Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/sDsGVldZYS7_Qez4nK2UlbQ8h5c.roa
File: sDsGVldZYS7_Qez4nK2UlbQ8h5c.roa (raw, json)
Hash identifier: Szqv1eqOC1LtzI3BYQjk3hivAAgixuWyXzHJwolm98w=
Subject key identifier: B0:3B:06:56:57:59:61:2E:FF:41:EC:F8:9C:AD:94:95:B4:3C:87:97
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 075AE630
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/sDsGVldZYS7_Qez4nK2UlbQ8h5c.roa
Signing time: Sat 01 Jan 2022 04:57:16 +0000
ROA not before: Sat 01 Jan 2022 04:57:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61135
IP address blocks: 45.158.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123397680 (0x75ae630)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 1 04:57:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b03b06565759612eff41ecf89cad9495b43c8797
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:66:db:3c:67:f8:5f:fd:bf:7b:2d:98:cd:75:
b0:3d:9d:d7:c4:db:03:91:f9:b7:6a:0e:53:eb:c2:
db:17:c1:51:54:d5:6b:ba:72:6c:f4:62:29:51:16:
eb:40:56:a2:80:b7:66:23:ad:7f:81:20:ec:77:f2:
c6:21:47:0d:ad:b1:1c:82:1f:11:c0:99:20:82:6f:
48:bd:1f:96:22:1e:ef:71:f6:88:ec:7c:c6:85:78:
c0:c5:02:3c:f4:5f:c8:f1:aa:58:c5:d6:c8:b5:eb:
13:eb:c5:53:50:65:6d:4d:7b:95:1b:29:69:2f:fd:
ac:8a:76:2a:53:db:2c:be:d1:f6:49:53:a8:01:3a:
d3:c8:88:02:25:0e:1c:a2:21:37:04:45:4a:71:a4:
3c:79:80:ad:0f:be:90:d8:e1:86:fb:4c:f0:86:f5:
e9:83:0e:91:10:e5:15:a8:aa:d6:33:24:4b:93:f3:
94:29:22:ac:92:cf:fb:be:fe:d7:ee:fa:f5:84:66:
13:d9:f4:87:63:ed:9a:6e:d8:44:08:90:0b:51:47:
75:b7:82:ac:bf:ba:2a:13:d2:9a:9e:f2:ef:99:77:
cf:a8:bb:37:a9:f9:02:51:6b:17:64:1e:68:d1:62:
a0:1f:09:f0:b1:b8:69:22:93:4f:1e:f9:b8:b2:9e:
cd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:3B:06:56:57:59:61:2E:FF:41:EC:F8:9C:AD:94:95:B4:3C:87:97
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/sDsGVldZYS7_Qez4nK2UlbQ8h5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.15.0/24
Signature Algorithm: sha256WithRSAEncryption
54:20:c2:19:15:20:be:80:5f:c4:76:09:e4:31:99:b0:6e:1d:
b4:ad:54:0e:8a:55:7e:b6:37:56:d3:a6:51:bb:13:ef:ad:e2:
ed:c2:45:5b:e3:5c:8d:b9:b5:89:c1:96:24:83:c5:ab:ff:75:
ff:c1:92:dc:bc:e5:b9:dd:5c:87:5f:21:9a:20:e4:94:a7:68:
c6:d5:ab:43:ce:cb:36:ea:f6:b3:21:66:81:1a:49:98:ed:bd:
ea:bf:37:1e:a4:33:1c:51:77:5d:74:a6:44:3e:37:88:b2:31:
cd:fe:9b:14:a4:f7:9f:66:cb:cc:ea:5f:4c:f0:5d:ba:89:b6:
57:84:58:69:bf:71:53:a9:e2:48:cc:d8:47:fe:cd:c0:1e:90:
02:93:75:90:6f:24:51:11:8e:3f:72:ce:09:23:fc:63:c6:f8:
94:69:da:7f:76:a4:c6:6b:6b:1a:a5:bc:50:2a:69:90:a3:2a:
7a:05:ec:25:7b:2e:a2:5a:0e:5f:dc:e1:7f:98:bb:cb:1e:30:
60:2d:09:6e:c0:17:f3:ac:04:e9:f3:ad:c0:92:e2:8a:c1:c1:
8c:a1:33:2a:63:5a:78:0c:ef:f2:59:b8:b8:90:ce:da:36:5d:
44:27:43:96:7b:cb:50:a8:0a:44:b1:37:2d:be:11:03:74:96:
c9:8d:11:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:34 2023 by rpki-client on console-ams.rpki-client.org