Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OO7NJDkLj7g_uvuUgrLxjsfTAZ4.roa
File: OO7NJDkLj7g_uvuUgrLxjsfTAZ4.roa (raw, json)
Hash identifier: PamdbvZ4Pl7M1cfOzlKdi0CiY3PlT+gdtI3vrZa+8yg=
Subject key identifier: 38:EE:CD:24:39:0B:8F:B8:3F:BA:FB:94:82:B2:F1:8E:C7:D3:01:9E
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0183ABD51F1F7910F2885938E0980C7663A1
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OO7NJDkLj7g_uvuUgrLxjsfTAZ4.roa
Signing time: Thu 06 Oct 2022 05:46:54 +0000
ROA not before: Thu 06 Oct 2022 05:46:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203790
IP address blocks: 45.148.116.0/24 maxlen: 24
45.148.119.0/24 maxlen: 24
2a0e:97c0:460::/44 maxlen: 48
2a0e:b107:12a0::/44 maxlen: 48
2a10:cc40:1d0::/44 maxlen: 48
2a10:cc41:110::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ab:d5:1f:1f:79:10:f2:88:59:38:e0:98:0c:76:63:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Oct 6 05:46:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38eecd24390b8fb83fbafb9482b2f18ec7d3019e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:88:64:97:2d:b6:ca:99:f4:e1:74:d7:af:bb:
86:b7:3c:16:09:15:ec:85:6e:d9:ec:4b:fb:85:97:
1a:f2:da:9f:a7:d3:43:82:9c:90:78:80:16:11:fc:
5d:64:0d:18:d1:39:6d:75:83:13:8f:50:32:7d:e6:
49:52:c1:8e:26:25:e4:85:58:00:a1:50:c3:c8:59:
1a:be:84:74:c9:d5:55:ca:09:08:c6:3f:22:c8:07:
d6:27:c5:29:ff:a8:96:d4:c7:88:f6:4c:fc:e6:1a:
76:b5:08:ba:a5:ab:76:84:3f:79:e2:f5:a9:77:a6:
37:bd:5d:44:45:f0:c5:5e:d4:64:14:95:24:43:13:
90:c5:fd:71:4b:a2:35:85:a2:e7:fe:7e:99:09:31:
ee:31:f5:93:b8:0d:b6:36:ba:ac:28:fd:85:29:3b:
db:d7:e4:7e:d1:0e:9b:1e:f4:51:f1:5b:5f:cf:ce:
f3:27:32:bc:d0:a9:65:68:23:cc:ac:e6:51:bb:75:
13:14:1b:1a:cd:15:fc:8b:8c:b4:ba:1d:b2:50:c8:
de:d2:b8:6e:b5:dd:52:93:f2:b1:2e:10:be:c3:f2:
f7:97:63:d3:e0:b0:42:24:81:5c:5c:04:22:a8:ed:
13:b8:7e:98:7f:dc:b6:8c:d8:95:eb:e7:b9:d1:51:
94:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:EE:CD:24:39:0B:8F:B8:3F:BA:FB:94:82:B2:F1:8E:C7:D3:01:9E
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/OO7NJDkLj7g_uvuUgrLxjsfTAZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.116.0/24
45.148.119.0/24
IPv6:
2a0e:97c0:460::/44
2a0e:b107:12a0::/44
2a10:cc40:1d0::/44
2a10:cc41:110::/44
Signature Algorithm: sha256WithRSAEncryption
6b:7d:c7:0c:d4:80:4d:7b:72:5e:6c:1d:5f:cd:0d:54:3d:e0:
ea:46:00:01:32:ea:1f:84:77:d5:37:74:d3:a1:94:7c:b0:11:
84:79:1b:8d:3d:ea:da:9d:75:79:3e:7c:65:a8:51:37:f4:5e:
27:58:df:bf:4e:f1:57:06:9b:35:82:a2:bd:ac:5c:43:63:1b:
57:5f:ed:00:3c:c9:ca:e1:38:74:42:10:41:a0:04:92:20:85:
bb:2f:18:21:13:26:bd:36:d7:a5:98:bb:ad:22:38:b2:7d:75:
55:08:32:66:93:2f:e7:c4:2c:5a:b3:22:c9:ca:2f:93:4a:13:
37:bb:fc:95:2c:c2:6d:ab:81:a6:1f:a7:d0:2a:f3:43:16:ec:
db:29:23:50:fa:a4:c3:52:14:56:0a:63:63:d3:b7:a9:6f:ae:
6e:74:70:af:5b:20:2a:e9:a1:18:89:eb:a6:7c:5f:af:80:69:
7c:da:e9:ec:fc:c5:79:86:23:d3:fd:9d:92:f9:4c:88:9b:e1:
10:d7:96:67:60:f9:ac:1b:98:01:8a:41:93:62:1b:66:d7:dd:
45:f7:a6:cf:19:ab:94:4b:84:56:07:17:8e:ca:ca:45:27:bd:
46:94:a5:1d:33:f6:bf:27:3f:7a:fa:c0:08:58:ac:27:b1:d5:
11:a8:9c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:58 2023 by rpki-client on console-ams.rpki-client.org