Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/5sXCRNbAjcYfxcmr8u7NhJ9ePog.roa
File: 5sXCRNbAjcYfxcmr8u7NhJ9ePog.roa (raw, json)
Hash identifier: Dw39lU+UgqIaWXSmbuZmgCmB6f2n19eihCmEAq2GCbM=
Subject key identifier: E6:C5:C2:44:D6:C0:8D:C6:1F:C5:C9:AB:F2:EE:CD:84:9F:5E:3E:88
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: 018491B1F4B0A2986DD5387DE25B3AC20E2E
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/5sXCRNbAjcYfxcmr8u7NhJ9ePog.roa
Signing time: Sat 19 Nov 2022 21:01:09 +0000
ROA not before: Sat 19 Nov 2022 21:01:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204843
IP address blocks: 45.155.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:91:b1:f4:b0:a2:98:6d:d5:38:7d:e2:5b:3a:c2:0e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: Nov 19 21:01:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6c5c244d6c08dc61fc5c9abf2eecd849f5e3e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a9:fb:1e:41:f7:06:9f:e5:5b:e1:40:a3:bd:
e9:16:58:2d:ee:06:ee:52:6d:e0:4d:4a:2e:a8:53:
93:c6:34:ba:75:20:43:da:a4:c0:d1:94:be:61:ce:
0b:14:5e:eb:a9:32:d0:f7:0c:98:f6:d0:45:88:1d:
2f:bf:72:4f:3f:19:43:2a:84:bc:8b:a4:f9:21:50:
41:4b:41:61:d6:88:43:bf:5d:ca:cc:61:d8:ad:67:
bd:40:bf:2d:7f:48:ec:00:15:20:30:f2:73:88:bd:
65:bb:58:43:55:66:b3:b6:99:e2:e1:86:4e:be:d5:
a3:76:ea:a2:66:ff:63:63:64:cf:19:d7:26:85:c7:
24:88:20:83:d4:02:31:9b:b6:05:75:a2:89:9d:de:
ec:ab:4e:11:fb:c5:39:85:28:44:5f:2d:6a:f7:7e:
11:c4:74:a2:6b:7c:fb:06:89:bf:dc:f4:9e:9e:9c:
88:c7:00:79:08:d6:31:bc:df:a1:03:16:e0:b3:f4:
fe:a9:ad:2c:b3:44:8b:c7:ed:81:31:44:21:5f:b2:
fd:5b:91:b5:c4:26:51:39:f5:23:3b:25:a7:20:cf:
c5:72:33:9d:82:ec:47:75:24:c1:99:80:b8:93:5f:
b9:33:52:f6:22:a8:61:f6:48:34:95:4b:ff:af:91:
7b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C5:C2:44:D6:C0:8D:C6:1F:C5:C9:AB:F2:EE:CD:84:9F:5E:3E:88
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/5sXCRNbAjcYfxcmr8u7NhJ9ePog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.64.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:34:c1:42:37:44:7f:dd:5e:8e:9f:6c:c8:1d:68:39:21:c2:
9b:13:66:43:48:c9:d5:99:c4:85:b0:84:22:eb:63:05:16:eb:
fc:c8:69:39:82:73:c3:a8:fb:be:ef:cb:f3:be:b7:72:40:79:
6f:0c:5b:9e:99:f6:62:d4:7b:d4:c6:ca:74:dd:bd:6a:cf:8b:
c9:41:bd:2e:9d:d8:61:c1:44:53:76:82:ad:fb:4e:f0:b7:dd:
80:f9:e7:28:23:14:f5:c9:16:b2:48:59:09:4b:8e:c3:71:c8:
a4:fd:b4:1c:50:4c:e3:5a:da:62:36:26:3a:9c:8c:e0:52:05:
e0:cd:50:85:e9:60:54:03:3c:8c:78:d9:ec:64:ff:e3:77:29:
4c:95:9e:37:9e:c3:5c:af:48:0e:78:25:66:19:cf:09:59:14:
d3:59:af:2c:d2:80:7c:46:bd:ca:5b:36:97:b6:3a:c7:a8:e0:
b0:02:ed:1c:76:7a:0e:c4:05:b1:dc:9b:a2:db:aa:aa:3b:27:
f4:b9:b7:34:d5:79:96:bf:a7:a5:f8:a8:b8:63:dd:bb:c8:71:
03:6b:a6:b8:cc:0b:60:2b:00:5f:30:64:62:73:ad:50:c3:da:
9f:57:bd:1c:a5:77:98:f5:52:98:3c:39:5c:1b:db:70:2e:c7:
3f:6c:b1:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:33 2023 by rpki-client on console.sobornost.net