Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/oG4oHfvOHPcZ1vFq-_lVelojMgk.roa
File: oG4oHfvOHPcZ1vFq-_lVelojMgk.roa (raw, json)
Hash identifier: o+97dzab5LNFYr9rXskZ+TKC0UKnAI2EGaUmL1/9BuI=
Subject key identifier: A0:6E:28:1D:FB:CE:1C:F7:19:D6:F1:6A:FB:F9:55:7A:5A:23:32:09
Certificate issuer: /CN=38bd6d8ebb82404d5709351bc2329a0ee43a9a43
Certificate serial: 0873491B
Authority key identifier: 38:BD:6D:8E:BB:82:40:4D:57:09:35:1B:C2:32:9A:0E:E4:3A:9A:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/oG4oHfvOHPcZ1vFq-_lVelojMgk.roa
Signing time: Mon 17 Jan 2022 02:32:27 +0000
ROA not before: Mon 17 Jan 2022 02:32:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54574
IP address blocks: 45.88.192.0/22 maxlen: 32
2a07:aec0::/29 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141773083 (0x873491b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38bd6d8ebb82404d5709351bc2329a0ee43a9a43
Validity
Not Before: Jan 17 02:32:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a06e281dfbce1cf719d6f16afbf9557a5a233209
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:12:cb:e8:ed:59:a1:1b:ca:6b:a2:89:81:53:
fe:66:07:c7:6e:8d:7c:79:84:69:e3:60:c0:b2:78:
72:ab:9a:3e:a0:a2:71:93:1a:c0:b8:58:5f:04:82:
53:08:ac:2f:cb:06:ab:0b:e1:18:f5:1f:ec:4b:d2:
62:9f:44:b8:60:90:ef:4b:b0:fc:a8:2e:db:99:9e:
d5:91:a5:5d:e4:93:01:9d:92:a6:0e:2a:28:23:0a:
68:2d:f1:ac:98:db:3d:4f:56:b5:c2:a8:f8:16:6f:
59:c3:44:f6:6c:59:2e:a7:3e:45:e9:75:a0:60:50:
62:ed:2a:b8:26:87:13:17:da:7f:77:03:3c:26:fb:
a9:3a:93:65:c4:10:64:15:2d:c1:6f:dc:dd:0b:89:
57:4b:5f:18:a3:dd:76:20:ec:42:fd:76:2a:a6:52:
c9:de:dc:c2:3d:94:4f:12:37:92:41:fb:75:7b:40:
16:88:8b:b3:cb:1d:71:4e:7b:b7:0f:df:3e:b8:34:
7a:11:3a:79:90:66:85:77:4c:20:df:4c:01:73:5d:
0a:4a:ed:0d:96:72:c3:b3:a7:12:ff:c3:4e:d7:92:
5b:f1:d7:56:ed:3c:dd:56:1e:74:13:d0:dc:cc:e4:
84:87:ec:0f:40:00:36:39:92:bb:c0:c7:db:e2:96:
a1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6E:28:1D:FB:CE:1C:F7:19:D6:F1:6A:FB:F9:55:7A:5A:23:32:09
X509v3 Authority Key Identifier:
keyid:38:BD:6D:8E:BB:82:40:4D:57:09:35:1B:C2:32:9A:0E:E4:3A:9A:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/oG4oHfvOHPcZ1vFq-_lVelojMgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.192.0/22
IPv6:
2a07:aec0::/29
Signature Algorithm: sha256WithRSAEncryption
5b:aa:8f:30:4b:f8:c6:59:b5:dc:fc:6f:8b:a8:29:32:74:42:
00:1f:6e:ec:88:44:d6:52:55:fb:5c:03:21:12:36:f2:4e:19:
8b:b7:6b:4c:e6:49:6a:2e:14:c9:a2:2b:19:4e:3c:86:2a:12:
7a:7f:d5:57:2c:dd:cc:d6:85:76:e6:51:7d:fc:15:14:c3:f1:
70:58:b5:8d:ca:65:58:37:72:72:cd:a3:5f:22:9f:92:6f:45:
c2:7b:94:1f:3e:de:78:30:0d:9d:38:de:d2:8a:05:7c:28:26:
39:28:94:93:36:17:14:eb:3b:ab:fa:e5:77:b1:34:a0:10:92:
e3:4d:6e:26:0c:d4:2e:40:ba:68:ae:aa:ff:b4:62:33:e1:10:
9b:fe:21:89:ca:2e:cb:62:3f:ff:e7:5c:60:ec:e3:12:bb:c8:
5f:8a:26:c9:72:67:fe:8f:e0:2f:43:1c:2a:0c:af:ba:7c:28:
ee:b5:39:23:4d:9b:0f:3f:1a:7c:b8:bf:05:e5:8b:41:31:4b:
d9:2b:43:77:71:86:8d:10:27:09:ed:be:6b:e4:c4:67:24:7c:
3e:bc:6a:7e:f1:47:d4:8f:bf:c8:69:2f:cf:9d:af:7f:44:fa:
d1:f5:69:e6:a9:28:04:72:d2:21:2c:b7:29:8c:5c:a7:3c:39:
5f:57:87:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:56 2024 by rpki-client on console-ams.rpki-client.org