Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/g5t-fOl9KoEElRkjdxIKSCw9uvM.roa
File: g5t-fOl9KoEElRkjdxIKSCw9uvM.roa (raw, json)
Hash identifier: ZMLqhQjzIV2VU46epmO4lmDC3i1A9cGOCXyI+IciSWA=
Subject key identifier: 83:9B:7E:7C:E9:7D:2A:81:04:95:19:23:77:12:0A:48:2C:3D:BA:F3
Certificate issuer: /CN=38bd6d8ebb82404d5709351bc2329a0ee43a9a43
Certificate serial: 09D4C9CA
Authority key identifier: 38:BD:6D:8E:BB:82:40:4D:57:09:35:1B:C2:32:9A:0E:E4:3A:9A:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/g5t-fOl9KoEElRkjdxIKSCw9uvM.roa
Signing time: Mon 13 Jun 2022 21:09:44 +0000
ROA not before: Mon 13 Jun 2022 21:09:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 906
IP address blocks: 45.88.192.0/22 maxlen: 24
2a07:aec0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 164940234 (0x9d4c9ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38bd6d8ebb82404d5709351bc2329a0ee43a9a43
Validity
Not Before: Jun 13 21:09:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=839b7e7ce97d2a810495192377120a482c3dbaf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:eb:62:c8:04:11:26:30:55:d7:68:55:43:e4:
28:bb:57:e6:b7:53:61:30:c9:91:ef:05:80:f4:e6:
64:02:36:0f:33:92:89:a7:17:73:0d:13:cb:30:8f:
10:25:e7:66:7d:bd:ec:50:99:42:c8:3b:c2:e0:ef:
1d:94:78:3d:07:b7:43:ab:0c:f5:df:2b:89:e2:cc:
17:c5:73:ae:1d:aa:0d:51:99:cb:cb:6a:b2:2b:71:
63:9d:6b:6b:c9:31:4d:e5:07:5a:a6:4e:f6:69:34:
cf:0f:35:64:da:2b:f0:36:5e:a8:b3:c0:5c:9a:eb:
87:8f:1d:ed:1f:ac:e7:db:2b:9b:18:7c:da:d6:b2:
af:a0:97:ce:6a:5e:ce:84:9a:17:9a:a6:94:2a:d8:
d0:82:b7:ed:96:1b:49:43:2f:de:b7:9a:96:9b:55:
49:f1:9c:d8:8e:1b:f9:fa:e6:2d:48:7f:20:52:b3:
ec:66:33:8e:a2:75:a1:eb:bf:21:e0:8a:9e:45:56:
73:84:76:88:3b:b6:e4:af:98:44:45:a1:2c:f7:48:
5a:3c:5a:90:58:61:6d:ad:8a:ec:e8:12:14:8c:98:
11:9c:13:4a:21:4a:23:9b:e9:be:d2:43:28:cc:a3:
83:3e:0c:20:c2:bb:88:0d:02:87:aa:71:d6:fc:c6:
a9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9B:7E:7C:E9:7D:2A:81:04:95:19:23:77:12:0A:48:2C:3D:BA:F3
X509v3 Authority Key Identifier:
keyid:38:BD:6D:8E:BB:82:40:4D:57:09:35:1B:C2:32:9A:0E:E4:3A:9A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/g5t-fOl9KoEElRkjdxIKSCw9uvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.192.0/22
IPv6:
2a07:aec0::/29
Signature Algorithm: sha256WithRSAEncryption
38:15:55:6b:67:b3:60:38:8e:56:aa:c5:da:97:48:66:c8:02:
8f:5b:0f:8b:5a:4d:90:24:8b:61:a9:4d:de:f5:1c:f7:04:3f:
72:25:e0:47:7b:8e:d8:a7:c1:e6:35:54:ed:2d:76:b2:7d:c3:
3e:5e:71:0c:82:a7:d9:b2:7c:cc:46:98:67:ad:9f:cf:ea:7d:
2b:56:72:10:30:6c:d6:7a:b8:e0:84:5b:1c:0b:84:1f:8c:05:
d9:a9:2e:bf:8d:cd:3a:69:db:07:6f:fb:a1:33:a4:a8:05:77:
ff:32:7f:9a:f3:e0:3d:5e:ee:3a:f5:56:8a:c4:f8:33:42:5e:
72:49:90:07:b8:88:50:d9:f4:5c:c0:78:09:19:67:a8:17:58:
41:fd:c7:8a:fa:f3:51:d4:e2:c9:8f:15:44:38:60:dd:54:e1:
4f:78:e3:81:10:8f:7b:64:f9:4d:e0:43:52:29:2f:3a:ba:ac:
f8:de:f3:c8:7f:e2:9d:3d:eb:18:ea:04:b0:f4:1f:72:18:69:
94:c3:f4:29:98:fc:11:00:43:7d:19:03:da:36:56:11:f6:f6:
a8:44:dc:5c:3a:6a:d1:fd:53:31:78:66:16:bd:ec:6b:ce:1f:
3d:c6:0d:c4:35:76:96:11:3e:6c:80:b7:47:ac:61:0d:0b:31:
a2:b8:36:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:31 2024 by rpki-client on console-fra.rpki-client.org