Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/o_60x9cOwKwxnkfZmPtVvcenoRA.roa
File: o_60x9cOwKwxnkfZmPtVvcenoRA.roa (raw, json)
Hash identifier: yyqtPaLvwE+zgR92wieCtIpZHDWVA7gaG1mEIMulhfY=
Subject key identifier: A3:FE:B4:C7:D7:0E:C0:AC:31:9E:47:D9:98:FB:55:BD:C7:A7:A1:10
Certificate issuer: /CN=36900183cf08a6e5bc807846294a46062e190e3b
Certificate serial: 015D967E
Authority key identifier: 36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/o_60x9cOwKwxnkfZmPtVvcenoRA.roa
Signing time: Mon 09 May 2022 13:02:58 +0000
ROA not before: Mon 09 May 2022 13:02:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48266
IP address blocks: 45.11.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22910590 (0x15d967e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36900183cf08a6e5bc807846294a46062e190e3b
Validity
Not Before: May 9 13:02:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3feb4c7d70ec0ac319e47d998fb55bdc7a7a110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f3:82:75:5c:66:de:1f:3d:9d:d7:9f:36:45:
54:e8:d2:02:01:69:e4:d4:ec:25:f0:17:1c:87:45:
45:15:e8:a6:66:0a:aa:0f:0a:0d:2d:80:4d:63:fd:
e9:40:64:0c:1a:3c:47:c5:17:55:13:1d:0f:fd:af:
1f:61:96:f0:22:b7:4f:54:f6:ea:dd:dc:76:ea:37:
75:d0:b0:b7:4a:a8:1f:d2:e9:ec:1e:6e:25:4f:df:
fa:62:1e:7e:41:73:d5:6d:59:bf:23:51:c6:5b:79:
b3:0d:c0:8d:fa:fd:43:7d:4f:ec:49:47:a0:5b:ca:
a8:a9:5e:99:47:05:6c:26:32:c7:4b:bf:b3:30:b1:
24:c6:2b:7c:0c:21:95:21:fc:d5:da:a1:35:ac:97:
2d:a5:23:6e:0d:5e:2f:43:b2:9d:dc:b5:4e:f8:16:
26:99:22:b8:ee:f4:10:77:69:e0:33:78:4f:33:78:
a4:93:58:54:18:90:74:3f:75:c7:a8:ed:3f:63:27:
9c:45:8e:55:bd:a4:94:82:40:ec:45:b3:1d:95:7d:
cb:3a:c9:76:28:18:25:c8:15:1d:dd:df:9b:f5:20:
3b:ab:c6:ae:3d:c7:19:d7:c9:47:9a:99:6c:38:eb:
3f:6a:ae:81:f5:e5:14:76:bf:72:3a:f1:78:c9:97:
56:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FE:B4:C7:D7:0E:C0:AC:31:9E:47:D9:98:FB:55:BD:C7:A7:A1:10
X509v3 Authority Key Identifier:
keyid:36:90:01:83:CF:08:A6:E5:BC:80:78:46:29:4A:46:06:2E:19:0E:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpABg88IpuW8gHhGKUpGBi4ZDjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/o_60x9cOwKwxnkfZmPtVvcenoRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/5a32bc-0836-47ec-b5b3-2f5b6a83faf3/1/NpABg88IpuW8gHhGKUpGBi4ZDjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.185.0/24
Signature Algorithm: sha256WithRSAEncryption
76:5d:1c:55:33:4b:e5:09:f6:6d:94:64:d2:e2:68:cf:a0:63:
a3:80:da:6d:ac:2a:41:29:4b:41:5f:b2:a8:ee:53:3e:6c:d4:
29:34:ac:5c:8c:de:d0:e7:5e:ac:c6:31:2f:23:3c:f8:57:fb:
ac:86:f6:36:6b:e0:8b:de:ad:9b:8d:3a:41:41:d2:62:64:04:
4a:e6:a5:e9:c6:fb:5a:c0:98:38:15:f4:17:c4:e7:e7:d6:a7:
78:41:3b:66:6d:1c:2f:0f:65:f7:da:f7:71:29:34:99:b9:35:
7a:34:6d:b5:8e:46:c9:96:06:5c:11:82:2c:55:c7:b4:b9:28:
95:4b:3e:84:62:7e:5c:2d:41:e1:7c:6e:e2:d5:25:68:c4:7b:
08:f7:7f:89:1c:43:44:78:1c:df:eb:18:67:35:ca:5c:2a:ab:
1a:f5:95:01:25:0e:8e:ba:a2:52:27:de:56:56:c8:0a:54:e0:
79:e3:52:cb:90:0f:1f:01:40:16:79:bf:99:3a:9b:c9:9c:c9:
6d:8f:dd:85:bf:58:a3:72:b2:6a:c3:08:a6:80:e9:8b:69:83:
49:27:04:8d:f1:58:a3:14:6e:7b:29:29:14:b6:e6:ee:b0:a1:
c2:4f:a6:1f:a6:d6:01:d2:f2:2d:fd:f9:22:f6:d9:68:40:30:
35:42:26:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:09 2023 by rpki-client on console-fra.rpki-client.org