Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/OhD39IxXWWTheN5QwUp3NMuYgak.roa
File: OhD39IxXWWTheN5QwUp3NMuYgak.roa (raw, json)
Hash identifier: N1pDnbCMoEQS1kltsFK8mb+h+7MbHgMxypzIYKu14/Q=
Subject key identifier: 3A:10:F7:F4:8C:57:59:64:E1:78:DE:50:C1:4A:77:34:CB:98:81:A9
Certificate issuer: /CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Certificate serial: 01856C783CA3435B1354732E10E41362B6A5
Authority key identifier: BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/OhD39IxXWWTheN5QwUp3NMuYgak.roa
Signing time: Sun 01 Jan 2023 08:34:57 +0000
ROA not before: Sun 01 Jan 2023 08:34:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210558
IP address blocks: 45.141.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:3c:a3:43:5b:13:54:73:2e:10:e4:13:62:b6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa7b4c01e929c38923981ab51c9727a1f9f07e
Validity
Not Before: Jan 1 08:34:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a10f7f48c575964e178de50c14a7734cb9881a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:72:89:35:e8:b1:06:f7:cf:fc:2e:e6:9a:1d:
58:41:09:53:2f:a8:1c:74:84:71:e8:34:66:d5:f0:
b5:e8:8c:bb:9a:d7:14:db:2d:e7:d7:64:ed:a4:d0:
cf:67:e7:e6:63:f6:dd:ed:93:74:66:ba:2b:be:b9:
28:df:0e:b5:58:29:a7:a9:24:4c:ae:c8:a1:9c:d4:
73:07:41:47:65:dd:d6:9d:71:79:cf:90:b5:0a:87:
71:a4:1d:a1:74:b4:7c:53:79:56:1d:f4:ea:09:ac:
08:6d:0c:7a:25:90:60:e0:47:c9:f4:da:2f:9d:5a:
22:b6:0a:2e:c1:b1:8d:43:d1:a9:17:f7:d7:f1:e3:
a2:74:4e:08:69:f7:48:01:38:ae:f6:59:e3:a2:77:
46:0f:e0:d1:3b:27:2a:76:f8:0e:7d:bf:b5:b4:f1:
cd:ac:dc:32:d2:72:bc:24:4a:58:3f:1c:8d:85:9a:
46:e7:57:0d:f0:c7:4c:d5:f5:88:22:ce:ef:87:79:
57:67:e6:09:97:a9:f6:0b:5f:35:f4:47:68:4b:cf:
67:2d:32:a1:ed:9c:4e:79:b0:8a:a4:74:51:65:f2:
6d:39:ca:97:cd:60:85:46:a7:97:25:77:af:a7:11:
42:69:b6:95:6e:56:7b:b6:22:ff:94:13:fa:00:c2:
0b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:10:F7:F4:8C:57:59:64:E1:78:DE:50:C1:4A:77:34:CB:98:81:A9
X509v3 Authority Key Identifier:
keyid:BA:AA:7B:4C:01:E9:29:C3:89:23:98:1A:B5:1C:97:27:A1:F9:F0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp7TAHpKcOJI5gatRyXJ6H58H4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/OhD39IxXWWTheN5QwUp3NMuYgak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ab9e70-489a-4088-b28e-e68f6cf2c0d2/1/uqp7TAHpKcOJI5gatRyXJ6H58H4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.215.0/24
Signature Algorithm: sha256WithRSAEncryption
80:8a:a2:fb:9b:76:48:63:3c:5d:90:52:1c:d8:bb:63:2b:d0:
96:d4:c8:fb:2b:d1:15:8d:89:47:0e:1c:78:41:d6:44:ba:ff:
2d:c0:c2:e9:32:ac:5c:75:5e:4f:6c:51:41:e1:21:5f:e1:46:
9a:26:71:70:93:e0:f1:d6:49:4b:0d:a0:7d:11:c4:a0:84:ac:
18:ce:c9:b3:d7:0d:2d:3e:a0:c0:ab:0c:74:3c:5b:b2:55:d7:
6f:76:ae:ab:ab:00:d1:ad:14:4a:ad:14:3e:ab:94:88:99:cd:
29:0a:fc:88:03:12:f4:bd:87:a5:48:96:3d:16:4f:84:9e:04:
af:99:c2:81:e9:0f:9c:ce:ba:f6:60:9c:da:d3:24:4e:ef:b2:
a3:74:f2:63:72:90:46:ba:81:b2:1a:89:fc:aa:8c:23:e8:0c:
c6:ee:f4:0d:cf:1a:d2:e7:63:00:ea:99:37:25:ff:c1:38:0f:
af:de:e3:8c:c8:d7:da:53:59:e1:70:03:65:c1:78:92:b5:97:
1f:b4:cd:97:ab:e1:ca:f9:44:b5:cc:3c:a8:08:6f:5c:14:a0:
ac:6a:28:5b:b1:ae:86:81:51:61:38:9e:7b:97:a4:e4:30:db:
55:c2:da:c3:c9:06:a4:ec:de:42:31:dd:a0:e5:dd:bf:74:e4:
7b:fe:72:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:35:00 2025 by rpki-client