Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/OM8YfQ8pi13qGaVkTtj1oRiYmuw.roa
File: OM8YfQ8pi13qGaVkTtj1oRiYmuw.roa (raw, json)
Hash identifier: wwVD+HVEYgWBa+VXg2s9QCe1ULN+UylMW0WxraoMCQ8=
Subject key identifier: 38:CF:18:7D:0F:29:8B:5D:EA:19:A5:64:4E:D8:F5:A1:18:98:9A:EC
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 15500938
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/OM8YfQ8pi13qGaVkTtj1oRiYmuw.roa
Signing time: Tue 14 Jun 2022 01:56:44 +0000
ROA not before: Tue 14 Jun 2022 01:56:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 45.137.180.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 357566776 (0x15500938)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: Jun 14 01:56:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38cf187d0f298b5dea19a5644ed8f5a118989aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:64:bf:a9:86:18:77:13:49:d3:23:93:0c:8a:
73:39:0c:96:55:fd:d1:4f:18:ab:87:c7:c8:dd:8c:
30:c9:f6:66:fb:eb:bf:45:1f:2e:aa:70:a2:6f:5f:
56:46:a0:aa:31:22:61:02:3c:24:a3:96:51:c1:18:
b6:d9:22:81:f1:74:57:a5:54:18:20:90:f1:97:6e:
64:95:4a:a6:6d:00:c4:c8:14:94:0e:0b:ca:3a:da:
cf:21:8a:ff:1c:45:09:ff:e8:01:14:31:14:a2:e2:
e4:b1:5c:9f:d6:f5:1c:fb:67:76:76:9e:ba:4f:c8:
3a:5a:9a:ff:d2:64:ca:72:bd:5b:f3:b7:95:99:f8:
88:b8:ae:fe:d4:6a:cd:61:a6:23:74:5f:97:3c:26:
77:fb:41:ba:e3:c9:dd:c8:3a:71:d1:5e:ed:ba:85:
89:77:dc:73:ff:7d:39:1d:4a:38:c8:21:1a:39:a8:
0c:27:6f:21:48:d7:5a:c0:ab:df:09:7e:2e:ad:d0:
41:cf:bf:bc:2e:47:26:b1:e9:93:18:e2:fc:d4:e9:
fe:6e:4c:4b:83:4c:50:eb:2a:5d:ec:c6:26:a1:fa:
d3:6c:eb:18:72:b4:99:4b:18:f2:ea:1e:f8:75:3f:
03:c0:49:06:ae:bf:77:9b:11:51:cb:c1:5a:ed:c4:
ef:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CF:18:7D:0F:29:8B:5D:EA:19:A5:64:4E:D8:F5:A1:18:98:9A:EC
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/OM8YfQ8pi13qGaVkTtj1oRiYmuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.180.0/22
Signature Algorithm: sha256WithRSAEncryption
28:51:a9:27:96:dc:fb:99:9a:c9:f1:5b:eb:92:da:14:26:ad:
5e:be:1f:57:6f:a6:3a:35:9c:0e:97:5d:42:1e:9e:d7:2a:94:
3b:28:8b:ea:04:68:d3:2e:b0:14:61:64:64:2e:19:6b:ae:96:
99:8f:90:a3:c6:6a:a3:3b:ce:14:40:67:e3:fd:6e:43:5c:80:
ee:73:99:2e:5d:17:1d:a1:43:6b:a0:73:29:da:46:fa:84:94:
0f:3c:33:b9:df:18:9a:cc:b4:30:a0:8d:79:3c:56:5c:ab:e1:
b6:f0:60:d1:01:19:c0:41:20:6e:3d:b7:27:6e:b4:ca:22:32:
f6:36:4e:9b:58:80:3a:76:8c:85:b6:13:c2:8d:b4:0b:99:55:
6c:d0:79:73:58:bd:81:f6:28:82:37:98:89:cd:18:f3:48:0a:
20:dd:10:e0:61:98:3e:e1:e4:e5:98:30:50:95:12:97:8f:ce:
a1:54:cd:5a:4d:63:e9:a8:52:4c:d2:3b:c5:e3:17:5f:7a:dc:
e8:75:e6:ce:ff:11:80:08:1a:61:f7:cf:5f:6f:a3:67:39:4e:
dd:e5:6f:6e:69:0b:85:53:c2:b1:f8:66:e7:8c:f4:ac:8f:76:
4d:e8:f1:0e:f5:f7:05:21:a0:35:6c:a0:eb:c1:25:99:98:63:
de:ec:43:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:57:42 2023 by rpki-client on console-fra.rpki-client.org