Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/OjCpA7J2pFMsbttRxS4UAS9AbIc.roa
File: OjCpA7J2pFMsbttRxS4UAS9AbIc.roa (raw, json)
Hash identifier: 65mG3K8LvGtEuc+Bf0aylIcpIc0lmqf9B4R/GhZvWFM=
Subject key identifier: 3A:30:A9:03:B2:76:A4:53:2C:6E:DB:51:C5:2E:14:01:2F:40:6C:87
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 01848B7ADD9A82AA049030F65D722A46C4F4
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/OjCpA7J2pFMsbttRxS4UAS9AbIc.roa
Signing time: Fri 18 Nov 2022 16:03:15 +0000
ROA not before: Fri 18 Nov 2022 16:03:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 36830
IP address blocks: 45.80.106.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:8b:7a:dd:9a:82:aa:04:90:30:f6:5d:72:2a:46:c4:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Nov 18 16:03:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a30a903b276a4532c6edb51c52e14012f406c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f5:89:5e:be:c0:a7:42:84:28:40:0e:c9:31:
f7:65:60:3c:f5:d1:55:e4:84:15:2d:67:9e:5c:83:
bc:c3:a7:05:87:5c:f2:a4:a5:94:ff:d5:aa:f8:bd:
eb:3c:9a:0d:e1:c2:ea:de:e2:86:0a:a3:60:cf:a7:
49:bf:e5:01:81:0f:1f:c9:2f:d9:a0:5b:9f:be:a8:
79:32:34:d0:54:90:23:89:5e:3d:c2:63:4f:86:3c:
aa:19:14:de:4d:73:1f:e8:aa:2d:db:7d:b5:e0:ba:
b6:8c:d1:60:0c:33:d8:1d:12:72:4e:43:56:31:48:
bd:44:7b:c5:6e:14:49:7b:12:19:bc:4a:08:3f:07:
87:89:9b:1a:8d:f8:ec:26:c2:08:af:9f:78:3b:9c:
3f:ad:5d:f5:7b:bd:d9:86:5e:6c:57:e4:bb:4a:10:
d4:e7:57:bc:ef:b7:a9:2e:98:15:1e:2a:ae:9f:d4:
c9:6a:ee:11:53:16:d0:8e:48:42:fb:75:9e:19:dc:
f1:6d:20:44:35:9a:f9:82:df:c7:cd:73:d9:62:9f:
2c:59:30:1b:96:62:23:06:63:d3:42:74:3e:34:db:
04:24:4d:93:ae:50:d2:61:6e:11:2d:cb:15:a1:52:
fe:1b:4c:26:20:32:8c:68:81:4d:0f:69:e5:cd:1f:
dc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:30:A9:03:B2:76:A4:53:2C:6E:DB:51:C5:2E:14:01:2F:40:6C:87
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/OjCpA7J2pFMsbttRxS4UAS9AbIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.106.0/23
Signature Algorithm: sha256WithRSAEncryption
37:a3:eb:a4:5f:47:8f:7a:ba:5b:68:a2:c5:c8:b4:b2:8c:f6:
b3:eb:2f:6d:63:f1:77:17:5f:d9:a5:60:ba:12:45:e7:0e:a1:
ad:4d:18:5b:a7:10:4d:a0:90:60:b5:46:44:6b:ae:3e:e8:d5:
0e:8c:a5:a1:27:5b:f7:33:da:b6:7b:09:84:45:8f:2f:57:d5:
9e:e7:c8:42:f5:1a:61:4d:c0:c1:64:43:03:7a:8f:10:6c:28:
ce:ab:d1:71:d0:fb:cb:d1:90:60:c0:8b:82:2c:35:60:f9:d8:
b3:aa:a3:d4:88:cc:63:63:6a:bb:d2:82:b6:73:c3:c7:ec:7a:
54:26:1a:36:53:3a:36:91:7c:ee:89:72:f2:f3:2c:d8:a0:f8:
a4:a5:c7:1b:98:4c:78:5b:92:c0:bf:ae:56:af:26:53:ea:5a:
42:fc:44:a4:66:1f:a1:e8:ff:d6:9f:bb:61:89:4d:dd:a1:fc:
3b:39:34:f1:0e:99:ad:e5:2a:9f:50:ad:e5:64:60:5f:8c:90:
a3:41:01:1b:b7:e2:82:ea:62:21:97:28:50:e7:18:8f:ef:d7:
a6:86:7c:61:5b:65:d9:d3:8c:73:8d:22:4b:58:33:d0:3b:d6:
c2:be:ea:73:e6:4d:f7:f3:7b:d2:de:e9:92:3e:43:c6:d6:4d:
dc:b6:f5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:15 2024 by rpki-client on console-ams.rpki-client.org