Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/2oc-rjpH6iVpQydoShec1DN7Z2U.roa
File: 2oc-rjpH6iVpQydoShec1DN7Z2U.roa (raw, json)
Hash identifier: akzIr/DVv33wHb8NbE1RZFWa51RWkKwm5G8WGhaf7Ks=
Subject key identifier: DA:87:3E:AE:3A:47:EA:25:69:43:27:68:4A:17:9C:D4:33:7B:67:65
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0A365F18
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/2oc-rjpH6iVpQydoShec1DN7Z2U.roa
Signing time: Sun 27 Mar 2022 06:04:47 +0000
ROA not before: Sun 27 Mar 2022 06:04:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 36268
IP address blocks: 45.86.154.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 171335448 (0xa365f18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Mar 27 06:04:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da873eae3a47ea25694327684a179cd4337b6765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d5:ca:b1:c6:b8:ce:ae:f5:fd:cb:ed:c4:19:
6d:6b:3e:cb:25:db:62:97:f0:e5:2a:5b:0e:57:7e:
3c:57:22:eb:42:9f:b5:b2:02:fe:10:5e:60:f4:9f:
81:b3:c4:78:e7:5c:54:ac:6b:1e:5c:bd:cc:25:ff:
d6:2c:b3:6f:c7:3d:7a:de:a0:9b:94:6b:9a:01:b1:
d9:fc:e2:a5:d0:a1:d1:ea:b9:a0:82:7b:8d:26:f4:
0d:ad:87:8a:93:9c:87:55:cc:82:67:15:80:ff:51:
3a:bd:34:95:d3:74:e2:50:56:a9:22:36:4a:64:a7:
ec:ac:5d:7a:c2:d6:80:54:be:92:e8:f9:ec:da:e5:
31:f1:56:71:6f:68:ff:b1:47:40:a9:53:9a:35:d8:
59:4d:c1:53:50:3d:7e:e6:3c:da:fc:82:8a:5d:f0:
1e:ea:63:d8:9e:6a:34:bd:ac:4f:de:07:fb:b5:78:
06:7c:d9:2e:bf:25:e5:21:b5:7e:1b:52:db:24:6e:
70:6b:0b:81:f1:05:3a:9c:1d:e7:b0:ac:25:fc:31:
de:a6:31:99:43:fb:42:08:45:a2:b4:02:44:ec:14:
2a:a6:48:a9:5f:c3:8e:10:43:86:87:e7:f0:ec:99:
af:b6:e0:9f:29:58:a8:b1:5c:4b:4b:22:17:f8:68:
19:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:87:3E:AE:3A:47:EA:25:69:43:27:68:4A:17:9C:D4:33:7B:67:65
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/2oc-rjpH6iVpQydoShec1DN7Z2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.154.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:5f:8d:bf:94:97:6c:76:a7:fe:13:b3:b8:ef:14:22:b3:ad:
5c:d6:7e:20:a4:52:79:b3:59:b6:eb:9d:b7:c6:fb:e5:e9:89:
58:68:da:bc:57:1e:87:52:77:c4:30:d8:3d:14:23:40:dd:32:
04:c0:cf:a8:27:29:12:42:d7:e9:f4:da:0f:db:ca:d3:22:7a:
fe:e1:f4:e4:3b:75:0c:69:7d:97:fe:56:73:4c:f5:b9:b8:ef:
49:9e:bb:bf:df:32:72:81:8a:20:56:c7:df:c7:27:d8:95:6d:
72:ab:39:53:0c:71:2c:80:3b:d4:cc:16:1d:c6:5d:cd:97:97:
e5:e9:51:a4:d9:52:cc:55:89:81:b2:99:d5:6d:7f:2f:d9:9a:
48:70:73:12:5b:ed:37:48:f7:10:65:3b:0c:84:0a:4b:c0:ed:
9d:4b:1f:63:0f:50:a1:78:b0:d8:e9:da:7b:0c:d6:14:7e:ff:
e3:c8:da:4d:25:f8:d6:91:9e:b7:a0:c4:a2:a4:3d:61:b0:d1:
6b:b1:00:06:4d:91:e7:f2:cf:5d:e7:43:ab:4e:2a:25:94:24:
c3:16:54:e9:7c:17:c5:ed:96:cc:95:c9:e8:de:78:3f:c5:eb:
4f:6f:39:ff:2a:fc:a7:0d:fc:67:8d:72:91:b1:7a:ff:66:ab:
b1:d8:49:95
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIECjZfGDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygx
YjA0MTViZmM0M2IzOGU5Y2ZkMWExMjk5NTIwMmU4NzYzNzUyZmRlMB4XDTIyMDMy
NzA2MDQ0N1oXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGE4NzNlYWUzYTQ3
ZWEyNTY5NDMyNzY4NGExNzljZDQzMzdiNjc2NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALDVyrHGuM6u9f3L7cQZbWs+yyXbYpfw5SpbDld+PFci60Kf
tbIC/hBeYPSfgbPEeOdcVKxrHly9zCX/1iyzb8c9et6gm5RrmgGx2fzipdCh0eq5
oIJ7jSb0Da2HipOch1XMgmcVgP9ROr00ldN04lBWqSI2SmSn7KxdesLWgFS+kuj5
7NrlMfFWcW9o/7FHQKlTmjXYWU3BU1A9fuY82vyCil3wHupj2J5qNL2sT94H+7V4
BnzZLr8l5SG1fhtS2yRucGsLgfEFOpwd57CsJfwx3qYxmUP7QghForQCROwUKqZI
qV/DjhBDhofn8OyZr7bgnylYqLFcS0siF/hoGRkCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBTahz6uOkfqJWlDJ2hKF5zUM3tnZTAfBgNVHSMEGDAWgBQbBBW/xDs46c/R
oSmVIC6HY3Uv3jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0d3UVZ2OFE3T09uUDBhRXBsU0F1aDJOMUw5NC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTYvMDk0MDgxLThhZWItNDJiZi1hNTc4LWEzY2EwZGI4MzI1NC8x
LzJvYy1yanBINmlWcFF5ZG9TaGVjMURON1oyVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYv
MDk0MDgxLThhZWItNDJiZi1hNTc4LWEzY2EwZGI4MzI1NC8xL0d3UVZ2OFE3T09u
UDBhRXBsU0F1aDJOMUw5NC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1WmjANBgkqhkiG9w0BAQsFAAOC
AQEADF+Nv5SXbHan/hOzuO8UIrOtXNZ+IKRSebNZtuudt8b75emJWGjavFceh1J3
xDDYPRQjQN0yBMDPqCcpEkLX6fTaD9vK0yJ6/uH05Dt1DGl9l/5Wc0z1ubjvSZ67
v98ycoGKIFbH38cn2JVtcqs5UwxxLIA71MwWHcZdzZeX5elRpNlSzFWJgbKZ1W1/
L9maSHBzElvtN0j3EGU7DIQKS8DtnUsfYw9QoXiw2OnaewzWFH7/48jaTSX41pGe
t6DEoqQ9YbDRa7EABk2R5/LPXedDq04qJZQkwxZU6XwXxe2WzJXJ6N54P8XrT285
/yr8pw38Z41ykbF6/2arsdhJlQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:27 2024 by rpki-client on console-fra.rpki-client.org