Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/oSiC2WcsLfQxHSmv-RBYMBu-XGM.roa
File: oSiC2WcsLfQxHSmv-RBYMBu-XGM.roa (raw, json)
Hash identifier: ceoplS00+Zhlf54jRN3YFPOUM7KfYMWOoBfb0k/O7a4=
Subject key identifier: A1:28:82:D9:67:2C:2D:F4:31:1D:29:AF:F9:10:58:30:1B:BE:5C:63
Certificate issuer: /CN=070483d3d62f19c0835746dcb721c8832c3b7926
Certificate serial: 038ECA4F
Authority key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/oSiC2WcsLfQxHSmv-RBYMBu-XGM.roa
Signing time: Tue 19 Apr 2022 11:02:44 +0000
ROA not before: Tue 19 Apr 2022 11:02:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 45.134.92.0/22 maxlen: 22
45.90.48.0/22 maxlen: 22
45.131.12.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59689551 (0x38eca4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=070483d3d62f19c0835746dcb721c8832c3b7926
Validity
Not Before: Apr 19 11:02:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a12882d9672c2df4311d29aff91058301bbe5c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:be:c3:52:eb:9b:87:b8:78:ed:50:58:9f:
13:14:2f:4a:ce:80:a8:b1:83:38:e1:e4:12:81:0e:
96:11:0a:3a:73:05:d4:b8:ea:45:b9:71:ad:10:ef:
c7:45:4b:b2:a8:0d:4e:96:e8:54:78:27:28:f6:37:
29:fc:89:91:d9:23:20:5a:47:71:48:54:05:fc:74:
0a:85:d0:6f:40:f7:c9:43:6f:04:f3:5b:ae:0a:08:
1b:97:dd:61:a8:dc:35:13:a7:6f:97:12:0f:90:3c:
6d:81:2e:73:80:6e:cd:f1:5b:06:23:d5:ec:00:47:
c8:5e:1c:8f:48:f7:34:d7:63:8c:23:b0:a2:d6:46:
cc:fc:1c:3d:21:dc:ee:b1:be:3d:75:5b:30:aa:a1:
5b:7d:eb:b3:0b:0f:3e:93:fe:98:0c:90:74:5a:ce:
21:50:21:43:2c:9f:62:e9:b8:da:a0:b3:f1:56:d2:
c9:79:07:c5:b7:2b:7b:64:5c:f4:fa:14:a5:5a:ef:
27:74:f8:17:69:1f:31:29:8b:be:38:ba:6b:74:60:
ec:7b:28:ce:f8:f5:ea:90:40:b9:e7:fc:5c:94:3c:
c9:2d:17:47:55:aa:1c:bd:b8:85:c6:51:f6:83:d8:
27:f0:67:e9:68:c5:6b:30:37:8a:6a:79:35:47:61:
6a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:28:82:D9:67:2C:2D:F4:31:1D:29:AF:F9:10:58:30:1B:BE:5C:63
X509v3 Authority Key Identifier:
keyid:07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/oSiC2WcsLfQxHSmv-RBYMBu-XGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.48.0/22
45.131.12.0/22
45.134.92.0/22
Signature Algorithm: sha256WithRSAEncryption
4d:7a:f1:39:62:4e:60:d2:33:09:dd:81:a2:a7:74:9d:3f:c5:
6c:0b:16:16:62:30:cb:ef:c6:59:4e:24:36:d1:01:84:d3:6a:
a1:6f:27:ba:3b:ca:ed:9d:d6:3a:3d:50:2d:4d:ee:ad:9a:be:
14:c2:7d:e6:1d:eb:2f:29:f9:c5:2d:9c:9e:4f:fa:dc:05:20:
fe:48:25:cc:6e:76:dd:ca:36:48:a5:cb:ee:5b:6d:83:93:c2:
3f:69:78:6c:ee:85:b5:62:3f:fd:d8:b2:e9:3f:16:3d:8c:c4:
49:d9:17:a4:b5:2d:ad:67:d8:1e:62:9c:10:8a:14:a9:2f:12:
6e:df:f0:e6:2d:d2:97:c4:3d:8a:0f:f9:8c:bc:c1:e4:ec:ba:
f0:c7:0c:9a:12:d3:c7:4a:ee:3b:95:e1:fc:fc:8a:c3:9c:a2:
28:1d:51:53:a6:a1:40:a2:ce:ce:d6:e1:45:d8:e9:f8:8f:0b:
05:42:b1:4d:30:19:44:15:d8:03:9c:d3:3f:88:02:f3:1c:f4:
af:58:ea:a1:9b:ab:78:4a:93:00:f2:41:7d:1d:96:db:b1:e0:
5f:eb:69:cc:9c:bf:dc:53:80:a8:6d:dd:b5:14:ad:4c:a1:71:
e6:5c:15:a3:fe:f2:0c:8f:ff:2e:88:57:90:1b:32:b8:fe:55:
a6:b3:23:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:03 2024 by rpki-client on console-fra.rpki-client.org