Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/OsEROhFQ8dlSaibs-P2VygtdaBs.roa
File: OsEROhFQ8dlSaibs-P2VygtdaBs.roa (raw, json)
Hash identifier: ap2Rdii4rNYc1lC5LmWzrv2K+SEiODLpthAcVFXvsDg=
Subject key identifier: 3A:C1:11:3A:11:50:F1:D9:52:6A:26:EC:F8:FD:95:CA:0B:5D:68:1B
Certificate issuer: /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial: 0184FA5192E5292DB73B141F0A86E1BCD410
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/OsEROhFQ8dlSaibs-P2VygtdaBs.roa
Signing time: Sat 10 Dec 2022 04:36:00 +0000
ROA not before: Sat 10 Dec 2022 04:36:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204372
IP address blocks: 45.12.185.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:fa:51:92:e5:29:2d:b7:3b:14:1f:0a:86:e1:bc:d4:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Validity
Not Before: Dec 10 04:36:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ac1113a1150f1d9526a26ecf8fd95ca0b5d681b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ef:91:36:c2:7a:5f:87:94:57:8c:96:a7:fb:
95:7a:93:a2:16:98:71:f2:2e:70:c0:25:83:61:8f:
19:0f:56:fb:bd:71:5f:5a:57:c5:a4:48:fd:d2:60:
af:a9:1a:b8:dc:34:56:5c:55:d2:21:de:2c:a5:21:
d9:d4:ba:15:f4:f3:64:58:c8:67:48:84:8d:65:ce:
e0:71:8a:22:c0:e8:af:a5:e1:c1:b7:27:6b:c8:ca:
85:fa:81:0f:dc:35:5e:41:c6:ac:f5:b6:be:5c:50:
4d:c5:bf:98:cc:1d:dd:55:78:bd:93:70:ae:51:f8:
ee:8a:ff:b7:30:22:7d:03:7a:d4:f9:5c:71:d8:d4:
a2:3d:cf:85:a0:f1:3b:c5:8b:af:3e:e0:d7:d9:11:
2a:01:88:a4:d1:f9:99:f7:8e:3c:40:65:d9:83:6c:
ac:87:de:68:74:a6:3c:78:9c:22:10:51:6a:e6:36:
7e:bc:fa:fc:7d:b1:29:51:b2:87:66:66:cd:f5:6c:
fc:80:72:09:bc:11:fa:6e:81:45:47:05:5a:a2:a2:
c4:77:a8:ff:87:4a:71:cc:4a:c7:d8:c6:b7:64:d1:
41:57:52:13:5c:b3:a7:39:d0:8c:89:cd:a3:cb:9a:
d4:96:38:85:96:42:1a:82:44:e0:b5:9c:e7:78:53:
14:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C1:11:3A:11:50:F1:D9:52:6A:26:EC:F8:FD:95:CA:0B:5D:68:1B
X509v3 Authority Key Identifier:
keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/OsEROhFQ8dlSaibs-P2VygtdaBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.185.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:62:27:8e:35:31:9f:9c:ea:ba:4a:e0:bf:d3:ce:7f:fb:ad:
14:71:45:88:a6:87:48:37:20:ea:33:80:f0:e0:9f:4c:d9:c4:
93:a3:ac:c5:5e:14:45:1b:56:30:fb:79:a5:f4:f4:52:3d:92:
4a:56:b8:41:50:6e:5b:8d:c1:5e:35:bc:87:a1:7f:87:23:2f:
99:3e:fa:da:c4:36:2b:0f:16:62:9b:c6:ac:f1:5e:68:9f:65:
70:78:57:2f:54:3f:1b:4c:0c:84:84:5b:20:df:9b:14:7c:91:
1b:fb:ea:eb:85:74:a6:a6:20:48:2f:48:b7:92:5f:ad:f7:14:
cc:45:87:a5:46:05:53:78:81:24:3a:d0:4a:c6:13:3b:1d:ab:
3f:2f:92:a8:82:76:af:91:dc:af:02:cb:af:7d:ff:18:7a:9f:
43:db:5d:ec:e5:ef:d5:34:99:03:df:7f:6a:15:f7:91:55:c7:
ee:23:a6:27:ac:18:e5:b8:7a:5a:1d:0f:57:3f:ca:bd:55:40:
5c:fe:d7:a3:aa:fa:88:ce:9c:5b:27:24:ce:24:f1:2b:28:c6:
f8:c6:8a:11:78:36:d0:13:8a:55:eb:4c:fa:a5:88:6a:8c:dd:
ce:d1:52:dc:b9:f8:4e:0f:f1:db:63:20:a5:ee:26:fd:71:ad:
d9:fb:bf:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:38 2023 by rpki-client on console-ams.rpki-client.org