Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/oxJb8DEORge8SVNmGKjyMa7gHIU.roa
File: oxJb8DEORge8SVNmGKjyMa7gHIU.roa (raw, json)
Hash identifier: 7wG51WKVoxgS7IIhITBtMgvXgdY/LhrXqx6LmZ35Qng=
Subject key identifier: A3:12:5B:F0:31:0E:46:07:BC:49:53:66:18:A8:F2:31:AE:E0:1C:85
Certificate issuer: /CN=fb05a9c548d6e34e8d15fc06632aa3899272f4ec
Certificate serial: 0184ED2697CC6CE8C9250A07E7EFADA96AB9
Authority key identifier: FB:05:A9:C5:48:D6:E3:4E:8D:15:FC:06:63:2A:A3:89:92:72:F4:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wWpxUjW406NFfwGYyqjiZJy9Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/oxJb8DEORge8SVNmGKjyMa7gHIU.roa
Signing time: Wed 07 Dec 2022 15:14:00 +0000
ROA not before: Wed 07 Dec 2022 15:14:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20555
IP address blocks: 213.135.44.0/22 maxlen: 22
213.135.48.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:ed:26:97:cc:6c:e8:c9:25:0a:07:e7:ef:ad:a9:6a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb05a9c548d6e34e8d15fc06632aa3899272f4ec
Validity
Not Before: Dec 7 15:14:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3125bf0310e4607bc49536618a8f231aee01c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:47:27:a6:9c:82:b6:5f:ef:1b:f5:8c:05:d1:
ec:fa:30:a4:a7:b4:83:ed:33:c9:69:33:c7:e3:8a:
70:14:ee:47:3b:a3:98:23:0c:e1:87:3e:6e:bb:56:
08:a1:61:2b:8b:1f:f4:49:90:bf:c5:35:4a:8b:19:
02:a3:e3:2c:10:2c:93:c5:26:c2:c6:7a:ea:b5:2c:
a7:ce:5a:8d:f3:be:d7:e5:60:20:f5:5b:69:63:a4:
0b:24:d4:a0:b5:61:bf:10:17:5f:87:c1:14:c7:54:
92:a8:8a:08:9d:71:2b:c1:54:af:d3:65:36:82:ff:
87:94:1e:54:41:58:a1:c7:2e:9c:b6:33:21:41:27:
d6:3b:86:6e:bd:40:2c:f7:97:49:b7:7c:31:c4:b6:
8f:29:8d:95:e5:23:c9:be:2b:b0:b7:c4:88:4d:cd:
73:12:b3:9d:38:17:7d:6e:42:65:9e:f3:2c:2d:c5:
53:55:69:e6:4b:f3:70:a9:66:b0:ee:10:85:7d:6c:
c3:40:f9:c8:ce:fd:01:1c:a3:54:ac:87:82:9c:72:
59:ac:28:a8:73:88:61:50:82:35:48:a7:43:03:7b:
17:48:10:d0:43:8e:90:77:eb:72:ff:81:5f:59:ea:
ec:90:de:91:11:70:fe:49:16:9e:9e:0d:28:50:0f:
70:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:12:5B:F0:31:0E:46:07:BC:49:53:66:18:A8:F2:31:AE:E0:1C:85
X509v3 Authority Key Identifier:
keyid:FB:05:A9:C5:48:D6:E3:4E:8D:15:FC:06:63:2A:A3:89:92:72:F4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wWpxUjW406NFfwGYyqjiZJy9Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/oxJb8DEORge8SVNmGKjyMa7gHIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ed5020-1549-4013-b512-cf6fd06f48ef/1/1-wWpxUjW406NFfwGYyqjiZJy9Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.135.44.0-213.135.49.255
Signature Algorithm: sha256WithRSAEncryption
06:9e:f4:e8:4a:49:66:66:96:fa:29:84:13:0e:95:e7:65:b4:
82:cb:78:72:0c:61:fc:63:2a:f6:6f:3f:f3:73:d3:0b:a5:da:
39:31:20:61:57:3c:a1:4b:43:2e:a4:ad:a7:23:fa:d0:a1:aa:
f2:33:aa:ed:3c:4f:be:ad:c1:76:8c:0c:c7:d7:e0:d7:1d:3c:
1f:a4:23:4f:7a:77:cc:ab:d0:09:90:9f:5f:d2:ea:21:95:90:
cb:b3:e9:99:ee:36:8e:4c:97:e5:43:e7:69:2d:8f:44:08:19:
52:b2:36:77:a1:98:9c:ce:4a:97:41:90:19:e0:03:d9:ef:46:
8b:f3:d5:67:58:5e:83:fa:d3:7f:9a:a9:0b:5c:9f:87:1f:13:
7c:79:60:8f:f6:15:f3:98:3d:68:c4:ed:bc:b6:c9:9d:50:11:
f0:6f:80:ef:c9:65:ed:a8:10:82:94:f4:98:70:d1:43:bc:77:
7e:29:89:8f:77:8c:3b:fc:d9:f8:0c:dd:e3:59:71:ba:2e:2a:
4e:10:7c:e0:8b:1c:14:c8:0a:20:f9:8a:b4:f3:8e:33:07:97:
02:36:30:77:e0:ff:5f:b3:0f:96:a9:f5:d5:2f:50:e4:88:0c:
1d:e3:0a:2b:22:cf:fa:f5:c5:6c:a1:33:b0:b3:5d:e8:9e:76:
c7:da:99:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:53 2024 by rpki-client on console-ams.rpki-client.org