Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/oTx5A2MW7izR8_QytXpT7BScoxI.roa
File: oTx5A2MW7izR8_QytXpT7BScoxI.roa (raw, json)
Hash identifier: jFMNmj78eb+irip7BSSWWsEmkX08YHqvWPihND8ooPk=
Subject key identifier: A1:3C:79:03:63:16:EE:2C:D1:F3:F4:32:B5:7A:53:EC:14:9C:A3:12
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 0183D53840373AC3315974A7BFE07A12375A
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/oTx5A2MW7izR8_QytXpT7BScoxI.roa
Signing time: Fri 14 Oct 2022 06:39:36 +0000
ROA not before: Fri 14 Oct 2022 06:39:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2386
IP address blocks: 145.139.13.0/24 maxlen: 24
145.139.14.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d5:38:40:37:3a:c3:31:59:74:a7:bf:e0:7a:12:37:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Oct 14 06:39:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a13c79036316ee2cd1f3f432b57a53ec149ca312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:95:2f:9a:62:3a:19:c8:03:a2:ab:54:39:d1:
51:f2:e8:a5:28:17:09:17:64:e8:40:51:0e:db:71:
a3:ab:c4:f4:1f:c4:71:91:01:fb:45:90:46:2c:ab:
5b:90:1f:99:ea:3d:e4:59:24:d4:ff:07:48:9f:57:
8a:1a:8b:bd:39:f0:3f:ee:94:19:f8:df:4c:fa:71:
87:5b:fa:e6:b7:f3:45:17:66:0e:19:9d:5c:87:e3:
b4:f1:f3:b0:2c:8e:88:11:b1:db:79:0d:ed:34:d1:
51:74:70:9e:06:89:d1:66:87:21:9d:e6:43:20:21:
68:6f:9e:14:2e:cc:64:75:30:4b:01:1c:08:15:6a:
66:51:e0:67:88:dc:fe:64:06:c2:3d:5e:59:c1:b9:
6f:77:18:a9:21:4b:5f:f4:77:d1:88:f2:20:37:4b:
5d:b9:55:97:9a:fd:4f:76:93:bf:31:ec:56:19:f6:
3c:cb:e6:64:19:88:ac:55:7a:83:38:bb:60:79:d9:
59:a7:97:3d:bb:05:e2:dc:32:6a:a1:18:54:70:de:
03:71:7f:bc:d3:96:62:5c:95:80:d9:7c:b9:13:67:
78:fb:98:d6:31:96:0b:20:8a:05:bb:94:eb:f4:62:
5e:f8:4d:20:fe:fc:25:bf:0a:f8:e7:7c:49:16:4b:
e5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3C:79:03:63:16:EE:2C:D1:F3:F4:32:B5:7A:53:EC:14:9C:A3:12
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/oTx5A2MW7izR8_QytXpT7BScoxI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.139.13.0-145.139.14.255
Signature Algorithm: sha256WithRSAEncryption
08:b3:45:87:6e:13:49:b6:85:c5:5a:37:05:24:9a:58:5a:af:
24:af:6e:83:ed:75:56:ba:94:e4:e2:f5:b2:b6:87:0a:c9:78:
d2:4c:24:78:ef:93:a7:8a:e1:2b:74:d9:a8:94:d8:24:56:e4:
1e:7e:48:86:71:61:2f:c0:17:fb:92:e8:6d:51:38:30:08:87:
43:19:68:fa:df:92:82:32:48:0a:37:1c:47:a8:23:46:bc:ba:
61:8b:26:e3:fb:72:54:a2:a4:59:ae:85:40:c5:62:1a:42:e0:
dc:83:d5:75:55:0f:17:67:59:1e:b0:82:03:68:79:47:4d:f1:
8b:ca:5e:22:32:4c:90:c0:ea:ae:e1:31:b6:9c:2c:d9:7c:57:
8d:50:4e:1d:35:89:39:4f:7a:8b:82:77:be:68:7d:1e:8d:db:
60:7b:14:57:79:b8:d9:98:a2:c4:23:14:69:4d:e6:9c:9e:0a:
79:d7:d1:e7:b9:cd:cd:c6:fd:75:a8:fd:5a:c0:a0:8d:ec:af:
df:0d:17:50:de:91:0f:b2:ec:de:91:79:a2:30:d6:f7:42:cc:
9d:f0:02:ce:a8:51:33:23:14:22:72:a9:25:d6:18:a8:ce:62:
ee:3b:be:43:93:78:9d:09:22:17:56:77:58:5d:62:34:8b:c7:
75:5c:52:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:09 2024 by rpki-client on console-fra.rpki-client.org