:2d:26:96:15:45:3a:39:69:ef:
84:96:93:d4:0b:1f:eb:a6:a0:2e:5a:b6:36:97:5a:
ff:43:c7:48:d7:44:fc:bd:2d:94:bd:c8:41:9e:2e:
29:b5:a5:f7:f0:b3:48:2c:bb:15:e0:ae:bf:b0:62:
c5:e8:d3:a5:65:90:d2:89:81:df:9f:0f:81:35:7e:
d2:d9:a1:e6:cf:c4:7f:ca:f4:8e:5c:bb:c9:54:34:
15:b9:b5:bd:00:c2:6c:ec:c6:08:86:ed:d6:a0:9e:
5c:2c:70:48:9a:31:bf:8c:e0:93:12:52:91:5c:1d:
29:1d:fb:fd:7e:5a:a6:8f:4e:b6:a4:09:29:6a:3f:
37:cc:a5:31:5a:4c:2c:0d:4f:d6:5e:66:44:f9:99:
e8:f8:c7:09:7e:8f:86:6c:04:7a:14:27:ea:fd:3b:
16:d5:43:8e:f5:69:6e:00:ca:5b:06:95:5f:a3:d6:
7e:9e:e3:1d:df:75:f9:2d:c0:00:04:aa:29:5b:17:
34:78:22:64:64:10:26:2b:44:ce:e5:9b:fd:17:11:
55:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4D:5A:F0:38:45:FE:D3:39:B6:FE:A0:A2:13:42:6B:B4:A3:F6:2A
X509v3 Authority Key Identifier:
keyid:82:51:E7:FB:6B:96:0D:40:6B:22:36:D2:5E:4E:20:E2:45:35:9D:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/glHn-2uWDUBrIjbSXk4g4kU1nbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/l01a8DhF_tM5tv6gohNCa7Sj9io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ff0e61-1c92-418c-9267-d3a487295491/1/glHn-2uWDUBrIjbSXk4g4kU1nbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.152.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:ad:c9:9a:ce:f9:03:19:6a:a4:6c:61:8b:1a:c8:1c:82:66:
7d:90:b2:cf:3b:17:ad:d6:41:74:0a:1c:3d:88:27:f0:91:af:
ee:db:10:fd:2b:38:79:d1:7d:ae:d3:0c:99:05:3c:8a:af:3d:
d7:c3:98:bf:6a:42:ad:d7:c3:28:6e:5b:17:0d:7b:ba:65:97:
8a:73:45:98:2a:5b:86:d5:c5:88:4e:e3:e8:df:d0:6a:09:8b:
0f:3d:fc:97:27:17:84:f9:d3:6b:ff:d1:03:b9:38:ec:9a:58:
dc:a1:8f:96:f2:c8:ff:8e:62:b5:62:e5:64:d2:73:9b:cc:a4:
79:75:de:2f:97:69:d0:e1:39:83:f8:23:15:3b:4c:58:6e:07:
2f:61:8f:a8:3f:eb:f8:a6:51:59:e1:9f:0b:41:31:c4:87:70:
93:8e:e2:9a:2c:c7:3e:41:25:ca:7a:3b:e2:eb:42:66:95:49:
68:de:6b:ed:41:b3:54:61:c2:d0:20:aa:ef:9a:24:36:ea:8e:
cd:ef:b4:bc:55:49:97:1b:c4:05:58:37:49:7b:6a:b1:3d:42:
e5:05:ab:ad:12:d5:95:3b:8f:d4:d7:1f:7a:43:6b:46:75:d9:
1f:21:57:59:1a:04:54:86:63:55:09:b4:83:ee:78:53:0b:e1:
79:94:77:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:43 2024 by rpki-client on console-fra.rpki-client.org