Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/xo2u1hrMzmBfa5qYMRiANxQFVCc.roa
File: xo2u1hrMzmBfa5qYMRiANxQFVCc.roa (raw, json)
Hash identifier: zQGS96MDHfUwrnA5javdDFHcTW1XOc/qJkMct/B8A9w=
Subject key identifier: C6:8D:AE:D6:1A:CC:CE:60:5F:6B:9A:98:31:18:80:37:14:05:54:27
Certificate issuer: /CN=3a0b05f40a6916394782302d1b5660737257a48b
Certificate serial: 075C964A
Authority key identifier: 3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/xo2u1hrMzmBfa5qYMRiANxQFVCc.roa
Signing time: Sat 01 Jan 2022 04:57:17 +0000
ROA not before: Sat 01 Jan 2022 04:57:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 45.158.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123508298 (0x75c964a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a0b05f40a6916394782302d1b5660737257a48b
Validity
Not Before: Jan 1 04:57:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c68daed61accce605f6b9a983118803714055427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:90:2f:8a:2d:f3:a8:40:71:ab:37:a6:1c:e1:
6d:3e:c6:62:f0:52:12:4c:b6:d5:e6:c8:8f:c4:f2:
0c:f9:c3:8f:6c:db:1a:ca:84:c3:84:8a:94:d0:e6:
22:c0:f8:05:ad:39:8c:9c:71:94:3f:8f:61:f8:85:
06:15:e4:cd:4e:a7:2a:b2:3b:da:1d:a6:2d:83:54:
32:a5:41:73:66:da:a9:4b:c8:34:18:1c:77:f2:08:
b2:15:0e:27:63:b3:f0:5a:05:bc:ed:20:bd:81:46:
6b:7c:ad:32:1d:29:0f:e9:ff:e0:bc:e0:29:93:07:
03:9d:cc:14:28:09:80:72:47:89:20:7c:20:65:59:
6c:a4:d8:d2:4a:c5:d8:7d:8e:6f:50:69:a8:1f:a5:
82:4c:b8:50:d2:66:24:ef:df:5c:cf:4d:c1:b4:e5:
1a:78:4a:b5:9e:4e:4c:46:21:fd:f1:62:43:70:ca:
02:1d:cb:e7:59:6a:af:9f:84:c0:88:64:20:6a:bb:
5e:1e:01:52:33:d5:0c:b0:6f:47:3d:c4:5e:18:0c:
1d:7f:f5:2e:99:ba:45:8d:9b:d1:29:8e:8e:8a:70:
55:0c:d4:c0:ee:bd:21:bd:50:ed:2c:e2:ac:25:47:
61:e5:f5:45:50:2a:9e:6e:f7:e6:56:ff:51:4c:1f:
65:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8D:AE:D6:1A:CC:CE:60:5F:6B:9A:98:31:18:80:37:14:05:54:27
X509v3 Authority Key Identifier:
keyid:3A:0B:05:F4:0A:69:16:39:47:82:30:2D:1B:56:60:73:72:57:A4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OgsF9AppFjlHgjAtG1Zgc3JXpIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/xo2u1hrMzmBfa5qYMRiANxQFVCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/7583cb-d31e-4e03-b14b-b20e28f5188f/1/OgsF9AppFjlHgjAtG1Zgc3JXpIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.15.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:a6:ef:6a:a5:23:43:ee:47:c3:2d:17:20:8d:2f:6c:8d:72:
ff:7b:6a:d7:9d:28:8b:7f:14:56:bb:06:2c:09:d2:14:78:75:
3b:29:b8:71:9e:31:20:3c:30:f2:68:9c:bb:78:4e:b8:81:66:
a3:61:59:35:3e:ff:ea:1b:45:e6:f3:92:78:64:3a:0d:59:e9:
d0:7b:4b:7c:26:dd:84:a9:fb:07:d6:dc:25:bb:d3:8e:a5:62:
3a:10:21:1c:ee:7e:48:4b:98:5d:d6:94:0e:c4:18:db:2b:b6:
df:83:1d:3d:e7:51:34:1e:45:b9:65:46:da:9e:be:3e:aa:34:
64:82:fb:52:59:bf:7f:fc:d0:41:d4:04:2f:b4:20:2d:2a:15:
52:6a:9b:8f:ee:7c:7a:62:ab:64:a3:eb:55:da:20:9e:6c:fe:
5a:41:e1:60:de:c1:6c:9f:3e:8e:37:ec:f0:2e:33:6c:91:c6:
2c:8b:97:96:35:8e:2e:c9:06:d1:d8:bb:cc:bb:4d:e1:e8:2f:
aa:19:c6:a3:12:00:9f:65:35:96:8d:0b:99:36:01:29:72:61:
95:96:9f:68:2e:c3:b6:eb:cb:34:2c:a5:d8:0e:89:2e:bc:3f:
cb:4f:ce:ea:a5:61:34:3a:80:00:aa:14:1c:ba:6b:c5:ca:29:
e5:a5:86:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:24 2025 by rpki-client