Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/o5cTptSzTHHhtPnGxXkvls2k4Lo.roa
File: o5cTptSzTHHhtPnGxXkvls2k4Lo.roa (raw, json)
Hash identifier: J0k9qiLmCg+ZgD7Zz9hyvIc7kRD51xraJQy0UDz155o=
Subject key identifier: A3:97:13:A6:D4:B3:4C:71:E1:B4:F9:C6:C5:79:2F:96:CD:A4:E0:BA
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0944B9C6
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/o5cTptSzTHHhtPnGxXkvls2k4Lo.roa
Signing time: Sat 01 Jan 2022 06:00:35 +0000
ROA not before: Sat 01 Jan 2022 06:00:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133219
IP address blocks: 194.15.39.0/24 maxlen: 24
45.147.6.0/24 maxlen: 24
45.67.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155498950 (0x944b9c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 06:00:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a39713a6d4b34c71e1b4f9c6c5792f96cda4e0ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8f:6b:d5:52:1a:7b:cc:6a:68:8d:06:c4:1a:
eb:b3:a9:e6:a1:9d:e7:2f:d0:a0:8f:5c:fa:95:2c:
9f:0d:9f:42:d5:db:1b:3f:1c:b1:83:d1:c2:b7:50:
49:d3:25:b1:1c:bc:05:d7:b1:52:ad:c7:e7:ce:f0:
05:57:1f:43:c3:ce:1e:f4:a3:26:2e:14:20:23:a4:
72:5a:31:1e:af:e2:95:de:ad:b3:0d:cb:a6:d1:e5:
19:66:cd:45:56:cf:e3:3c:c3:5d:ca:6e:3c:6f:8a:
9d:d9:10:80:34:40:cf:69:bd:bb:8f:7a:45:2d:fb:
e8:1b:91:84:22:59:22:26:e1:01:6e:3e:e4:42:2e:
f4:31:87:30:9c:b9:ea:03:a8:33:b7:12:08:4d:30:
a8:58:c7:9d:d2:f6:69:aa:c3:fb:50:11:83:8f:98:
15:1e:77:e3:d0:61:dd:28:62:a2:08:9b:b9:59:14:
bf:fb:4e:08:b6:78:c9:30:54:3f:5d:47:6c:41:3a:
28:d5:e6:db:d5:99:e5:7f:79:1e:bb:bd:17:42:75:
4d:2a:e9:7f:70:79:d2:5a:9f:8e:ae:1f:0c:df:d8:
44:7b:4b:ba:8d:eb:d3:49:8b:55:43:64:68:1d:14:
a4:3d:ec:00:eb:79:a6:05:04:3a:18:da:b1:76:e3:
62:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:97:13:A6:D4:B3:4C:71:E1:B4:F9:C6:C5:79:2F:96:CD:A4:E0:BA
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/o5cTptSzTHHhtPnGxXkvls2k4Lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.138.0/24
45.147.6.0/24
194.15.39.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:13:58:1c:2f:07:11:c2:96:cb:a0:4b:8a:d5:e3:be:a7:92:
44:ad:ce:1b:0c:31:a6:8d:15:50:d0:ae:e1:a0:8d:fb:c3:cf:
85:05:85:6c:6e:8b:9b:75:3e:63:4a:8b:7f:e9:c1:03:ad:eb:
6b:5b:9d:cf:7a:8c:ed:03:4a:f5:0c:26:1e:45:b2:4f:0c:e2:
60:89:d1:51:47:62:c0:15:eb:ad:38:10:86:9d:bc:a2:50:c6:
37:b7:4f:02:72:48:17:64:31:22:94:37:31:0b:7e:c7:37:21:
76:a3:00:2f:48:16:09:22:f3:1f:1e:70:79:a2:ff:25:90:d3:
d6:56:fd:52:b4:9a:ed:5e:b2:0a:78:00:90:78:a1:ae:b1:94:
99:3e:38:b2:6b:e9:73:ef:0b:d3:3a:82:6b:c4:5c:2a:53:ab:
04:b2:03:96:9e:22:2e:da:51:96:ab:02:cb:6b:47:b9:99:3a:
de:b3:89:7b:2e:2a:28:ae:e4:6e:e2:54:1f:7f:62:2f:0a:e6:
23:7d:33:8d:52:bf:7f:ba:5f:c9:21:7f:a8:e9:39:b2:dc:34:
ac:1f:26:6e:52:4e:06:99:75:58:e3:3f:e7:9b:b9:ae:a1:78:
a7:a9:8e:5d:68:2d:75:e9:77:b8:0c:7b:ea:a0:25:a0:ea:40:
c0:90:4a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:19 2023 by rpki-client on console-ams.rpki-client.org