Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/OLmh1pqlELXOsoYFnW13x5kOX28.roa
File: OLmh1pqlELXOsoYFnW13x5kOX28.roa (raw, json)
Hash identifier: VsWtQt6d4gGsqyq8YPjl+CJV0v1mINckXfMUhCy2Zk4=
Subject key identifier: 38:B9:A1:D6:9A:A5:10:B5:CE:B2:86:05:9D:6D:77:C7:99:0E:5F:6F
Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Certificate serial: 051F277C
Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/OLmh1pqlELXOsoYFnW13x5kOX28.roa
Signing time: Sat 01 Jan 2022 09:01:49 +0000
ROA not before: Sat 01 Jan 2022 09:01:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48528
IP address blocks: 45.150.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85927804 (0x51f277c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75
Validity
Not Before: Jan 1 09:01:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38b9a1d69aa510b5ceb286059d6d77c7990e5f6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bb:3f:2f:73:89:ec:a7:45:53:1b:f7:57:d7:
5b:d4:fb:a2:6c:ad:af:3c:8f:b9:0d:d1:6b:a5:24:
9a:cf:8a:37:fc:10:e1:95:41:bc:30:42:6d:11:8b:
a3:33:47:7f:fb:c8:5c:19:e2:a4:92:fb:11:d7:39:
7a:3a:29:f5:37:3c:49:3c:39:09:9b:06:5a:60:a7:
4e:dc:51:46:93:c5:63:f3:07:d1:f6:10:27:4b:f8:
e0:c5:8a:9e:4c:6f:13:95:27:51:87:b2:05:73:5e:
ca:2e:7f:0c:e2:c6:85:f2:72:46:38:f4:10:d3:cb:
c6:93:8d:1a:3f:3c:0b:d5:f4:d4:37:d3:9b:a2:80:
72:c1:5a:4e:4c:1d:02:8b:00:3a:da:50:98:78:e7:
d0:40:ba:e6:e4:94:a7:7c:d6:d6:fa:75:e9:d9:4a:
c7:36:a1:58:5b:6f:88:dc:ab:ac:ac:76:ae:95:f2:
20:5b:cb:9f:bc:3d:22:2d:77:ed:35:67:9c:9d:3e:
37:f2:be:12:e2:f5:3b:e9:92:1f:d8:1a:9e:24:4c:
ca:c9:f0:f9:a7:cd:23:c1:e7:58:6f:ec:f4:21:64:
4e:10:87:0c:9a:34:93:2a:7c:cc:79:16:f6:01:8d:
6c:c8:b0:a5:8c:40:ff:e3:10:b5:94:8b:c4:01:46:
65:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B9:A1:D6:9A:A5:10:B5:CE:B2:86:05:9D:6D:77:C7:99:0E:5F:6F
X509v3 Authority Key Identifier:
keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/OLmh1pqlELXOsoYFnW13x5kOX28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.108.0/24
Signature Algorithm: sha256WithRSAEncryption
62:02:5d:96:4f:33:3d:bd:d5:e5:07:e2:05:27:98:da:5b:43:
a6:c5:9f:60:5a:ec:1b:9b:0d:f7:44:28:d8:d4:76:06:19:9f:
49:6b:e3:32:ec:f4:de:0b:9a:3a:51:23:31:6a:be:8a:49:07:
11:9b:a3:c2:56:fe:ce:28:6c:23:fd:55:27:9b:25:db:40:b7:
58:92:ee:dd:db:2e:1c:9e:8f:30:44:b4:42:ce:d9:11:e2:d5:
2a:4f:4d:f7:e6:17:12:bf:d5:15:ca:c9:1c:02:e0:b3:1d:30:
b3:f5:24:52:88:bf:f7:8e:7f:8a:4e:5c:9d:99:05:fd:e6:d3:
f3:f0:31:36:2a:41:2d:8a:6b:7a:07:35:80:0a:a9:e8:ad:36:
a3:ce:d3:03:ba:3e:ac:41:f4:21:80:9d:dc:c4:bb:7b:93:3d:
0b:6e:7a:45:9e:6e:f7:8c:e7:1f:33:5f:b6:15:c8:70:de:59:
c7:5f:1a:94:47:2f:2d:85:50:f6:eb:38:cc:28:ad:1a:05:c7:
7b:95:a7:64:27:db:ed:55:a4:8a:d8:ac:5c:ed:1a:7f:e4:74:
26:05:df:b0:55:d8:15:8f:41:c3:e9:37:68:a7:22:67:51:ed:
9c:ae:3b:06:33:c4:fd:bd:9c:17:c6:95:f8:d4:bf:34:e8:49:
3e:43:87:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:37 2024 by rpki-client on console-fra.rpki-client.org