Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/5q5ibwXwimH3cvlYjeoK64NtBRo.roa
File: 5q5ibwXwimH3cvlYjeoK64NtBRo.roa (raw, json)
Hash identifier: 4lPkGmjjxYD9nK+fYRBgI9D/ulTcJd9nYahxdFU1l3c=
Subject key identifier: E6:AE:62:6F:05:F0:8A:61:F7:72:F9:58:8D:EA:0A:EB:83:6D:05:1A
Certificate issuer: /CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Certificate serial: 08244A8D
Authority key identifier: FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/5q5ibwXwimH3cvlYjeoK64NtBRo.roa
Signing time: Sat 01 Jan 2022 01:57:10 +0000
ROA not before: Sat 01 Jan 2022 01:57:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43948
IP address blocks: 45.86.104.0/24 maxlen: 24
2a0f:95c0::/34 maxlen: 34
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136596109 (0x8244a8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Validity
Not Before: Jan 1 01:57:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6ae626f05f08a61f772f9588dea0aeb836d051a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c0:f4:e2:7f:ec:4a:af:df:89:7d:23:76:63:
cb:1e:7f:e1:c0:3a:13:fa:b2:70:e4:ee:05:79:49:
0a:87:3e:25:c6:d5:17:7c:14:c3:2a:9e:fb:e6:b3:
17:fa:d7:64:9a:6e:92:56:5d:96:07:99:00:2e:08:
45:39:30:5e:a6:0d:81:92:0f:0d:1b:33:15:4a:50:
a1:ac:cb:eb:ae:a7:5e:b9:f8:84:9e:0c:ed:3f:3d:
24:96:35:32:c5:96:77:14:e1:65:c6:58:8c:e1:58:
67:f0:53:27:f0:59:f3:77:65:9c:de:58:e7:49:2c:
05:c3:8d:bf:eb:9a:e5:e3:35:2f:06:f3:15:2f:32:
03:c3:51:3f:14:18:d4:8c:0e:0e:b2:1d:60:df:2e:
7d:e7:99:85:99:67:a9:25:c9:de:4c:f0:14:e9:01:
a2:25:52:59:a8:d4:5d:06:0e:2c:07:bb:ca:45:84:
a7:73:ca:2b:ad:e5:e2:81:1d:05:14:1d:6a:ef:af:
13:26:30:2c:b3:47:de:a7:7f:75:10:d3:86:56:a9:
04:97:c8:66:b5:fe:40:bd:97:39:69:90:24:da:45:
62:89:e9:e6:ab:c2:33:8d:26:74:1c:f2:76:a0:9b:
7e:6e:17:74:dd:ea:dc:84:92:1f:b2:2a:e0:ae:c1:
77:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AE:62:6F:05:F0:8A:61:F7:72:F9:58:8D:EA:0A:EB:83:6D:05:1A
X509v3 Authority Key Identifier:
keyid:FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/5q5ibwXwimH3cvlYjeoK64NtBRo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.104.0/24
IPv6:
2a0f:95c0::/34
Signature Algorithm: sha256WithRSAEncryption
e5:1f:27:b8:d6:d8:7d:84:77:42:ff:05:bd:db:3d:22:a2:36:
85:ce:22:84:1d:17:9f:46:f8:62:16:c9:85:7b:2b:92:e7:5b:
76:db:63:6c:6e:f5:8e:95:d5:d6:60:d0:47:3b:95:0f:1f:20:
12:cc:74:68:ed:d7:88:44:93:f4:dc:12:42:ae:3d:cc:58:d1:
6e:ff:8a:42:b6:46:bf:37:9e:cd:19:da:53:ff:e1:e3:29:50:
f2:ed:fb:b4:6a:d4:c7:12:2f:3a:16:74:58:70:3d:1e:31:7c:
41:8b:64:52:cf:38:74:b3:89:27:5e:33:d8:8c:02:80:d0:a5:
19:c2:63:b9:69:9d:08:09:05:d4:de:88:34:0b:46:cc:ef:04:
44:42:59:88:23:93:5d:58:a2:b7:df:02:82:f1:ce:de:0f:93:
47:e0:35:7c:18:2f:6e:8a:ea:41:40:e4:95:78:bf:9c:26:bf:
50:be:49:2b:bc:15:44:5c:74:0b:d9:34:0b:ca:61:92:df:bd:
78:5b:25:35:7b:df:35:c8:38:5f:b0:9d:c2:52:9c:9a:8a:c6:
d2:bb:81:0b:3a:78:f7:93:71:0c:ff:fa:4a:b0:c4:e1:21:4a:
9b:72:44:ee:5c:33:ed:ac:69:9b:1a:12:f0:91:00:45:d0:d3:
8e:79:1c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:53 2024 by rpki-client on console-ams.rpki-client.org