Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/S_OOem41c1ong597UP0an2O5vJ0.roa
File: S_OOem41c1ong597UP0an2O5vJ0.roa (raw, json)
Hash identifier: UKTlLT9ssEcDWyZTbLhSSCw50tEIj2VfCIUaA7okWR4=
Subject key identifier: 4B:F3:8E:7A:6E:35:73:5A:27:83:9F:7B:50:FD:1A:9F:63:B9:BC:9D
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 07BC00EF
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/S_OOem41c1ong597UP0an2O5vJ0.roa
Signing time: Wed 02 Mar 2022 06:45:53 +0000
ROA not before: Wed 02 Mar 2022 06:45:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 194.15.52.0/23 maxlen: 24
45.88.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129761519 (0x7bc00ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 2 06:45:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4bf38e7a6e35735a27839f7b50fd1a9f63b9bc9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:2a:a3:fd:6a:a3:68:62:4d:16:25:1e:15:04:
aa:8f:d7:11:f3:05:8f:c0:7f:cd:81:73:4e:d8:32:
28:dc:59:94:16:6f:46:12:ab:9e:21:1e:05:4b:fc:
a2:19:e8:05:58:f7:fe:60:25:e4:6f:5e:76:18:a4:
ae:55:6d:31:ee:e4:db:77:91:34:4e:ac:e2:6d:38:
da:bc:15:bf:08:eb:8a:db:04:99:c8:24:e5:b1:5f:
1f:e4:83:15:dc:a1:82:87:0e:d0:ab:d3:ed:40:29:
3e:76:a8:10:60:d5:c2:fd:f5:56:dd:38:8e:bc:d2:
43:d2:43:73:58:27:6c:4e:95:86:e5:d1:5d:71:fc:
bc:54:0c:2f:be:86:61:43:11:69:ea:8d:e2:56:2c:
3f:4a:81:0e:7d:a6:f5:42:49:1f:1f:3f:c7:4a:55:
39:99:ee:81:14:b2:51:58:e4:84:8b:ee:d5:c4:08:
28:49:97:69:0c:00:69:3c:12:a3:a1:e6:d6:3a:98:
a2:ff:a4:d5:7e:ca:bb:0a:85:f8:45:52:e0:eb:37:
ef:e9:18:da:65:ad:b9:69:d7:bc:37:a4:95:ca:2c:
d9:2b:70:e5:7d:f1:05:12:68:a7:6a:c7:77:0c:bf:
8f:ad:65:e5:f6:d3:7f:33:c1:16:32:10:3c:07:94:
4d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F3:8E:7A:6E:35:73:5A:27:83:9F:7B:50:FD:1A:9F:63:B9:BC:9D
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/S_OOem41c1ong597UP0an2O5vJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.138.0/24
194.15.52.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:47:d4:2a:e7:bd:20:1e:4e:bd:36:64:78:0e:69:05:65:7b:
0f:cd:27:3d:98:9f:9e:36:e7:03:d3:ef:96:e8:64:72:61:95:
e2:b2:6f:19:68:8b:95:ff:53:9c:29:a6:ab:23:a5:22:e5:87:
bd:fa:42:29:ad:00:65:71:6b:03:5d:bc:ad:a8:91:a4:47:a1:
86:69:1c:77:c1:95:50:1d:8b:ce:ce:dc:b9:dc:e4:db:3c:3b:
45:42:df:98:95:1c:28:47:cf:1b:d6:1a:c2:55:e3:53:9d:95:
c7:20:89:a6:45:d0:50:23:69:ca:43:be:77:51:eb:fc:a1:03:
2d:8c:5a:5e:6d:29:05:1c:80:a7:4a:5c:2a:06:07:03:f7:94:
b5:e0:d9:ab:e8:b7:ef:b9:6f:4d:d6:29:ed:d8:af:06:4c:01:
7c:fa:3d:bb:0d:f4:f6:0d:ce:61:c1:09:54:cb:57:46:02:66:
9f:75:ee:a0:3c:38:58:5c:64:1c:86:d4:e2:c2:09:ee:db:be:
be:98:0e:aa:f1:99:9d:c7:90:82:89:54:e4:0e:bc:b1:38:a6:
82:82:34:21:0b:2a:52:88:23:79:62:94:42:8e:40:4f:20:e8:
89:c0:7a:c1:5e:77:d8:cb:ad:a8:c6:cc:2f:ec:ba:09:cc:f8:
b7:07:4c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org