Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/o-p6H5jEkmfP3QO27srQGbr04yI.roa
File: o-p6H5jEkmfP3QO27srQGbr04yI.roa (raw, json)
Hash identifier: zIBQYabOaxGI0swko7fUvqoRBlas9HFKwoDmzNV0vHM=
Subject key identifier: A3:EA:7A:1F:98:C4:92:67:CF:DD:03:B6:EE:CA:D0:19:BA:F4:E3:22
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01853EA470250C75E4908DD90DDA2568A701
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/o-p6H5jEkmfP3QO27srQGbr04yI.roa
Signing time: Fri 23 Dec 2022 11:00:41 +0000
ROA not before: Fri 23 Dec 2022 11:00:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 45.9.30.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3e:a4:70:25:0c:75:e4:90:8d:d9:0d:da:25:68:a7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Dec 23 11:00:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3ea7a1f98c49267cfdd03b6eecad019baf4e322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8b:23:a9:46:44:30:47:cd:a9:9e:e8:6e:3a:
20:4e:ef:63:e4:e0:a7:80:de:fd:1d:ae:26:0f:d9:
cb:59:3f:0c:7c:02:40:a5:e8:9a:fc:05:e4:14:1a:
b0:f0:3d:18:8e:ab:dc:6c:83:5c:fa:d1:24:8d:66:
25:cd:85:14:7a:0f:e0:3a:0b:28:9a:32:a6:d3:01:
c4:9e:c9:8a:09:22:cf:8d:b1:ed:ca:cc:65:d4:60:
8f:a3:e4:ae:67:1b:af:8a:6c:f1:a1:e0:ad:7a:8a:
93:63:9e:6c:be:3d:5e:a1:91:f0:0d:ba:ee:64:6b:
ea:31:f9:c0:1b:53:64:c6:f3:0e:8f:98:65:90:2d:
5c:2f:9f:4a:1d:e3:3f:38:5b:46:86:9e:42:36:05:
8b:c2:4e:1f:48:31:8d:a6:2b:f9:02:5f:80:23:27:
c2:09:85:b1:bc:a0:f2:6a:51:bb:7c:b8:25:28:d0:
ef:65:a3:b7:95:f6:cc:e0:6e:28:45:58:96:69:85:
0e:c5:42:b6:c9:01:5c:ab:0a:33:50:27:50:df:fb:
8a:cd:89:52:e0:b0:f4:32:b4:2e:7d:c1:1a:2e:d8:
09:2d:18:98:36:59:81:21:aa:a1:08:d6:fd:15:6e:
3a:b6:93:c0:77:0a:63:ca:9b:54:2b:89:82:11:91:
7b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:EA:7A:1F:98:C4:92:67:CF:DD:03:B6:EE:CA:D0:19:BA:F4:E3:22
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/o-p6H5jEkmfP3QO27srQGbr04yI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.30.0/24
45.88.137.0/24
45.132.180.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:4e:b2:2a:57:61:48:f9:3b:95:38:02:17:77:5a:8e:a6:a3:
b9:1f:8f:39:f6:b6:50:3c:8a:86:ba:82:9e:8e:04:3c:72:12:
57:25:aa:02:13:3b:f3:26:51:6a:57:4e:6f:34:be:af:d6:64:
4b:5d:4a:ce:4d:9b:d5:14:de:f7:50:61:23:cc:0b:db:04:68:
c3:0e:60:8d:98:5e:83:77:d4:20:7c:a3:9c:43:38:1e:7d:ed:
58:08:25:f5:24:77:fd:b7:19:0b:5c:7f:20:c7:84:b3:e7:3c:
9f:ce:97:e2:07:78:68:92:d9:ed:bc:86:f6:09:15:cd:a2:5b:
d7:46:11:6e:30:c0:a1:f0:36:83:f3:84:08:0a:71:fa:c1:f0:
f4:5e:d5:b2:d1:c0:78:4a:21:c8:84:7e:08:72:c7:ba:ae:ee:
2a:42:3d:2c:92:02:57:6f:20:ce:52:56:3f:fc:81:17:2d:aa:
7e:3b:ed:ca:40:52:c8:7b:b5:c3:dd:16:2b:6b:c3:8f:20:58:
f3:46:c7:ae:49:85:4a:9c:97:47:81:dc:40:42:d3:fe:7c:74:
47:c0:e1:75:df:32:ca:d8:2a:8e:45:d1:24:74:ac:38:1d:0b:
44:c6:16:83:d1:5d:05:f7:23:74:91:3b:99:cb:82:b8:b0:17:
d2:66:c0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:33 2023 by rpki-client on console-fra.rpki-client.org