Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/0OZbUpq3NEJ_8JrEaZcJlHssxMQ.roa
File: 0OZbUpq3NEJ_8JrEaZcJlHssxMQ.roa (raw, json)
Hash identifier: dU3pLnZR9oaiuNOHO4HcE51s3XTRScMJ4E4pgXT5TY0=
Subject key identifier: D0:E6:5B:52:9A:B7:34:42:7F:F0:9A:C4:69:97:09:94:7B:2C:C4:C4
Certificate issuer: /CN=05976801363d375786152e4d061e75c8beb35058
Certificate serial: 01036436
Authority key identifier: 05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/0OZbUpq3NEJ_8JrEaZcJlHssxMQ.roa
Signing time: Sat 01 Jan 2022 00:59:27 +0000
ROA not before: Sat 01 Jan 2022 00:59:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47484
IP address blocks: 45.13.116.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16999478 (0x1036436)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05976801363d375786152e4d061e75c8beb35058
Validity
Not Before: Jan 1 00:59:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d0e65b529ab734427ff09ac4699709947b2cc4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bb:8d:06:20:16:67:e9:40:f6:dd:17:a4:4f:
1b:bb:fc:8d:0d:e9:e0:8b:b5:60:5e:1f:64:46:af:
af:7a:14:64:78:9a:15:72:1e:f5:64:3e:fe:f0:ae:
09:ee:47:e2:e1:e0:bf:26:3d:f6:09:f7:97:15:9e:
2e:ca:77:67:8f:fe:6b:09:8d:51:da:ce:ec:77:04:
4d:06:8e:4d:21:74:ba:68:b7:47:f5:26:c7:ec:30:
ce:3b:80:36:3e:ec:1e:fb:65:97:ed:e9:31:af:0c:
7e:d9:9b:cb:2b:a5:cc:c3:15:af:90:a2:8f:d8:50:
01:40:19:50:88:9b:86:79:03:23:b4:c2:65:72:0c:
f0:51:70:72:9c:d9:e6:7d:27:37:5b:46:a5:b0:15:
5f:3a:5b:ba:8a:ca:b8:5a:1a:c4:87:54:ff:7a:41:
7c:d8:8a:11:4c:5d:69:6e:c5:19:89:13:d2:59:97:
4e:24:b4:cd:b4:07:d9:51:9d:e0:e4:ee:46:cb:54:
08:c9:07:f8:e0:fc:7b:54:15:a5:ec:82:6b:a2:4b:
46:f5:d6:57:f8:2b:ee:46:0a:6c:be:0f:96:88:17:
0e:3a:c9:9a:70:32:26:69:fe:82:8e:45:a3:25:36:
00:bc:fb:47:9d:69:de:0f:6c:9a:3d:66:94:43:f0:
d5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:E6:5B:52:9A:B7:34:42:7F:F0:9A:C4:69:97:09:94:7B:2C:C4:C4
X509v3 Authority Key Identifier:
keyid:05:97:68:01:36:3D:37:57:86:15:2E:4D:06:1E:75:C8:BE:B3:50:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZdoATY9N1eGFS5NBh51yL6zUFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/0OZbUpq3NEJ_8JrEaZcJlHssxMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/2baadc-2b7a-4ec0-95ca-5ec8c8ed60fd/1/BZdoATY9N1eGFS5NBh51yL6zUFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.116.0/24
Signature Algorithm: sha256WithRSAEncryption
42:f3:fe:e5:89:dc:c8:b7:0e:73:10:a0:79:7a:09:71:a0:d1:
71:f0:97:80:23:0b:a7:1b:b9:db:62:e2:ee:ff:ca:8e:cb:6f:
06:d0:9c:5f:2a:0c:61:cd:c9:41:c4:a9:17:f9:3e:c5:82:21:
d6:cc:ec:c1:41:33:b0:a3:3b:4a:66:e4:e7:51:e3:3a:1b:88:
f9:43:71:c2:b2:cf:aa:9f:c5:8c:95:ca:d5:93:b9:71:97:63:
89:ba:8f:4d:a0:b9:e0:3e:78:47:1f:fa:39:3d:5e:68:37:43:
df:95:67:2d:fd:25:ac:5a:3e:2d:f0:db:70:f4:e4:b6:0b:2d:
aa:67:cf:81:71:14:0e:94:65:f8:00:73:78:20:0d:d9:38:8b:
13:dc:69:31:8c:6c:02:14:12:32:7a:43:47:c5:aa:00:0a:59:
80:4e:d3:49:d2:bd:90:62:57:90:e4:a3:33:f6:38:0f:09:b6:
31:b1:9b:b4:11:30:83:6f:7c:80:b1:7a:2d:6d:40:6b:12:11:
74:de:a1:c7:80:3a:e9:a3:1e:3d:fe:29:fa:61:5c:c2:2b:f6:
7a:c7:29:1a:e7:f0:77:75:9a:93:49:63:36:4f:1d:69:5a:24:
15:00:b6:8a:b5:b1:93:50:30:f3:1f:91:a7:59:8e:f0:4a:f1:
ef:ae:2c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:36 2023 by rpki-client on console-fra.rpki-client.org