Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/7aNvOUQMdhMi28Gk6cDlvXgQUis.roa
File: 7aNvOUQMdhMi28Gk6cDlvXgQUis.roa (raw, json)
Hash identifier: DD+kh4vt6xUqQCrT2AC53KTTDpcX/amZV8hyh5l0fSg=
Subject key identifier: ED:A3:6F:39:44:0C:76:13:22:DB:C1:A4:E9:C0:E5:BD:78:10:52:2B
Certificate issuer: /CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f
Certificate serial: 0251B106
Authority key identifier: 3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/7aNvOUQMdhMi28Gk6cDlvXgQUis.roa
Signing time: Sat 01 Jan 2022 14:02:46 +0000
ROA not before: Sat 01 Jan 2022 14:02:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25591
IP address blocks: 45.84.60.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38908166 (0x251b106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d12d11c9a203d5e7c8263edf54447e3b7358b7f
Validity
Not Before: Jan 1 14:02:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eda36f39440c761322dbc1a4e9c0e5bd7810522b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0f:c6:40:83:60:70:c0:cf:d6:58:f8:47:f4:
08:d5:05:d1:90:d5:b0:d8:5a:7a:dd:3f:b6:64:4b:
20:c5:13:1b:b3:df:37:0e:4e:10:9b:00:34:0d:cf:
df:d3:18:aa:bb:2a:61:e2:f3:a6:24:c1:59:0b:91:
96:3c:34:f2:9a:63:b7:ad:21:0f:8f:12:9f:63:c7:
c3:01:77:25:90:a8:a8:3b:fb:6c:53:d4:14:ba:e3:
3c:61:08:c5:1a:c8:7c:61:66:34:14:aa:1e:6b:d0:
2a:5a:ec:60:68:05:8e:3f:0f:dd:0b:9f:db:d0:fe:
c5:cb:84:17:5b:77:31:3b:00:49:91:e8:7e:31:2e:
36:f2:da:eb:8c:0c:ab:2b:88:06:12:b2:32:be:fd:
77:e3:d3:33:d5:f0:6e:8c:61:ee:cd:17:d8:67:8b:
ed:c4:04:40:f6:6a:29:76:fc:2f:91:b6:40:d4:8a:
18:1e:24:c5:3f:e4:b0:39:5e:76:f8:1b:e3:74:a1:
be:7f:89:7e:1c:02:d2:37:e4:cb:e7:71:e5:2c:f8:
72:5c:f8:9c:30:c7:d7:4e:dc:5f:a6:19:ad:02:f0:
21:f0:46:97:f6:ef:d2:10:65:3c:3d:64:be:a5:93:
85:19:b5:ca:2e:7a:e9:52:db:49:ec:b7:65:37:1e:
6b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A3:6F:39:44:0C:76:13:22:DB:C1:A4:E9:C0:E5:BD:78:10:52:2B
X509v3 Authority Key Identifier:
keyid:3D:12:D1:1C:9A:20:3D:5E:7C:82:63:ED:F5:44:47:E3:B7:35:8B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PRLRHJogPV58gmPt9URH47c1i38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/7aNvOUQMdhMi28Gk6cDlvXgQUis.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/1693bf-6d40-469c-b056-5a8457121a0b/1/PRLRHJogPV58gmPt9URH47c1i38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.60.0/22
Signature Algorithm: sha256WithRSAEncryption
73:c6:d2:d0:30:34:3e:ad:3e:83:f0:97:b7:4a:8d:b0:e7:64:
6c:ba:5a:37:bd:bb:6b:23:5e:ce:c8:3a:fc:e0:df:1f:1a:f2:
1d:a1:1c:c8:d4:d4:8f:d1:9b:81:5b:e9:2a:48:f9:be:f4:59:
54:47:74:dc:87:67:38:fa:67:13:13:27:45:5c:9f:b2:6e:09:
3d:82:a6:cc:c5:76:10:62:2e:ac:61:e9:e1:da:3e:94:46:ab:
93:a2:30:49:b9:d9:e8:bc:4c:86:1d:b9:81:84:47:05:2b:59:
79:da:b6:76:6b:2b:10:52:84:e4:4c:2f:a8:b8:96:30:9b:50:
d7:19:36:d7:ea:e5:5c:7d:e7:d8:5b:dc:15:35:fb:47:79:f7:
9c:e6:46:12:67:27:53:54:d9:be:4b:54:f9:7e:42:e6:18:c4:
53:04:2a:30:55:91:fe:b7:c1:c3:2f:94:e0:2b:2b:2e:f3:c1:
64:04:2c:75:d4:68:20:88:ff:6d:ae:f8:69:08:eb:70:03:4a:
5b:05:fd:71:5b:b5:b4:a8:ca:3a:15:97:4a:4f:86:b4:68:f9:
19:5e:26:ab:fd:37:ed:f1:f0:6e:d8:b2:9e:41:34:6b:00:fd:
9a:b5:b3:c8:39:89:a1:aa:21:c8:52:f3:bd:39:17:53:83:29:
d9:f5:63:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:44 2024 by rpki-client on console-fra.rpki-client.org