Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/OQsbd1KR9K3eRGgFnNS2W3Jl7Z8.roa
File: OQsbd1KR9K3eRGgFnNS2W3Jl7Z8.roa (raw, json)
Hash identifier: mAgrKwnYJbo/ZpiG49qkge5xwXD+RL6AfUpUSbqQP6g=
Subject key identifier: 39:0B:1B:77:52:91:F4:AD:DE:44:68:05:9C:D4:B6:5B:72:65:ED:9F
Certificate issuer: /CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Certificate serial: 0163F0E0
Authority key identifier: F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/OQsbd1KR9K3eRGgFnNS2W3Jl7Z8.roa
Signing time: Sat 01 Jan 2022 00:52:00 +0000
ROA not before: Sat 01 Jan 2022 00:52:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136133
IP address blocks: 45.154.183.0/24 maxlen: 24
45.154.182.0/24 maxlen: 24
45.154.181.0/24 maxlen: 24
45.154.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23326944 (0x163f0e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Validity
Not Before: Jan 1 00:52:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=390b1b775291f4adde4468059cd4b65b7265ed9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6b:1f:7c:7a:d7:3b:3d:ac:5c:56:2d:03:40:
41:c5:ea:e6:34:44:1e:e0:79:bd:76:1b:2f:99:98:
8a:22:7f:97:fb:f7:cc:59:3a:de:db:46:98:0e:e1:
e3:cd:1c:27:15:ef:d2:e3:85:ac:d1:71:80:bb:cb:
d2:de:b3:2a:de:96:bd:6a:0a:ee:3d:8a:79:2e:96:
24:50:a4:c8:cc:b0:dd:e3:d9:e6:e3:70:c9:90:9a:
91:43:9e:cf:a5:6d:78:8b:a4:83:08:57:c9:cb:82:
dc:46:ee:e1:49:68:b5:e7:07:0a:68:28:bd:fc:f7:
f8:52:e0:7f:12:f4:f7:84:3f:f4:13:7d:8b:12:69:
64:fe:64:db:45:66:3d:42:b4:cb:cb:0b:61:a3:52:
a4:a1:22:3b:21:dc:84:eb:02:c8:a2:1e:9d:d5:df:
cd:e7:90:4b:4c:1c:ae:d7:bf:29:33:ed:62:c6:1f:
0b:d4:fb:34:2f:d8:3f:8b:51:85:13:51:cd:f9:c8:
64:74:a7:f0:a1:8b:f7:ef:a3:69:41:14:a5:46:4b:
2d:8e:33:c5:3c:14:a7:65:28:93:97:5c:25:6d:3f:
02:bf:90:36:3c:fe:24:ab:8f:90:fb:8c:9f:76:e4:
82:3f:4a:79:df:06:b5:01:06:8f:a0:3c:4d:3c:4c:
d4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0B:1B:77:52:91:F4:AD:DE:44:68:05:9C:D4:B6:5B:72:65:ED:9F
X509v3 Authority Key Identifier:
keyid:F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/OQsbd1KR9K3eRGgFnNS2W3Jl7Z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.180.0/22
Signature Algorithm: sha256WithRSAEncryption
63:63:7f:a3:28:45:e7:a4:fa:1d:6f:fd:50:61:61:35:0e:7a:
2c:40:fd:22:5d:51:7a:28:da:a8:0d:8f:ec:47:80:49:60:df:
58:0b:dd:bf:da:37:53:94:b1:0f:34:67:d3:58:a7:41:8b:29:
17:f4:db:69:08:d3:2b:c1:56:28:cb:ae:75:eb:85:d2:d5:3a:
a3:34:81:5f:4c:5b:b5:2b:4e:37:ee:d7:67:52:64:2e:e7:36:
b1:4b:ee:79:44:e8:42:e5:40:69:cb:60:b2:c2:b0:0a:2f:c7:
93:2f:cc:57:3f:30:ac:07:d1:36:70:46:c1:b3:97:82:cc:81:
fb:ce:ff:f0:93:18:8d:c4:2b:a8:2a:e9:df:77:42:8b:45:de:
58:47:ad:9f:9f:50:82:c6:c1:5b:d8:c5:f4:70:d2:b8:02:2f:
30:45:b9:e8:bb:ac:6b:54:dc:2e:55:15:43:ff:fe:91:6f:e8:
c7:c8:de:8d:e9:1f:f9:a1:b4:f0:30:5d:28:84:0c:a4:08:34:
cc:ac:c2:e6:ee:37:2c:ef:07:db:0a:8e:aa:8e:74:be:45:b9:
5b:01:4c:26:28:53:ad:a2:cb:88:09:2e:18:65:1d:b7:d3:17:
95:63:1c:ac:36:33:14:34:31:32:3e:b8:90:d9:ac:c2:18:60:
b6:9b:30:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:49 2024 by rpki-client on console-fra.rpki-client.org