Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/OCQROCl4ZOZ1Qo8VAHV5qxcKIXo.roa
File: OCQROCl4ZOZ1Qo8VAHV5qxcKIXo.roa (raw, json)
Hash identifier: uOSclvzejon3VI9Wx0m2rlM1ZZTD27RLRRW6oU2J1qM=
Subject key identifier: 38:24:11:38:29:78:64:E6:75:42:8F:15:00:75:79:AB:17:0A:21:7A
Certificate issuer: /CN=be9c528961b10b320f47e8b70654eeaed2f244d3
Certificate serial: 018215E5AE14CB83186A5930E2B2E69BE91C
Authority key identifier: BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/OCQROCl4ZOZ1Qo8VAHV5qxcKIXo.roa
Signing time: Tue 19 Jul 2022 09:59:09 +0000
ROA not before: Tue 19 Jul 2022 09:59:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208899
IP address blocks: 45.15.228.0/24 maxlen: 24
45.15.229.0/24 maxlen: 24
45.15.230.0/24 maxlen: 24
45.15.231.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:15:e5:ae:14:cb:83:18:6a:59:30:e2:b2:e6:9b:e9:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be9c528961b10b320f47e8b70654eeaed2f244d3
Validity
Not Before: Jul 19 09:59:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38241138297864e675428f15007579ab170a217a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0a:0a:c1:eb:12:66:28:43:78:81:56:1d:cd:
2e:dc:48:b7:98:fe:05:7f:02:79:fb:e4:84:eb:7c:
c5:a1:51:31:37:e0:26:2b:60:ff:f2:80:d7:d3:8e:
7c:09:5f:21:2f:eb:07:a8:5f:d6:0a:7a:df:d2:8f:
4f:d5:dd:38:48:50:6e:cc:7d:2a:a8:70:a3:97:39:
bc:6d:b0:e1:3f:61:f0:4e:71:6d:5c:2f:83:55:f9:
1b:3f:eb:b5:f2:56:55:85:e6:35:e2:28:2a:20:7a:
fc:23:1b:a4:ce:c1:ac:a8:f4:b5:63:21:8e:de:a8:
7a:12:d9:33:99:4d:e8:5d:fa:a6:86:61:c4:13:d0:
b9:c7:ad:69:68:79:c4:2f:53:d6:34:76:1d:bc:5e:
e1:7a:e6:b5:a0:3d:ce:36:11:5f:12:f3:26:2a:bb:
54:fd:92:e9:9b:c1:87:2d:96:a3:fa:d0:e2:f5:b0:
c0:62:e6:f9:59:cc:e9:8f:db:71:56:83:fb:03:c5:
fe:29:a5:56:ed:f2:bf:49:1f:21:26:f3:66:a8:b1:
bf:d1:18:d6:a9:43:ee:21:26:eb:4c:a9:f3:35:bc:
2c:8f:f6:13:87:81:5c:16:e1:4a:55:c8:11:79:de:
1b:83:80:6f:a4:2c:6a:c2:97:3e:39:4f:48:bd:ee:
e3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:24:11:38:29:78:64:E6:75:42:8F:15:00:75:79:AB:17:0A:21:7A
X509v3 Authority Key Identifier:
keyid:BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/OCQROCl4ZOZ1Qo8VAHV5qxcKIXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.228.0/22
Signature Algorithm: sha256WithRSAEncryption
38:4b:8c:30:1f:87:e9:de:de:2f:1b:b6:ac:02:2f:c0:dc:a0:
53:f0:0e:06:ee:b6:6e:53:57:7a:43:32:2e:f0:24:b8:c7:f4:
73:2f:b0:2a:14:de:b6:56:56:dc:5a:da:87:27:8f:5d:08:78:
12:19:df:5c:04:b6:66:c1:42:ff:a1:dc:d3:95:c6:0f:1b:3f:
5c:57:f6:35:93:12:0f:3e:f1:be:2e:34:d0:54:65:c6:07:fc:
7b:c9:b3:9c:be:07:18:18:b8:fe:8b:0d:10:12:29:97:e6:1d:
4b:ed:4b:aa:6d:ea:48:29:8b:94:68:c8:e0:13:dc:ce:7d:31:
65:01:15:ce:0d:61:32:20:32:cd:c1:27:23:37:e5:ef:f0:38:
bd:1e:db:eb:60:e3:a9:64:fb:8d:43:fa:7d:2a:a5:72:e0:b4:
c9:6d:f4:fd:8e:8c:6c:0d:7e:c3:b6:3e:15:7e:9b:a5:06:3f:
a1:c9:ad:a8:63:37:94:e7:ef:3a:65:62:2f:04:1a:1c:31:5c:
2f:48:84:08:ba:89:14:4f:18:bd:e5:0e:3c:5d:71:9d:0b:94:
31:c0:33:0c:ab:da:41:c4:88:33:bb:e5:f8:6b:88:3c:cb:46:
b0:91:ac:0f:94:ae:cc:0d:b4:71:47:55:76:46:98:d5:71:28:
de:92:0b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:20 2023 by rpki-client on console-ams.rpki-client.org