Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/OmSAqMGkzDGojL26Ij56Swtuh7U.roa
File: OmSAqMGkzDGojL26Ij56Swtuh7U.roa (raw, json)
Hash identifier: RK1WoIsFvNvPDvJChPjh6tRXs/3tVLHqJy1Rfhe3ins=
Subject key identifier: 3A:64:80:A8:C1:A4:CC:31:A8:8C:BD:BA:22:3E:7A:4B:0B:6E:87:B5
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 389175C6
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/OmSAqMGkzDGojL26Ij56Swtuh7U.roa
Signing time: Tue 17 May 2022 05:11:32 +0000
ROA not before: Tue 17 May 2022 05:11:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29286
IP address blocks: 82.103.105.0/24 maxlen: 24
195.34.109.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 949056966 (0x389175c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: May 17 05:11:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a6480a8c1a4cc31a88cbdba223e7a4b0b6e87b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e4:0a:83:aa:4b:72:d7:60:25:95:de:43:c5:
60:20:23:00:15:74:e6:30:79:c6:0a:6b:b3:79:0a:
29:66:da:b1:c0:1a:74:e1:ba:cf:ef:a6:b0:42:ea:
da:11:06:65:2e:27:a3:81:0d:b1:c1:07:d3:66:e5:
33:93:71:b8:23:e4:5d:09:e3:9d:8a:5f:ba:fe:4c:
84:c8:76:21:96:d8:b0:72:a8:01:09:a6:a6:c8:74:
29:f8:95:45:7d:56:16:e3:d7:4a:56:5c:30:a6:d4:
1d:a7:c7:d5:59:ae:46:cb:bb:3f:38:6d:df:12:91:
ac:fb:ef:d5:9b:a6:2b:3e:82:10:af:97:b2:45:e8:
c2:e2:9e:45:93:f2:e0:70:ab:99:b0:d5:e9:8b:b2:
59:13:89:c4:a0:6d:6b:b5:3c:57:ef:ea:9a:19:08:
30:58:81:64:59:63:c5:62:ee:e8:76:1b:4b:4d:6c:
1e:2e:cb:59:91:74:9a:ad:ff:51:d5:67:4f:c3:fa:
2d:5b:90:e0:15:1a:91:74:77:e0:0e:d3:44:15:73:
18:0c:ae:55:5e:03:64:06:72:f6:d8:50:f5:ed:94:
ee:4f:e4:e3:28:bc:42:88:60:35:85:f7:b2:5a:75:
8b:fd:03:5f:d7:99:44:5b:15:f5:64:13:a2:4c:53:
52:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:64:80:A8:C1:A4:CC:31:A8:8C:BD:BA:22:3E:7A:4B:0B:6E:87:B5
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/OmSAqMGkzDGojL26Ij56Swtuh7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.103.105.0/24
195.34.109.0/24
Signature Algorithm: sha256WithRSAEncryption
08:7c:d7:c6:36:25:ba:07:61:99:b1:bb:e7:dc:e8:de:91:99:
2f:46:57:43:a9:61:46:c7:a1:76:90:8c:44:e6:b7:cb:63:57:
9d:12:fb:88:de:d1:a3:2b:4a:7f:98:fd:32:64:ae:84:4f:ca:
22:76:06:d5:be:2b:6f:5e:e2:53:f5:52:3f:71:1f:cf:82:61:
da:34:73:01:95:ab:b6:96:94:af:5b:e0:9a:82:b4:18:82:5b:
bc:e9:cd:01:f4:06:c4:4a:e8:de:f3:c2:b4:78:80:1c:d6:96:
c0:1e:40:0c:54:71:87:6a:26:29:cb:63:50:33:36:98:1c:e2:
57:e5:73:8b:78:c9:88:8f:71:f2:5c:b7:01:1e:a9:66:46:e0:
d4:2f:86:56:eb:30:d7:79:b6:c8:ff:a6:9d:d5:88:64:a5:7e:
bb:70:6f:dc:1c:30:f3:24:00:05:7c:ae:05:5c:7a:c3:4c:3b:
ca:eb:f0:fe:aa:48:03:1d:67:42:92:b7:0a:ef:cc:3f:1b:c3:
ae:ea:89:0e:8c:2e:e0:2a:b2:fc:53:dd:b8:52:88:b4:bd:73:
30:be:3b:91:4e:b1:a2:f2:a3:59:f1:33:ac:09:44:db:bb:11:
33:bd:4d:56:63:77:bd:82:c2:bf:ea:c0:85:b6:74:85:88:a7:
11:ef:0b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:19 2023 by rpki-client on console-fra.rpki-client.org