Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/OBkAmpJiAP9LaLEsX17ygHbFSGs.roa
File: OBkAmpJiAP9LaLEsX17ygHbFSGs.roa (raw, json)
Hash identifier: p2q2XSbtACt/+5jEULjbIQK8fPbcgXWCKwScJch68Ek=
Subject key identifier: 38:19:00:9A:92:62:00:FF:4B:68:B1:2C:5F:5E:F2:80:76:C5:48:6B
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 01836A0CD1356471F73BB9B696FDFE79A8B8
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/OBkAmpJiAP9LaLEsX17ygHbFSGs.roa
Signing time: Fri 23 Sep 2022 11:12:48 +0000
ROA not before: Fri 23 Sep 2022 11:12:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52000
IP address blocks: 37.44.196.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:6a:0c:d1:35:64:71:f7:3b:b9:b6:96:fd:fe:79:a8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Sep 23 11:12:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3819009a926200ff4b68b12c5f5ef28076c5486b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:06:66:ba:54:72:48:03:a4:f8:0f:1e:ae:50:
0d:cc:7c:75:dd:05:05:02:60:e3:7f:1b:b9:a5:e7:
57:06:c0:54:8c:28:f9:3c:4d:af:b1:69:10:7b:11:
30:93:e3:f0:23:f1:82:c9:55:65:bc:ff:0d:bd:77:
64:88:d8:32:aa:f6:23:b3:ad:4c:0f:c5:d4:b5:22:
56:bb:ac:18:95:e3:03:82:ea:ad:72:f2:bd:71:f7:
b6:83:67:58:64:62:b3:07:3a:24:5e:c2:20:85:39:
86:d1:46:c0:bd:33:5c:c0:ce:45:6b:de:26:9d:88:
7a:f7:99:08:7a:9a:75:c4:66:ab:35:6a:6e:26:58:
b9:55:77:0e:b3:a6:2d:23:fa:2d:a6:e4:20:60:9e:
bf:3a:24:a7:c5:83:0d:b2:10:26:ef:2f:86:68:0c:
06:7d:7f:f2:b5:a2:a3:a5:37:04:c7:de:fc:10:a9:
a7:d3:e4:e3:45:08:b0:a2:53:4e:0d:cb:86:bf:d4:
89:a4:08:f1:6d:af:28:bc:2e:ba:cf:9c:1a:2a:8a:
94:d6:84:cc:e4:3f:ba:dc:de:c4:45:63:a1:67:a5:
77:56:b4:fd:55:0a:d6:a0:8e:25:e8:a3:f9:31:17:
af:05:b2:d2:7e:16:f0:de:e3:da:cc:ba:d4:fc:a9:
13:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:19:00:9A:92:62:00:FF:4B:68:B1:2C:5F:5E:F2:80:76:C5:48:6B
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/OBkAmpJiAP9LaLEsX17ygHbFSGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.196.0/23
Signature Algorithm: sha256WithRSAEncryption
03:30:62:03:76:65:1d:33:62:38:dd:43:5b:0a:3d:1d:9a:1d:
43:1a:4d:e4:03:8b:bd:8f:19:81:74:47:07:d4:bc:0b:3c:78:
72:b6:ad:ed:7c:41:86:23:be:ce:0d:96:9e:7d:39:ea:b9:29:
63:14:67:9a:6f:52:1a:11:f4:fc:d6:24:27:ca:89:39:41:30:
28:92:95:42:a6:c8:b4:a6:4c:5d:06:ef:24:9f:7e:34:04:f6:
74:12:b8:62:cd:b4:12:58:23:f6:24:fe:99:aa:66:c9:00:1b:
77:85:71:1d:78:fd:6c:28:eb:b4:07:43:0c:bc:95:24:39:6f:
ec:66:7c:f3:f4:2f:ad:f1:33:62:94:67:ba:1d:ee:13:0e:0d:
27:ca:dc:db:72:6a:13:a7:a9:30:69:3f:f7:eb:20:e4:7e:1f:
4d:09:b2:19:e5:ea:b8:06:32:09:4b:0d:b0:96:78:ae:98:68:
b8:aa:8f:21:94:28:e0:bd:43:2e:8d:fb:e3:ca:00:b0:33:6e:
29:d4:8e:71:fe:28:22:fc:79:ab:1f:c9:42:5f:6b:e3:79:8a:
2a:2e:11:df:ac:7c:30:fb:1a:ad:21:99:c6:9f:e5:53:eb:c3:
55:d0:89:c2:4a:f2:fa:22:52:68:6d:7a:19:2b:ab:5c:d3:fc:
66:2b:5b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-fra.rpki-client.org