Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/obCOQrHirnWrFhvcd2OQwnF9JnI.roa
File: obCOQrHirnWrFhvcd2OQwnF9JnI.roa (raw, json)
Hash identifier: UrydtbDYZVvondw3x8Q/uCGgIaeasUWqQotIah3XzoA=
Subject key identifier: A1:B0:8E:42:B1:E2:AE:75:AB:16:1B:DC:77:63:90:C2:71:7D:26:72
Certificate issuer: /CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Certificate serial: 02B24641
Authority key identifier: 13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/obCOQrHirnWrFhvcd2OQwnF9JnI.roa
Signing time: Sat 01 Jan 2022 02:01:14 +0000
ROA not before: Sat 01 Jan 2022 02:01:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.80.48.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 45237825 (0x2b24641)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13e281475b7bf8d0fa1f669d5ad2de1635e8c04f
Validity
Not Before: Jan 1 02:01:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a1b08e42b1e2ae75ab161bdc776390c2717d2672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:42:cf:32:cb:c9:0e:b5:06:ff:b6:7c:65:1d:
69:4d:e6:da:da:81:77:e1:8d:4a:22:fb:8f:8b:6f:
1d:2f:25:28:44:c7:65:f7:d7:62:36:3d:4d:b4:47:
01:0f:25:67:4f:2b:6f:b4:69:ca:46:5d:73:52:78:
6d:e8:87:35:da:41:b2:bf:d7:78:fc:65:4f:79:50:
c6:97:43:d9:db:65:d2:1d:f4:81:71:7c:3d:3b:b3:
b0:d5:b6:9e:e7:dd:bf:9a:5d:bc:20:ec:e1:a6:a0:
51:b6:c6:99:55:67:32:84:79:22:99:81:67:4b:4d:
76:a4:2f:65:68:70:48:09:b1:94:3a:04:5d:b9:de:
d3:84:f0:4e:78:99:bd:5b:ea:65:65:2e:c5:e5:86:
e5:3b:5a:aa:3e:77:af:b6:5a:58:7b:6f:fc:f9:8c:
3b:31:4e:d4:79:3f:ed:73:f7:ff:fc:97:33:e5:e2:
fa:b7:b5:3e:b8:d1:10:4e:bc:d0:c1:24:2e:a6:39:
4b:85:d9:55:4c:4d:a2:20:f1:18:4b:bb:62:b2:a1:
33:44:df:89:03:85:32:bd:64:6b:cc:84:2a:60:d5:
bd:33:c9:f3:c6:7a:fe:e2:d5:75:52:5c:a1:31:42:
0c:a0:d5:20:5f:6c:db:5b:c5:7d:4d:47:98:f7:b5:
d9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:B0:8E:42:B1:E2:AE:75:AB:16:1B:DC:77:63:90:C2:71:7D:26:72
X509v3 Authority Key Identifier:
keyid:13:E2:81:47:5B:7B:F8:D0:FA:1F:66:9D:5A:D2:DE:16:35:E8:C0:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-KBR1t7-ND6H2adWtLeFjXowE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/obCOQrHirnWrFhvcd2OQwnF9JnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/05b5d8-4541-48a9-8c0a-44fd04393e2b/1/E-KBR1t7-ND6H2adWtLeFjXowE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.48.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:b5:9a:68:49:07:50:4b:dd:94:2f:f3:e9:a4:c1:c7:e8:c3:
35:eb:a1:cf:34:85:84:3a:78:31:d6:02:68:ad:e3:ec:65:67:
7f:3e:6d:5d:c1:3f:5e:a6:77:bc:9c:c5:c8:bc:64:ba:a1:9e:
21:93:e6:ea:af:64:3f:02:a7:f1:97:5b:ed:1a:9b:4e:9f:fe:
b9:28:00:25:3e:9a:b5:ad:97:c1:cd:75:b7:86:ab:8e:98:c3:
b1:34:b5:87:dc:36:41:9e:40:59:bd:31:99:80:f4:a9:a6:25:
97:0c:c9:0c:00:7a:23:aa:39:48:3f:7b:34:bd:6b:e2:74:9c:
d0:0c:e3:9e:a5:f1:e4:7a:1f:9a:86:32:0d:80:ea:d2:bd:71:
48:20:e7:2c:db:ad:61:43:b2:c0:56:ce:c2:2c:e1:23:c8:e5:
1d:27:67:2b:3a:45:61:41:85:35:e1:9e:72:80:c8:c6:f8:1f:
31:dc:45:c7:67:20:e8:5f:f6:dc:fc:4a:72:64:df:b3:02:73:
2e:d0:c4:20:3a:51:78:84:ce:3a:e8:33:1d:43:fc:eb:09:ca:
60:ad:78:0a:14:0e:30:e2:3d:88:a0:0a:90:51:49:3b:33:a0:
9b:fd:81:a2:65:5f:67:e7:69:77:a8:8c:bd:65:01:b4:d9:39:
5f:84:f1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:05 2024 by rpki-client on console-ams.rpki-client.org