Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/lOI7hjMBNO_JZVe-A_rKDY-UKTo.roa
File: lOI7hjMBNO_JZVe-A_rKDY-UKTo.roa (raw, json)
Hash identifier: L50sWCJEtWEmyDaOan5CurNT1Fap7emfCB5bMuzzwkE=
Subject key identifier: 94:E2:3B:86:33:01:34:EF:C9:65:57:BE:03:FA:CA:0D:8F:94:29:3A
Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Certificate serial: 04B6D4D3
Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/lOI7hjMBNO_JZVe-A_rKDY-UKTo.roa
Signing time: Sat 01 Jan 2022 05:01:58 +0000
ROA not before: Sat 01 Jan 2022 05:01:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 40676
IP address blocks: 45.149.165.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79090899 (0x4b6d4d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44
Validity
Not Before: Jan 1 05:01:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=94e23b86330134efc96557be03faca0d8f94293a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:02:43:8e:5a:10:85:58:1e:5e:a6:b1:ec:0c:
f3:63:87:34:e7:b5:1e:99:1d:91:be:3f:e8:fa:54:
c5:85:28:2b:00:32:56:df:c8:7b:f9:c8:37:b6:95:
68:ea:58:7f:f4:b4:45:e6:55:6a:15:b1:d8:75:f8:
dd:79:96:4b:66:78:3b:5b:55:0f:66:34:38:e8:ad:
95:b0:54:be:9e:d4:28:8e:a0:87:0b:7b:64:f8:14:
57:c7:94:9e:6d:f7:d4:c5:36:4a:fa:7f:63:dc:bf:
d0:56:6e:b3:77:c2:a3:f4:ac:81:c3:2f:98:77:d4:
e3:92:27:3b:f6:b6:5a:64:79:59:4e:cc:63:42:2a:
e9:29:bf:8f:de:bb:c9:09:5c:3a:15:55:b7:35:a6:
ae:b9:11:d0:18:9c:4c:b2:b5:50:94:2f:9a:09:44:
5b:20:bb:ba:e4:41:e9:2e:10:c9:fd:79:00:6a:ff:
61:45:c2:61:6e:dc:e2:5c:e3:33:01:9c:6f:9e:7e:
47:f0:51:85:f9:4e:ad:a8:0b:bf:f9:5b:4a:72:e6:
49:c9:a2:ea:2b:f4:ca:94:bf:6b:60:36:87:92:e6:
7e:7e:ea:d8:6c:63:2a:6c:f8:d7:e2:21:d6:d1:dc:
0b:60:bd:23:47:50:2d:a1:ee:cb:dd:fa:ec:46:da:
11:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E2:3B:86:33:01:34:EF:C9:65:57:BE:03:FA:CA:0D:8F:94:29:3A
X509v3 Authority Key Identifier:
keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/lOI7hjMBNO_JZVe-A_rKDY-UKTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.165.0/24
Signature Algorithm: sha256WithRSAEncryption
48:78:1b:64:06:fb:b8:7c:9a:af:86:6d:45:2d:7a:47:65:a3:
8a:e0:34:1b:07:9e:fc:fc:f4:49:87:98:d0:76:fc:3a:5a:dc:
b7:9a:6a:ff:a0:0e:7d:6e:2f:12:41:e4:96:e3:9f:ca:91:2d:
14:40:6a:02:4d:97:e1:1d:12:69:a1:9a:b9:3b:64:07:65:77:
f8:f1:0a:b3:8e:df:72:e1:4d:cb:a9:17:d0:3d:48:6a:65:0e:
0f:6d:89:07:9d:5f:27:75:4d:2e:1f:38:7c:fa:64:6b:0e:e5:
b8:e1:b4:85:d8:d2:7f:eb:4b:8e:18:48:1e:14:de:43:89:d5:
13:4e:86:ea:c2:5c:68:70:f2:1e:d5:24:2c:0f:95:66:39:e4:
da:fc:e8:a9:7e:b0:9b:8d:3e:21:9e:2c:85:f0:56:f4:3e:b1:
68:04:29:89:94:05:8f:77:78:e9:f3:5d:b7:6b:54:b5:27:1e:
cf:64:13:7d:20:f6:0d:77:9d:56:48:10:44:cc:86:94:ce:1a:
f8:bc:b3:f2:47:4b:6a:87:36:2f:0e:9f:b6:0e:20:98:30:23:
74:a6:25:dc:04:af:d3:fb:6b:98:4e:6e:81:21:97:5f:48:22:
70:3c:77:e9:46:09:68:cb:3b:53:be:29:54:97:f4:1a:7b:e9:
ff:5e:df:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:08 2024 by rpki-client on console-ams.rpki-client.org