Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/1XbqxbrwXsK-BCqjoL2jeQdlfpo.roa
File: 1XbqxbrwXsK-BCqjoL2jeQdlfpo.roa (raw, json)
Hash identifier: 4ntUNTkd4RNqzqE0+G91plymC4Twzh0XV2StqFLUYI0=
Subject key identifier: D5:76:EA:C5:BA:F0:5E:C2:BE:04:2A:A3:A0:BD:A3:79:07:65:7E:9A
Certificate issuer: /CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
Certificate serial: 060D9D6C
Authority key identifier: 79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/1XbqxbrwXsK-BCqjoL2jeQdlfpo.roa
Signing time: Sat 01 Jan 2022 12:56:59 +0000
ROA not before: Sat 01 Jan 2022 12:56:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213027
IP address blocks: 45.92.51.0/24 maxlen: 24
45.92.48.0/22 maxlen: 22
45.92.48.0/24 maxlen: 24
45.92.49.0/24 maxlen: 24
45.92.50.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 101555564 (0x60d9d6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79ad074aface91ac3fdd0a3ebd60fadbc16de4fc
Validity
Not Before: Jan 1 12:56:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d576eac5baf05ec2be042aa3a0bda37907657e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cd:91:9d:65:8a:00:34:d8:1b:18:e4:cc:9b:
99:c9:c0:18:25:10:e5:48:d5:94:87:be:80:a0:53:
1a:50:92:df:87:cd:5e:cd:cc:65:3c:a3:d0:61:bb:
29:e1:b9:0b:81:d2:95:18:00:80:ef:45:5e:06:71:
59:e1:dc:61:73:78:fc:d6:cc:50:0b:fd:e2:a4:49:
83:ad:e3:a1:e2:19:03:34:84:b2:77:41:9b:68:8a:
51:8f:61:98:23:c5:d4:23:db:95:2b:06:83:46:85:
96:5c:b8:42:c6:cc:29:db:bd:2f:be:f2:b9:96:74:
81:ed:99:c0:17:f0:b2:10:c6:e8:91:3d:17:c5:43:
3a:12:40:70:62:66:f3:83:73:af:b5:21:a5:2c:60:
63:ea:62:35:2c:f1:c4:4d:d8:be:b4:1d:1e:98:0d:
b4:08:1f:f6:fb:de:57:cb:0a:60:8c:fa:bd:6e:3e:
36:0c:08:b5:5d:0d:bd:35:33:0d:0d:44:5c:c0:71:
5c:24:f2:c6:3b:3e:ce:cb:95:4f:69:08:bb:b0:6d:
3c:8e:5b:50:d3:79:64:f3:e5:6b:a8:fc:82:20:2c:
6a:ef:e9:8e:9c:37:49:88:24:fa:67:02:15:ad:c9:
a5:6d:8d:73:bd:be:5c:9d:aa:78:0b:88:18:4c:04:
14:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:76:EA:C5:BA:F0:5E:C2:BE:04:2A:A3:A0:BD:A3:79:07:65:7E:9A
X509v3 Authority Key Identifier:
keyid:79:AD:07:4A:FA:CE:91:AC:3F:DD:0A:3E:BD:60:FA:DB:C1:6D:E4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/1XbqxbrwXsK-BCqjoL2jeQdlfpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f6de8-9e29-4cb3-aa4a-0a2e9336d6d0/1/ea0HSvrOkaw_3Qo-vWD628Ft5Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.48.0/22
Signature Algorithm: sha256WithRSAEncryption
69:6f:66:6c:e7:5d:f5:07:35:c3:d2:1e:e9:03:0f:1c:a3:41:
2f:a6:bf:50:1e:20:4f:83:26:1c:00:61:b2:ca:23:51:0a:4f:
17:6c:fb:5e:6d:77:15:05:7c:00:37:be:88:ad:33:8a:ec:73:
9c:7b:f1:f7:db:77:e6:59:76:95:bb:c0:38:2e:9a:a6:63:51:
3b:fb:4c:dc:29:e8:74:00:53:83:bf:e1:3c:d6:63:d1:ea:b0:
09:1f:64:79:ee:fc:62:77:bc:c0:73:9a:b6:a1:bd:fb:8d:90:
4e:ab:4c:81:0d:76:ae:d7:6f:ae:b3:e6:a4:ba:bd:4c:91:38:
c2:bc:b3:b9:da:43:27:41:63:09:69:d1:5f:2e:a0:91:2e:72:
8f:15:3f:22:5f:1d:52:07:f6:62:a6:da:eb:41:48:7e:f9:a6:
80:84:ba:1a:a9:11:22:7b:32:0c:22:63:90:a1:57:24:88:46:
be:f9:2b:fe:b4:3a:9f:7f:43:dd:ee:f1:ce:5b:17:80:1a:1b:
de:29:91:a4:00:9e:16:cc:0d:c1:0b:7a:b8:1c:53:1f:96:6c:
b1:ef:1f:28:a4:cd:12:f0:ee:e7:c8:ae:27:8b:4f:9d:2a:a2:
99:72:b1:d9:06:f0:97:65:68:f2:ea:aa:19:87:04:7c:24:fe:
56:f4:a5:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:18 2023 by rpki-client on console.sobornost.net