Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/OLuaLL-0e6qE4-ns4QoRSvynqe8.roa
File: OLuaLL-0e6qE4-ns4QoRSvynqe8.roa (raw, json)
Hash identifier: J7Q6Ft/LM3B2huGuEB/2B272IeKEQWKageImU7P8Iww=
Subject key identifier: 38:BB:9A:2C:BF:B4:7B:AA:84:E3:E9:EC:E1:0A:11:4A:FC:A7:A9:EF
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 018460CD64643D9C0B33DDFA1A8974B68604
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/OLuaLL-0e6qE4-ns4QoRSvynqe8.roa
Signing time: Thu 10 Nov 2022 09:09:43 +0000
ROA not before: Thu 10 Nov 2022 09:09:43 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 84.22.148.0/23 maxlen: 23
84.22.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:60:cd:64:64:3d:9c:0b:33:dd:fa:1a:89:74:b6:86:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Nov 10 09:09:43 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=38bb9a2cbfb47baa84e3e9ece10a114afca7a9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a4:6c:97:6d:0a:e8:31:ac:2d:df:89:10:25:
8b:e0:59:a0:24:c8:86:c1:e6:64:93:02:94:ed:f1:
9e:c5:e8:6c:e1:2f:46:8f:54:71:31:f6:31:aa:52:
f9:0e:a0:f0:2c:5d:3d:a4:24:ea:29:e1:e9:a5:9a:
aa:c6:ba:ca:2b:9d:9b:a9:20:f5:1a:53:2d:c0:1e:
cf:0f:21:f8:5f:d4:05:fa:6f:05:42:a1:4f:05:3a:
b6:51:4c:98:0f:2c:84:e6:4f:0f:65:88:4e:d4:a1:
fc:92:24:f3:60:de:03:eb:10:bd:e0:e9:b4:4b:8f:
ea:e6:a9:89:73:86:e5:7d:ec:cb:24:1c:5e:d9:42:
88:93:78:d9:1f:b7:ae:e1:24:40:d2:2d:6a:b0:a2:
3e:63:e7:a9:9f:65:24:83:59:22:f1:21:fe:84:ab:
fa:3e:33:44:e8:80:90:ac:ac:52:1c:8c:77:26:9c:
6f:92:59:50:f8:ee:9e:b2:d2:60:6a:4d:12:81:e9:
78:4e:a4:a8:6d:12:bc:21:c4:d8:59:6e:0f:6d:58:
3a:c5:f2:ed:ac:c0:7a:52:da:08:82:8c:9a:e3:0f:
95:fb:f5:ef:6f:04:9b:09:fa:0f:0d:85:1b:b2:aa:
c4:f4:ed:4a:2d:01:0d:91:4b:42:48:91:c4:ab:ba:
8c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BB:9A:2C:BF:B4:7B:AA:84:E3:E9:EC:E1:0A:11:4A:FC:A7:A9:EF
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/OLuaLL-0e6qE4-ns4QoRSvynqe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.22.148.0-84.22.150.255
Signature Algorithm: sha256WithRSAEncryption
20:14:06:38:46:3d:99:c0:ba:e7:1b:0e:4f:c2:e9:50:35:e9:
b3:7e:e8:c7:47:ee:98:20:18:59:f2:c7:89:be:69:7a:6d:4f:
9b:cb:69:a8:08:6e:d0:cf:0d:fe:f4:a3:e0:1f:f0:1d:a0:de:
4e:63:a1:85:66:5c:92:90:85:7d:fa:44:1f:cb:c4:30:ab:e6:
6a:56:59:f0:70:f7:8b:59:8b:9a:27:c0:31:c2:61:7a:ec:23:
eb:28:f0:2b:b1:26:2d:31:3f:42:ff:77:13:58:de:f5:0f:fc:
c2:ae:91:cc:94:48:c7:d3:2b:7d:14:fe:36:b9:67:a8:fb:23:
40:de:53:ae:20:ff:e8:16:cc:b4:99:27:cb:71:ef:3f:8d:e6:
8e:24:48:69:c7:14:35:6d:eb:66:6b:cf:52:c0:51:6a:ce:cd:
02:ce:bb:3b:96:55:64:24:04:d1:67:c4:69:a6:da:e2:08:7f:
94:0d:ac:7f:ef:fd:07:59:22:27:75:0a:ef:8f:ec:43:10:15:
25:55:46:f2:d1:c3:0a:cf:b9:61:8d:ab:2b:75:ba:69:44:44:
ab:a5:63:31:44:dc:38:64:0b:eb:03:e8:30:d6:11:f0:7a:65:
37:13:16:76:c9:d2:ff:ae:3e:ac:0e:f2:3b:31:23:b4:52:c9:
80:5b:fe:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:47 2023 by rpki-client on console-fra.rpki-client.org