Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/I7F_bG5maG4a1o-QSDbcQqkD6bc.roa
File: I7F_bG5maG4a1o-QSDbcQqkD6bc.roa (raw, json)
Hash identifier: ZaDEbFd3Xz0ffV41w7fadEjbwhfgzRB7hCeaVXBTUJk=
Subject key identifier: 23:B1:7F:6C:6E:66:68:6E:1A:D6:8F:90:48:36:DC:42:A9:03:E9:B7
Certificate issuer: /CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
Certificate serial: 08C585B6
Authority key identifier: 9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/I7F_bG5maG4a1o-QSDbcQqkD6bc.roa
Signing time: Sat 01 Jan 2022 07:03:06 +0000
ROA not before: Sat 01 Jan 2022 07:03:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16509
IP address blocks: 45.8.84.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 147162550 (0x8c585b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a78fd4d41a49384bdf6e7dc3ebbc500bf66d9d5
Validity
Not Before: Jan 1 07:03:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23b17f6c6e66686e1ad68f904836dc42a903e9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a6:47:39:2e:97:14:77:2f:82:d6:fd:73:da:
2c:1a:f3:e0:0a:b9:5c:ac:90:48:15:b6:19:09:8e:
b1:15:8b:b7:81:46:0c:ab:11:96:07:ae:17:c9:3f:
4d:98:16:c8:42:bc:e8:d3:ad:78:20:a2:13:36:e2:
98:69:4a:82:0d:e5:5b:07:16:50:6c:64:92:06:c1:
7c:b9:96:25:87:27:38:ed:d9:7f:89:b4:dc:74:28:
6c:5a:dd:d4:0f:7d:48:9c:60:74:57:bf:b5:57:b5:
d5:4f:89:55:63:44:59:cb:35:32:3c:0e:d8:24:d3:
af:be:dd:df:43:78:69:1d:05:b6:d9:0a:13:16:13:
d8:b6:1b:2f:e5:f3:41:ab:eb:1c:81:b2:67:c4:2b:
37:c1:33:b7:89:1c:67:5e:cf:1b:6f:4b:d0:be:b3:
08:e2:a7:cb:8e:c9:08:0f:2e:61:51:16:e1:74:f1:
9c:84:04:6d:df:21:c1:36:e7:28:c7:b3:59:35:85:
cc:30:bb:af:7b:20:55:bb:9b:ef:55:5e:f1:a4:1b:
37:40:0f:a0:eb:81:ec:45:0b:df:9a:0d:65:fd:1b:
5d:0c:df:b7:4c:fa:96:6a:d3:f2:32:e9:99:59:14:
fa:f0:ed:f2:4f:38:6b:82:e5:a4:98:c8:dc:5d:26:
c6:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B1:7F:6C:6E:66:68:6E:1A:D6:8F:90:48:36:DC:42:A9:03:E9:B7
X509v3 Authority Key Identifier:
keyid:9A:78:FD:4D:41:A4:93:84:BD:F6:E7:DC:3E:BB:C5:00:BF:66:D9:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mnj9TUGkk4S99ufcPrvFAL9m2dU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/I7F_bG5maG4a1o-QSDbcQqkD6bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/5cb98c-ee08-4b99-8b4d-c6f41060c5d7/1/mnj9TUGkk4S99ufcPrvFAL9m2dU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.84.0/22
Signature Algorithm: sha256WithRSAEncryption
29:94:62:ff:9b:d4:57:c1:e0:c6:5d:ce:ab:a6:ff:d9:7d:2c:
2d:e4:2f:2b:88:89:ea:33:c5:f6:c8:be:46:4c:a5:a5:d4:51:
fd:1a:74:21:71:3d:01:3a:2a:bc:f4:ab:4a:05:41:30:77:ce:
66:e3:4f:58:72:bc:aa:ed:c2:97:62:e2:7c:26:b8:df:24:72:
ac:15:e8:cf:6a:e7:c2:b2:06:d1:60:fe:4e:8a:81:f0:8c:e3:
7c:e4:28:6d:54:d4:62:a3:23:99:a8:1e:4e:3e:32:4c:b9:a1:
3b:2d:2c:80:86:20:6d:8e:bc:6d:8f:50:1f:18:3e:f4:0e:ce:
3a:f1:3c:aa:0d:e0:7d:34:02:36:8f:be:b7:57:28:ed:12:65:
0a:6e:41:5d:47:d0:a6:a4:db:3c:8c:77:e6:22:88:74:68:12:
f0:dd:cb:cc:c6:bd:72:ec:2d:b0:f4:94:e1:1d:8e:33:f7:22:
05:bc:2e:12:0c:5e:99:19:0d:d5:97:b6:55:9b:11:4f:18:d6:
b7:2e:43:9e:8d:7b:48:b6:2c:a8:72:4b:fb:a0:40:a0:a2:57:
3d:99:69:df:93:03:c0:86:de:1a:3a:c9:59:87:78:62:09:d1:
10:8a:76:9b:c7:12:4c:3b:bd:9c:f0:d5:a9:9e:83:14:3e:11:
87:fb:03:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:46 2024 by rpki-client on console-fra.rpki-client.org