Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/vMLOfJl1FpCbnYO8TBfTlzrnuyo.roa
File: vMLOfJl1FpCbnYO8TBfTlzrnuyo.roa (raw, json)
Hash identifier: +8/yCB11hNfZGSfVxmg91RkWlJZIc0wH2Gc4EzYpR8o=
Subject key identifier: BC:C2:CE:7C:99:75:16:90:9B:9D:83:BC:4C:17:D3:97:3A:E7:BB:2A
Certificate issuer: /CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Certificate serial: 01E01BE9
Authority key identifier: B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/vMLOfJl1FpCbnYO8TBfTlzrnuyo.roa
Signing time: Sat 16 Apr 2022 08:20:29 +0000
ROA not before: Sat 16 Apr 2022 08:20:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212193
IP address blocks: 45.156.30.0/24 maxlen: 24
45.94.4.0/24 maxlen: 24
45.94.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 31464425 (0x1e01be9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2c0bdafadea78dce312f862ddf42b1bd4c4f645
Validity
Not Before: Apr 16 08:20:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bcc2ce7c997516909b9d83bc4c17d3973ae7bb2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:eb:d5:2c:bb:6d:43:5a:ae:2f:f7:64:41:
7c:5c:b6:18:5e:49:2f:8a:99:61:75:a4:ae:54:fc:
d9:17:f5:a4:d3:a7:a7:b5:2e:6c:27:54:86:2a:0c:
71:8c:13:32:8d:fe:4a:ec:56:e6:7d:5f:0d:a9:d4:
9b:b5:90:f8:19:7f:0f:c1:6c:97:1d:e9:33:10:e8:
c9:ed:18:f2:b1:8d:a0:1e:9a:3e:ff:b9:b9:37:56:
99:b7:69:c9:6a:71:ea:88:6f:0e:e7:1d:ae:47:fd:
17:2e:47:f1:3c:47:7a:ec:c8:34:7a:16:41:1d:1f:
5b:06:f2:13:19:9d:6e:8c:6e:0b:e7:96:66:bd:39:
7f:a7:7b:51:0b:31:25:4e:96:86:7c:d4:d6:f6:0a:
24:01:23:9b:a3:f5:f4:16:7d:eb:75:8d:30:b1:a4:
f4:2f:55:18:cd:55:5e:19:a5:47:2c:1f:9e:47:21:
cd:a3:c4:0d:f2:24:e3:c8:64:de:ca:ed:33:8f:76:
bf:9c:67:1e:7c:9a:67:56:f9:c2:94:be:66:8c:e8:
56:34:f0:1d:59:5c:d7:2f:a2:a7:08:f1:68:5b:3b:
6f:43:f6:ec:bb:47:81:c0:71:26:94:e2:7b:3b:c8:
75:e0:67:40:0b:c7:71:96:ae:dc:ca:08:92:ec:7a:
1d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C2:CE:7C:99:75:16:90:9B:9D:83:BC:4C:17:D3:97:3A:E7:BB:2A
X509v3 Authority Key Identifier:
keyid:B2:C0:BD:AF:AD:EA:78:DC:E3:12:F8:62:DD:F4:2B:1B:D4:C4:F6:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ssC9r63qeNzjEvhi3fQrG9TE9kU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/vMLOfJl1FpCbnYO8TBfTlzrnuyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1f3712-cf2c-486e-95b3-fcc336eed8d7/1/ssC9r63qeNzjEvhi3fQrG9TE9kU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.4.0/24
45.94.6.0/24
45.156.30.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:e9:01:a5:0b:ad:12:be:5c:15:ac:90:82:cc:bc:3f:5d:9b:
a9:bd:19:7d:e5:01:f3:4f:cc:2e:96:1a:97:36:a5:3c:f6:de:
f1:77:72:f6:55:72:f6:a6:e2:1a:c9:49:ca:ae:13:0c:9f:45:
9f:82:81:ce:f2:23:dc:c9:d0:2e:d7:d1:5a:b7:72:35:d1:83:
85:74:0c:cc:40:be:5a:c1:ed:9f:25:bb:1c:2b:4b:6f:1f:2b:
9a:96:78:66:8e:41:99:23:d4:8b:cc:5f:bb:17:c7:39:eb:9a:
f7:92:e5:e9:a2:f5:02:ba:0a:b8:8f:ca:5c:a5:1b:61:db:5d:
d3:40:46:47:38:32:0c:99:3d:2b:a2:81:32:2d:e5:0c:c8:ac:
df:54:8b:2b:42:69:ac:fe:6d:a8:ab:c9:62:9c:e8:83:85:0d:
4e:a6:7a:a5:ee:90:b7:87:9b:89:f6:7c:e2:ca:81:5c:8b:65:
50:22:04:e3:20:67:e3:37:2b:7d:c6:8f:bf:a1:08:54:9e:23:
ac:f3:37:4f:8e:53:99:1b:7b:f9:86:b1:57:25:1d:95:1b:9d:
b4:66:e8:da:53:5b:8a:4f:d3:82:27:69:a4:61:c4:b2:e1:ce:
f5:d8:29:d3:09:8e:ff:a1:c5:66:50:14:4d:c0:bc:b0:62:8c:
c2:42:f6:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:36 2023 by rpki-client on console.sobornost.net