Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/S7T92vTQnQ9unSIdiyrjCMdL01g.roa
File: S7T92vTQnQ9unSIdiyrjCMdL01g.roa (raw, json)
Hash identifier: Ge3Ij5iHYKJomcrYS/LWYwj8NVqUuXkjQS/m67qdT0o=
Subject key identifier: 4B:B4:FD:DA:F4:D0:9D:0F:6E:9D:22:1D:8B:2A:E3:08:C7:4B:D3:58
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: ECED4E
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/S7T92vTQnQ9unSIdiyrjCMdL01g.roa
Signing time: Mon 30 May 2022 08:14:14 +0000
ROA not before: Mon 30 May 2022 08:14:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 395886
IP address blocks: 45.155.67.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15527246 (0xeced4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: May 30 08:14:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4bb4fddaf4d09d0f6e9d221d8b2ae308c74bd358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b2:c1:73:b5:4b:a1:6b:70:4a:58:5f:c4:0c:
03:c3:07:e9:3e:87:3d:fd:03:aa:0b:89:54:78:c0:
cf:4e:9a:f0:f6:dd:16:8d:3e:a0:49:00:00:9e:33:
e9:72:f8:1f:a7:49:f9:8a:74:de:6e:60:cd:68:df:
a5:a4:c4:4d:48:94:81:eb:da:38:ab:c4:02:ae:f7:
20:73:57:d0:00:09:79:a0:15:d5:e4:90:3d:98:fd:
4f:e0:a3:d5:b7:06:f4:87:eb:37:45:8a:f3:51:47:
9b:4a:86:9e:f2:31:95:6d:28:c2:0a:a9:ed:4b:ed:
71:d5:ad:86:af:e4:70:3c:91:e0:2a:59:1c:64:f9:
f7:79:c4:3b:8d:12:e8:b8:85:bf:70:c8:b3:fd:0b:
ca:21:12:7e:c4:49:da:bf:9b:a9:ea:10:04:41:5b:
dc:12:bc:41:4e:92:62:f2:ab:ad:62:a4:65:7b:70:
f2:2d:d9:36:6a:92:56:73:f2:e7:f8:2f:76:73:52:
91:ad:66:55:fb:8d:4b:f8:e1:12:e7:9f:20:42:86:
62:13:c3:e3:12:3d:04:3a:05:fe:fc:35:92:66:b6:
a9:2b:38:a5:b3:92:f1:23:62:dd:cc:46:f7:64:64:
61:2a:b3:74:1d:37:1a:10:3f:01:5a:8b:c4:ae:7d:
2b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:B4:FD:DA:F4:D0:9D:0F:6E:9D:22:1D:8B:2A:E3:08:C7:4B:D3:58
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/S7T92vTQnQ9unSIdiyrjCMdL01g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.67.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:b8:20:f6:64:be:33:a6:ec:c6:8c:53:5a:50:47:10:84:76:
2a:a9:fa:ed:e0:16:b3:f9:44:a0:30:5a:f5:8f:c1:c2:0f:47:
56:22:34:a9:ee:67:54:41:d5:2c:58:30:2d:76:f4:07:88:14:
ef:6a:6d:8c:8e:63:20:d7:37:d8:7b:c4:9f:0c:44:14:f0:08:
66:83:82:75:06:6a:0c:c8:23:aa:f7:8a:6d:fe:fd:b5:2b:6b:
79:3f:7c:b9:11:fc:9d:e3:c8:54:cd:41:8e:39:68:b3:01:83:
33:85:51:9c:2a:fb:ad:fe:3f:e0:11:df:26:d2:14:a3:62:97:
01:30:90:cc:d7:85:76:5f:e0:c6:8b:e3:bc:9d:b5:5b:85:e3:
c8:6e:d9:ec:0f:89:df:2e:f0:d4:6f:10:38:e0:7c:83:1f:23:
a0:ac:a7:13:21:cd:b0:71:24:cd:42:90:50:22:38:f0:5d:b9:
fa:e2:ec:7f:dc:68:12:d5:52:4f:b7:25:fa:6a:8b:2e:c8:50:
64:cb:16:31:55:a1:8f:22:6d:ad:83:c0:1d:5f:2b:48:e9:a3:
78:48:b2:2d:35:a3:92:98:ef:7b:45:1b:57:87:69:c8:4f:f1:
ad:da:5b:e4:89:7e:8c:78:8a:a7:60:33:e9:ef:f3:43:a0:82:
3b:08:a1:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:40:33 2023 by rpki-client on console.sobornost.net