Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/oweykaO-NgX8fqhprF_qV6_Fa-k.roa
File: oweykaO-NgX8fqhprF_qV6_Fa-k.roa (raw, json)
Hash identifier: KC4kDKojFOAXUkRItZ3RxK5Wmdmdj1nLA8jKNY8Hv38=
Subject key identifier: A3:07:B2:91:A3:BE:36:05:FC:7E:A8:69:AC:5F:EA:57:AF:C5:6B:E9
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 0184B5E4F410CF6AE88F77A083A3A3DDA837
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/oweykaO-NgX8fqhprF_qV6_Fa-k.roa
Signing time: Sat 26 Nov 2022 21:43:11 +0000
ROA not before: Sat 26 Nov 2022 21:43:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15404
IP address blocks: 141.98.45.0/24 maxlen: 24
2a07:6f46:4500::/40 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b5:e4:f4:10:cf:6a:e8:8f:77:a0:83:a3:a3:dd:a8:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Nov 26 21:43:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a307b291a3be3605fc7ea869ac5fea57afc56be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:e6:63:ab:3e:5a:ce:43:4c:2c:d1:56:7d:6d:
dc:b9:f9:dc:cf:5c:96:9b:e1:08:ac:17:b6:b0:39:
f1:c7:a0:2b:0e:b1:d5:e2:64:b9:04:fa:7f:90:b2:
de:bf:8b:3d:bd:d6:12:bf:57:60:b0:3f:92:c5:b0:
d2:e2:2a:62:ff:fd:fd:e0:92:6a:13:24:55:ca:d3:
b8:24:48:13:93:7c:5d:78:db:30:5e:93:72:cd:34:
c9:dd:9f:e3:2e:b0:91:73:36:f2:45:5e:3c:97:45:
2c:86:a6:86:6f:8d:e5:ea:70:4b:9a:6d:16:c4:a8:
23:6b:32:7b:a6:a7:7f:cc:a4:c9:16:98:bb:72:a2:
1c:f1:99:51:9d:71:02:f1:ae:cc:aa:69:c2:62:77:
9d:41:73:29:99:f9:27:fa:a2:98:0a:5b:72:a2:77:
a3:92:a5:93:ee:c2:2d:41:32:00:22:f2:40:7d:fe:
48:f4:58:20:67:26:72:31:31:65:fc:e7:7a:84:71:
32:0f:95:7e:e8:52:ff:d2:12:d1:8d:7d:2f:26:65:
4a:7d:16:a8:9d:a4:61:a2:4b:8f:28:5e:d4:89:33:
b8:d9:f7:66:e4:3b:c9:bc:b8:99:12:02:8b:b1:2b:
f4:de:4b:ce:66:43:1c:60:e4:c9:06:2f:f8:08:86:
e9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:07:B2:91:A3:BE:36:05:FC:7E:A8:69:AC:5F:EA:57:AF:C5:6B:E9
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/oweykaO-NgX8fqhprF_qV6_Fa-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.45.0/24
IPv6:
2a07:6f46:4500::/40
Signature Algorithm: sha256WithRSAEncryption
3c:7e:99:2e:3a:76:ab:fa:c6:83:ff:3a:80:9b:60:96:f7:bd:
bd:55:04:d7:87:03:6c:b0:a4:15:3c:6e:00:95:35:43:57:a4:
3f:c8:c8:3b:9d:43:1e:9d:f7:e5:3d:04:73:d1:90:62:39:fa:
a4:d0:0a:95:e1:b1:d1:a6:0f:59:3c:94:c1:1e:82:c1:6b:6e:
f0:94:ce:5c:fb:98:9f:5e:12:c5:1f:78:15:b3:0c:9b:29:94:
86:ac:d8:10:fd:30:27:e5:c9:63:d9:77:8b:fd:2d:8f:3a:04:
33:60:17:50:e3:64:68:38:d0:ea:12:17:b8:c0:45:46:ea:3d:
63:10:02:e6:50:79:1b:99:f8:8f:30:db:41:d9:39:e5:f3:3c:
74:8c:6c:cb:ad:e5:c7:08:29:2c:80:d6:3b:8d:da:ed:84:6e:
f2:fc:dc:08:54:16:85:f2:3d:da:04:34:c4:15:be:f5:7d:d6:
44:1c:7c:13:7d:c9:71:2f:1a:a4:e5:c3:63:4d:f3:6e:40:2e:
31:0b:07:a8:ef:2a:ff:3f:c4:df:d4:32:c3:87:ea:60:4b:41:
15:b9:0a:f0:0f:3a:11:18:7e:e8:c2:f3:10:82:7f:7d:f6:04:
29:75:fa:39:4c:68:19:af:92:24:83:f6:b1:41:15:74:23:a4:
e1:10:d6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:11:39 2024 by rpki-client on console-ams.rpki-client.org