Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/oS-oNozypBbugm_5cjFZ4qX-6wo.roa
File: oS-oNozypBbugm_5cjFZ4qX-6wo.roa (raw, json)
Hash identifier: +lDlDuy2/nqhDQSEuXEf2i8JAc0EOzNmk95n8uNt2Fs=
Subject key identifier: A1:2F:A8:36:8C:F2:A4:16:EE:82:6F:F9:72:31:59:E2:A5:FE:EB:0A
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 19E75178
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/oS-oNozypBbugm_5cjFZ4qX-6wo.roa
Signing time: Sat 01 Jan 2022 15:56:50 +0000
ROA not before: Sat 01 Jan 2022 15:56:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 133736
IP address blocks: 45.92.4.0/22 maxlen: 22
45.149.192.0/22 maxlen: 22
45.92.88.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434590072 (0x19e75178)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 15:56:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a12fa8368cf2a416ee826ff9723159e2a5feeb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0d:37:7a:95:cf:9e:2e:b6:e3:22:fe:46:60:
50:aa:34:a6:c0:ea:3b:ed:65:b3:53:3c:3a:66:96:
d0:84:07:f2:1b:08:3c:0f:5c:69:8c:d1:7d:0d:4b:
d3:65:e3:92:05:c4:c7:82:d3:76:4d:16:7e:62:8c:
08:f0:19:5b:b6:dc:e6:2c:4e:71:cf:29:21:4a:f2:
6e:de:72:a8:65:64:39:b0:1e:3e:2f:f4:58:12:3a:
b1:99:f6:48:58:8f:d6:b3:0a:19:72:b4:54:e3:d5:
48:9c:c5:32:6b:35:4a:af:ae:ec:4d:0e:62:af:e7:
40:f3:06:e6:9b:8a:53:af:df:24:fe:3a:12:a8:43:
bd:47:cc:da:26:39:10:a3:82:e1:64:e6:31:b3:8c:
f6:b0:e4:f2:d8:ba:b3:ff:d7:f5:35:eb:54:40:fb:
4c:49:86:3f:2e:55:cc:7e:36:e3:4b:64:94:75:bc:
45:51:82:3a:98:48:4a:06:d7:47:ba:dd:85:d2:3b:
da:64:f6:b4:b4:8a:b3:d9:ae:f5:53:2f:15:17:84:
06:fd:7d:d5:4c:95:e1:5a:28:4b:59:ee:15:af:8a:
e1:60:23:70:6b:be:80:f1:98:10:cc:ed:8e:f4:89:
eb:91:82:dc:0b:6c:08:48:f6:38:08:b3:7d:92:94:
0a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:2F:A8:36:8C:F2:A4:16:EE:82:6F:F9:72:31:59:E2:A5:FE:EB:0A
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/oS-oNozypBbugm_5cjFZ4qX-6wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.4.0/22
45.92.88.0/22
45.149.192.0/22
Signature Algorithm: sha256WithRSAEncryption
c3:2e:61:b8:06:26:d2:68:ba:09:91:f0:0f:6b:b9:2c:9a:81:
da:8e:f8:84:01:75:76:93:e5:9a:08:97:c7:56:66:c9:50:79:
d0:a9:a8:99:04:62:e2:8f:a7:05:08:85:08:ca:2f:cc:c7:82:
27:30:82:d5:ab:d7:f4:cb:a4:6f:ba:67:e0:f9:21:85:39:a7:
05:91:04:78:e7:b4:3a:86:46:c6:ad:d1:46:3f:e7:44:e8:bb:
0b:d2:39:b0:85:b3:e7:3a:95:e5:99:0d:fb:5b:0b:2e:6b:f0:
a9:09:96:be:86:6a:34:68:7c:cd:86:d4:9f:7a:53:cc:56:d3:
a1:4b:cc:ba:74:0f:f1:25:15:6c:20:2a:85:1c:dc:32:84:a5:
02:92:6f:27:a2:f3:8c:c7:23:c7:0f:d9:d4:c7:62:79:24:ca:
0b:ef:d7:62:c9:c2:ab:35:2a:13:36:76:a0:f8:1f:4c:b0:0e:
62:9e:43:a5:05:36:db:fa:e2:90:7e:ed:e7:43:ab:ca:c8:1d:
ad:b6:64:fa:d1:22:b4:fc:9c:f8:27:fe:5f:f3:69:19:5c:0d:
05:21:5b:df:ef:de:55:6d:55:04:e9:56:a7:18:de:c0:98:4c:
fe:80:07:32:5d:a3:71:17:4d:5b:88:fd:83:77:30:7d:74:a5:
69:78:13:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:33 2023 by rpki-client on console-fra.rpki-client.org