Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/OCAL5dq89EMwUoxicxXfVIpxPB8.roa
File: OCAL5dq89EMwUoxicxXfVIpxPB8.roa (raw, json)
Hash identifier: GrZxr4BaFjEY6RpsZhla18mOgru7b9volCiN/Wmo1wM=
Subject key identifier: 38:20:0B:E5:DA:BC:F4:43:30:52:8C:62:73:15:DF:54:8A:71:3C:1F
Certificate issuer: /CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Certificate serial: 01A447FE
Authority key identifier: 35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/OCAL5dq89EMwUoxicxXfVIpxPB8.roa
Signing time: Sat 01 Jan 2022 10:58:26 +0000
ROA not before: Sat 01 Jan 2022 10:58:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208802
IP address blocks: 45.84.200.0/23 maxlen: 23
45.84.200.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27543550 (0x1a447fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35216a360277876e3e93b29bd4bb9c9231fad2f7
Validity
Not Before: Jan 1 10:58:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38200be5dabcf44330528c627315df548a713c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:43:74:66:0f:43:f8:09:f2:c4:42:49:67:67:
63:a5:6f:4a:24:0d:76:ef:d3:28:d1:bf:b4:8d:79:
34:c8:76:72:48:97:b2:21:6e:01:7f:ce:a2:47:69:
c7:0c:37:fb:1d:b1:3d:c8:80:07:41:e5:aa:b5:d0:
f4:09:2e:4e:0c:eb:b9:91:6c:af:fc:27:a5:9e:2e:
70:ad:38:50:8c:98:c4:ac:e3:16:66:dd:06:d7:60:
0b:b3:58:d8:64:64:f5:52:1a:15:2d:26:27:12:77:
a2:bf:3f:45:aa:66:93:a1:22:32:ca:8d:82:e0:e7:
55:11:fa:1d:a3:17:a3:73:b7:17:fe:41:3c:64:7f:
03:16:4e:91:96:14:8b:c3:4a:7b:e3:e0:4d:dd:73:
30:7b:88:ab:b7:7c:63:fb:fc:13:29:57:2d:3e:86:
42:76:05:b2:73:7b:36:46:39:c2:a8:c1:a0:fd:34:
72:23:17:de:35:73:62:40:2c:8c:de:31:cb:58:b0:
af:3d:2e:1e:3c:d6:ce:c0:99:7e:9a:30:96:30:77:
37:ea:d0:b5:2c:a5:76:87:73:a9:a9:6e:3c:c9:80:
e7:56:63:de:08:7a:44:8e:35:ad:27:f1:fa:68:9f:
1c:1e:6c:06:60:d5:4f:d9:2e:76:57:d1:33:35:1e:
63:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:20:0B:E5:DA:BC:F4:43:30:52:8C:62:73:15:DF:54:8A:71:3C:1F
X509v3 Authority Key Identifier:
keyid:35:21:6A:36:02:77:87:6E:3E:93:B2:9B:D4:BB:9C:92:31:FA:D2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSFqNgJ3h24-k7Kb1LuckjH60vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/OCAL5dq89EMwUoxicxXfVIpxPB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f25506-6a6c-497d-a4ab-248c47b3c7d8/1/NSFqNgJ3h24-k7Kb1LuckjH60vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.200.0/22
Signature Algorithm: sha256WithRSAEncryption
5e:32:d1:be:92:e1:a0:66:55:a3:a8:b1:f1:df:20:b2:59:73:
bd:bf:58:9d:e3:0c:fe:ab:1d:2c:49:5e:4f:6c:67:a4:09:e6:
18:76:f8:fa:ba:0b:c1:6b:9c:3e:f4:bd:9f:2d:59:b4:30:66:
53:fd:0d:4e:ec:e1:3b:b9:b5:eb:ac:48:47:23:f8:72:9f:bd:
70:74:ce:3f:78:de:cd:f2:00:07:ce:3e:91:0a:df:a7:b5:1d:
a3:8b:9b:f7:0b:58:87:7a:9b:c1:a5:d1:55:04:46:33:23:2b:
09:0d:d1:82:85:c1:4c:b5:52:84:b8:d8:3a:ce:f5:75:c9:28:
3a:59:81:1b:60:2f:dc:c2:63:6c:80:37:8a:84:ef:8b:e8:49:
9b:f5:fe:12:7e:d3:86:e8:b0:73:90:5e:72:0d:1c:26:86:bf:
8e:24:49:cb:90:64:d2:26:ec:5f:b7:e0:c1:5b:c3:0c:75:76:
40:5c:86:e9:c3:e3:26:2d:79:65:b5:dc:f7:88:26:2f:8b:a1:
f0:fb:83:33:94:ba:cf:67:d7:25:63:63:e8:91:77:5b:da:9e:
81:bb:ca:b5:5b:04:41:62:0f:93:72:eb:0d:73:70:39:48:66:
e1:ae:fe:be:4a:69:e6:a6:07:0f:85:a7:85:07:0d:63:40:c3:
a1:26:79:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:17 2024 by rpki-client on console-ams.rpki-client.org