Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/YcCl6rUJrhd5y-ORLQFpVEKtqeM.roa
File: YcCl6rUJrhd5y-ORLQFpVEKtqeM.roa (raw, json)
Hash identifier: rtCwQ0YXn8P8LuN/F1sRZFKNdygksRpHdv87pkOqhRE=
Subject key identifier: 61:C0:A5:EA:B5:09:AE:17:79:CB:E3:91:2D:01:69:54:42:AD:A9:E3
Certificate issuer: /CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Certificate serial: 077C5B3E
Authority key identifier: 78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/YcCl6rUJrhd5y-ORLQFpVEKtqeM.roa
Signing time: Sat 01 Jan 2022 08:00:45 +0000
ROA not before: Sat 01 Jan 2022 08:00:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 41634
IP address blocks: 45.154.253.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125590334 (0x77c5b3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Validity
Not Before: Jan 1 08:00:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61c0a5eab509ae1779cbe3912d01695442ada9e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a3:18:95:ef:9d:63:e2:07:21:7e:8e:5d:19:
70:00:5f:65:c2:a2:00:40:d8:60:5b:8d:72:5d:66:
ec:83:68:cf:c3:1a:70:76:66:6e:aa:37:d3:09:a5:
ed:e1:c2:60:0c:a2:3e:af:8b:07:a7:ec:c6:a6:5a:
8f:b0:c3:90:f3:f6:64:5e:c4:77:48:66:42:8d:a6:
98:9d:3f:47:23:9d:69:26:b4:90:d7:f9:cf:d5:28:
e9:63:d8:a7:a5:22:d8:42:9b:73:b3:15:b2:82:53:
08:37:d6:6b:aa:b0:33:f6:72:06:4b:19:bf:63:8f:
48:e6:31:06:53:2a:c2:79:a7:bb:fa:86:e5:38:1f:
e0:08:b1:3b:e2:ac:61:79:66:e5:33:b6:84:5e:4c:
e3:1c:00:de:11:4d:d2:9c:9f:cb:66:a5:4c:b2:09:
90:35:09:9a:d7:d7:9b:26:22:ae:07:ca:45:c6:e4:
ec:4b:f7:cf:d9:65:19:2b:e8:0c:dd:82:2b:61:c0:
ca:8d:52:5f:3a:0f:54:55:d7:e8:8b:0a:16:42:ab:
db:26:1a:e3:94:15:4b:86:16:9b:de:c7:f2:68:57:
46:76:27:b9:33:68:26:31:8d:fc:af:0e:9b:16:1d:
71:90:19:8e:14:7e:64:85:7a:29:93:02:53:9c:8c:
12:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C0:A5:EA:B5:09:AE:17:79:CB:E3:91:2D:01:69:54:42:AD:A9:E3
X509v3 Authority Key Identifier:
keyid:78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/YcCl6rUJrhd5y-ORLQFpVEKtqeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.253.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:2a:34:d9:ff:2b:a0:03:70:c4:c4:04:35:95:69:d0:95:09:
67:68:1d:b9:6f:93:78:cb:ee:5b:0d:88:db:1d:e2:0f:02:d0:
57:dc:d6:b6:0c:2b:7f:0a:6c:2e:8c:63:ae:b5:48:37:73:78:
01:d3:db:c6:db:ad:8d:50:fc:76:76:e8:ed:9c:c9:5f:dc:60:
7c:5f:12:09:ed:a7:74:ec:c6:88:37:fb:f0:bd:76:fe:3a:1e:
b3:5a:e2:5a:90:cf:fa:24:b2:22:d5:94:9e:d0:ee:76:d3:d3:
61:24:08:6d:52:42:a6:88:15:98:40:b6:b7:34:1d:0f:7a:3b:
3a:61:17:5f:5d:dc:b1:90:ab:c0:62:ec:f5:62:a5:68:6a:82:
60:76:c3:3f:66:c3:b0:08:fb:cd:bb:04:8f:bd:79:3f:4d:58:
47:db:33:9c:05:87:9b:99:55:a5:d5:f6:31:e0:da:f2:b1:dd:
dc:5b:c5:2d:09:1a:a0:7c:0a:e5:ee:c5:9d:f1:d7:d9:c3:4f:
bb:95:98:8b:c9:30:b3:47:28:ea:0e:04:0d:b0:31:fe:d3:f8:
5c:7e:3f:cf:48:02:e5:13:e6:b1:34:57:a6:8e:9d:59:2a:3b:
53:55:99:e9:1f:5d:64:29:c7:63:8b:1e:43:cd:29:09:23:f9:
55:2c:e7:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:48 2024 by rpki-client on console-ams.rpki-client.org