Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/O2U3GrMC0fU2Ax9hXebywXN_kIA.roa
File: O2U3GrMC0fU2Ax9hXebywXN_kIA.roa (raw, json)
Hash identifier: YIYn3Cn2JfzzHrJsewU87XWzzhtnbAbC+vKXtGNOjPs=
Subject key identifier: 3B:65:37:1A:B3:02:D1:F5:36:03:1F:61:5D:E6:F2:C1:73:7F:90:80
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018536B63CBFCCF26D672637D56F4C46A088
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/O2U3GrMC0fU2Ax9hXebywXN_kIA.roa
Signing time: Wed 21 Dec 2022 22:03:10 +0000
ROA not before: Wed 21 Dec 2022 22:03:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 38337
IP address blocks: 45.88.66.0/24 maxlen: 24
194.180.49.0/24 maxlen: 24
185.225.75.0/24 maxlen: 24
45.128.235.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:36:b6:3c:bf:cc:f2:6d:67:26:37:d5:6f:4c:46:a0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Dec 21 22:03:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b65371ab302d1f536031f615de6f2c1737f9080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d7:9c:f7:40:48:2d:43:24:d8:25:1e:4d:20:
95:77:23:e3:f1:50:dd:37:b2:31:f2:f3:63:c9:1a:
31:91:02:8c:e1:59:be:e0:72:4f:04:78:ce:e1:07:
ee:a9:66:c5:ea:9d:32:e3:6f:3d:4e:9e:3e:41:46:
59:63:a9:7b:af:58:90:13:4b:1d:b7:1e:71:48:9e:
d5:72:0b:60:a5:93:5a:c2:20:5e:6c:bc:3f:79:53:
33:c5:d6:b8:18:6d:b6:cb:0d:59:82:da:99:77:d9:
07:70:e5:77:c8:8b:df:e5:65:9c:7f:cb:02:5d:ca:
7b:2b:62:58:01:1f:68:1a:99:33:cf:92:d8:07:77:
dd:bf:0c:d9:92:54:4b:4d:ae:ce:69:62:05:95:19:
84:10:78:9c:c7:1d:86:ec:18:4f:a7:d5:58:a2:aa:
7e:bf:36:93:10:02:8f:3b:d6:59:8c:a7:70:77:4c:
d7:71:17:89:54:ed:82:1e:2b:d9:50:86:f5:da:e2:
4d:e0:50:dc:02:a9:45:c0:24:35:70:67:b7:22:af:
1c:c5:81:33:b0:1f:79:6a:73:79:6a:b5:c1:21:e6:
8d:e2:c7:8f:8b:8f:18:bf:65:9b:26:44:84:2f:94:
50:53:bf:62:8a:30:3b:4b:6f:98:65:d4:ad:59:ab:
06:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:65:37:1A:B3:02:D1:F5:36:03:1F:61:5D:E6:F2:C1:73:7F:90:80
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/O2U3GrMC0fU2Ax9hXebywXN_kIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.66.0/24
45.128.235.0/24
185.225.75.0/24
194.180.49.0/24
Signature Algorithm: sha256WithRSAEncryption
52:bd:ac:74:1b:03:c2:5e:5a:96:ad:4b:d4:72:d2:8a:f7:4c:
f3:9b:0a:32:b7:16:19:dc:f9:91:90:2e:54:aa:f0:58:e0:19:
68:a5:1a:96:f4:15:b2:63:5c:31:08:c0:e4:15:d8:3a:56:5b:
29:88:cf:76:66:a1:b7:2e:af:b6:82:45:26:cf:98:d4:0e:66:
01:e0:1d:b4:13:b0:50:3b:19:04:76:3f:65:23:86:04:e5:e6:
07:94:0f:a9:3b:19:32:06:1e:54:5a:1e:d8:81:cc:69:09:e3:
47:00:59:77:d0:12:b6:dd:ca:22:be:e9:ec:c7:29:79:15:f7:
ea:99:3b:36:18:3c:59:be:b4:15:f8:c7:d4:ef:49:7a:fd:c8:
5d:6a:1b:e5:aa:90:8c:d9:42:af:5b:87:0c:15:fc:aa:9b:ce:
ff:e1:2c:c7:77:80:ad:ca:53:af:e1:fa:53:aa:f1:18:d7:ca:
53:37:75:46:7f:12:ad:bc:ed:77:00:f5:30:16:d1:b1:f5:16:
e4:2d:6d:65:c2:8f:bf:b1:f8:8d:c1:02:68:fd:48:4a:96:ae:
47:fc:f2:32:11:e0:df:3d:26:01:6a:ce:4d:ce:1c:38:2a:f7:
76:95:48:86:3b:02:c8:01:4f:b3:99:2e:c6:e1:4e:8a:e8:44:
54:b0:70:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:35 2023 by rpki-client on console-ams.rpki-client.org