Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/O1nHTRWcBCyh2CoPB2aQO2kCKzI.roa
File: O1nHTRWcBCyh2CoPB2aQO2kCKzI.roa (raw, json)
Hash identifier: c1VwDMIaxqB2nwSkCMCnfexK2kwnd3IHxGG/DlUl4aQ=
Subject key identifier: 3B:59:C7:4D:15:9C:04:2C:A1:D8:2A:0F:07:66:90:3B:69:02:2B:32
Certificate issuer: /CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Certificate serial: 0183CAE3494FFEE48945F5A45F49942728D3
Authority key identifier: 8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/O1nHTRWcBCyh2CoPB2aQO2kCKzI.roa
Signing time: Wed 12 Oct 2022 06:30:36 +0000
ROA not before: Wed 12 Oct 2022 06:30:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62229
IP address blocks: 178.22.78.0/24 maxlen: 24
178.22.77.0/24 maxlen: 24
178.22.79.0/24 maxlen: 24
45.157.245.0/24 maxlen: 24
45.157.244.0/24 maxlen: 24
45.157.246.246/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ca:e3:49:4f:fe:e4:89:45:f5:a4:5f:49:94:27:28:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Validity
Not Before: Oct 12 06:30:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b59c74d159c042ca1d82a0f0766903b69022b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:70:0a:e6:74:92:85:ed:57:c9:75:a9:f6:e1:
93:ec:22:32:68:85:ae:b2:9f:7b:96:de:32:b4:96:
7f:d2:ea:6f:47:d5:e3:7d:97:ce:15:91:2c:03:5f:
57:d1:f1:e0:4f:72:e5:4b:af:03:43:8e:65:fe:24:
34:06:88:54:8d:52:82:0e:4c:88:f5:6b:3e:1b:e2:
46:be:a2:77:be:04:dc:fa:5c:b8:4d:02:47:8e:e7:
8e:00:aa:47:22:f4:ca:fa:1a:82:59:17:84:dc:35:
f0:46:da:c6:0d:de:14:60:b5:0d:0a:c5:9b:d7:81:
c6:48:99:33:ad:9e:ed:fd:72:31:42:91:a5:eb:66:
07:24:d9:7b:c5:61:98:89:a0:98:e3:16:d2:fb:97:
dd:bc:aa:69:3e:3a:bc:7e:f3:0e:c3:00:30:f0:bd:
db:c9:8b:0e:ce:2a:17:75:7a:d1:3c:76:98:2f:6d:
32:9b:1e:04:7f:48:7f:4e:e8:00:12:dc:6f:8d:3f:
c9:97:a4:79:71:fc:b2:2e:0c:9f:c2:8f:aa:c6:a1:
70:8e:df:c2:04:b8:8c:a6:1f:da:83:46:1d:50:d5:
7c:9d:9a:ff:72:67:3c:34:3d:9e:65:15:20:0f:af:
c5:5b:d0:f4:8a:c2:fc:28:9f:89:43:03:5b:d8:33:
e3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:59:C7:4D:15:9C:04:2C:A1:D8:2A:0F:07:66:90:3B:69:02:2B:32
X509v3 Authority Key Identifier:
keyid:8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/O1nHTRWcBCyh2CoPB2aQO2kCKzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.244.0/23
45.157.246.246/32
178.22.77.0-178.22.79.255
Signature Algorithm: sha256WithRSAEncryption
15:88:76:7a:51:13:36:f5:fc:07:7e:53:76:9b:b2:92:f5:2b:
47:d8:83:a0:ba:01:28:a4:f5:80:10:80:9c:4e:bc:b7:46:cb:
6f:46:3a:d3:72:0e:03:76:36:d7:c1:37:3c:2c:96:d1:b4:13:
d9:83:3a:47:bb:cf:70:20:4b:ca:6d:07:33:b1:de:bc:4d:72:
a1:4c:02:80:69:c1:26:60:d1:06:b6:c0:e3:6f:49:2e:ed:8e:
0c:54:d6:3a:23:59:a6:27:b6:1b:95:da:da:dc:68:20:65:62:
72:56:85:3b:a4:36:7d:5b:8b:47:61:75:d0:68:82:4b:2d:27:
98:29:f3:88:46:00:90:da:f0:61:71:af:2f:e1:0b:2b:b7:49:
fd:12:36:5d:7c:70:45:3f:03:24:d4:77:72:54:ae:18:1f:1c:
d8:99:11:3b:ae:c2:54:0d:10:b6:de:b1:f0:b3:a8:8f:88:8e:
5f:d4:62:17:1e:37:29:00:db:44:b4:bc:b4:4f:3f:68:c4:0c:
69:bc:90:06:c1:07:70:31:8f:87:15:e8:f8:ec:bd:c7:eb:6b:
fd:49:1c:6e:85:b5:27:d6:ae:d7:a6:3e:92:3c:8f:4d:d3:b1:
39:5f:57:c9:86:d6:5a:25:14:89:d0:6e:5c:50:c6:b9:4f:fa:
ab:4a:ce:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:00 2024 by rpki-client on console-fra.rpki-client.org