Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/C3ObYevSiweMURHUY_WzhengIbM.roa
File: C3ObYevSiweMURHUY_WzhengIbM.roa (raw, json)
Hash identifier: ufwoSN3T7VVMeiuBJ5SC5MxdCPhgOiupwGPdi6C5nqg=
Subject key identifier: 0B:73:9B:61:EB:D2:8B:07:8C:51:11:D4:63:F5:B3:85:E9:E0:21:B3
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0183B6B5A98FD99B7C42C501B28CA2B379D2
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/C3ObYevSiweMURHUY_WzhengIbM.roa
Signing time: Sat 08 Oct 2022 08:28:22 +0000
ROA not before: Sat 08 Oct 2022 08:28:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208911
IP address blocks: 45.88.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b6:b5:a9:8f:d9:9b:7c:42:c5:01:b2:8c:a2:b3:79:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 8 08:28:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b739b61ebd28b078c5111d463f5b385e9e021b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a5:90:5a:af:93:a1:09:84:b9:7e:57:e3:a2:
87:ce:af:7d:41:eb:9b:59:7f:56:cd:60:60:25:57:
b8:4b:bb:6e:fc:ea:36:bd:f5:56:78:9f:89:47:8b:
8c:44:2d:ea:e7:87:b1:70:53:10:17:31:a8:cc:da:
51:cd:91:ae:e8:4e:f7:2e:d5:d3:55:13:c4:90:2c:
8d:06:fd:67:f5:37:06:b5:80:8d:69:4c:ae:5b:45:
f7:27:34:cd:0a:d4:8e:91:57:65:3e:8f:f4:fc:45:
af:a0:9e:31:60:61:2c:aa:24:b3:b8:1a:88:0d:d0:
50:b9:5b:39:af:a6:07:1a:8c:8b:94:80:41:01:0d:
63:3d:ba:53:1e:c5:34:1a:e2:59:b9:f2:5d:1a:5f:
af:d7:1d:8f:fb:65:ff:69:a5:24:2f:05:50:6f:3b:
35:3b:60:59:48:e5:6c:1e:2b:fb:07:c0:72:3d:c2:
7f:7c:ac:b2:d2:9c:3e:10:26:11:c5:85:a3:be:76:
e4:e0:f4:a4:c9:ce:0c:e5:7a:a6:48:dd:91:0a:c6:
45:a9:f3:e4:29:53:00:c8:3d:92:0c:9f:84:87:ab:
80:b0:c1:2e:35:1c:4c:af:c3:b1:58:6d:b8:2f:4f:
b6:54:79:da:d0:58:b8:48:b7:13:57:cc:e6:58:f4:
4b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:73:9B:61:EB:D2:8B:07:8C:51:11:D4:63:F5:B3:85:E9:E0:21:B3
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/C3ObYevSiweMURHUY_WzhengIbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.138.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:e2:4f:1c:a2:be:fa:50:41:c5:15:42:16:7e:e6:2e:85:80:
c5:2a:7d:94:20:a5:0c:2d:c7:de:95:78:b1:4b:b2:82:af:47:
f0:a0:ec:0a:20:e3:0d:9b:dc:4e:46:95:13:6c:e6:78:3c:e1:
eb:1c:b3:92:75:57:0f:f0:ff:7b:08:38:69:01:37:33:eb:a2:
ec:77:94:b0:15:15:00:5e:3b:b1:c9:7f:0d:fa:67:41:9a:e7:
be:06:93:b7:b5:73:21:2f:5f:41:a8:a5:3c:18:53:29:4b:81:
7d:93:c1:aa:05:a9:57:0d:df:2c:d6:be:b9:35:f6:38:f2:91:
83:63:ce:be:a3:f1:c4:0d:61:2b:dd:de:47:fb:09:74:5f:1f:
74:90:be:c6:60:de:5d:e1:9c:80:4a:fa:f9:e6:f5:eb:6d:02:
54:7b:6e:52:e5:9a:4b:68:e2:7f:6f:64:92:f3:65:3a:eb:0c:
df:a7:df:11:85:52:02:50:cb:a4:fd:db:f5:ff:55:4e:99:cb:
5b:22:b3:3b:54:a9:0e:eb:25:9c:48:02:bc:f7:97:63:ef:92:
81:55:e2:51:5b:66:cb:4c:ca:b5:0a:0f:ca:0d:c1:64:10:e4:
36:2a:10:f4:9b:55:27:50:3a:f4:65:6f:7a:eb:c2:03:3e:4d:
ba:1c:0e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org