Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Og4mSaU0N4feSjsdidKUoQFr1iQ.roa
File: Og4mSaU0N4feSjsdidKUoQFr1iQ.roa (raw, json)
Hash identifier: BqK6cZAK9Tshd0fz/Zi69O1zzfF3T9Td5g08vew/JB4=
Subject key identifier: 3A:0E:26:49:A5:34:37:87:DE:4A:3B:1D:89:D2:94:A1:01:6B:D6:24
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0183EA829F4B0FA740DA2C4A22920B13DE15
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Og4mSaU0N4feSjsdidKUoQFr1iQ.roa
Signing time: Tue 18 Oct 2022 09:52:52 +0000
ROA not before: Tue 18 Oct 2022 09:52:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210636
IP address blocks: 45.8.186.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ea:82:9f:4b:0f:a7:40:da:2c:4a:22:92:0b:13:de:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Oct 18 09:52:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a0e2649a5343787de4a3b1d89d294a1016bd624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:09:cb:26:a7:97:f0:d0:7f:41:15:e4:0f:af:
f4:d5:79:e0:3f:3a:ed:38:40:11:cf:6a:d1:b2:f8:
70:81:05:bc:f2:a0:85:06:c0:60:02:c2:a4:a1:67:
62:05:87:bd:8e:85:10:7b:49:43:07:bd:e6:91:d1:
e3:8f:8e:74:81:01:c6:a2:18:a8:e4:c2:b5:09:e3:
40:d7:82:9e:a8:9f:33:fc:c5:24:7b:35:01:cf:55:
52:86:03:78:a9:3d:33:59:5e:2a:28:4d:36:4e:f6:
60:ba:53:f8:9e:4a:5f:d9:c2:61:00:f8:9d:6f:b7:
1d:b4:8d:ed:e4:67:7d:24:e0:b4:af:7c:ed:c4:ed:
4d:23:d5:41:4e:c1:91:6b:1f:9b:78:43:10:c8:0b:
5c:4e:03:b9:c1:c2:66:d0:34:e8:09:42:ec:45:84:
cd:6c:6d:41:de:c7:06:c5:54:66:0e:65:40:fc:84:
fc:96:9e:3e:89:1e:79:82:73:e0:e7:53:8c:00:d1:
4d:a0:ec:63:1d:77:83:b2:b5:7e:66:43:55:87:39:
4a:51:14:a0:6a:0d:14:e4:f5:76:d8:2d:4a:8c:8f:
36:d2:44:9c:02:5d:2e:af:93:ef:6a:fb:f4:27:30:
57:71:f8:cf:57:70:c2:72:62:71:ab:66:e1:9b:db:
87:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0E:26:49:A5:34:37:87:DE:4A:3B:1D:89:D2:94:A1:01:6B:D6:24
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Og4mSaU0N4feSjsdidKUoQFr1iQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.186.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:19:38:37:de:cb:ea:f2:e8:22:85:8b:26:63:a1:f9:17:72:
dc:4f:bd:fc:71:26:3c:73:86:a2:f7:10:df:89:42:9d:a3:2a:
c0:a2:99:1b:e0:43:61:7c:26:58:6f:f8:d3:46:be:5e:e3:84:
c7:e1:4e:5e:dd:35:49:aa:9c:d4:d7:eb:e9:74:de:1f:b3:82:
ce:ba:ee:08:56:19:dc:c7:52:11:e9:c2:c7:0d:27:3a:c4:81:
be:d7:47:68:32:a9:ea:99:fd:e4:77:8e:3f:6e:78:94:11:7d:
e0:4f:8e:af:d8:7c:20:6a:0e:b7:c3:2d:ec:27:66:f5:aa:85:
e6:ed:0b:71:26:4d:39:c6:ea:29:af:c8:e0:ce:7f:85:37:dd:
8e:5f:31:ed:e8:2a:c9:f0:25:b4:83:ca:b7:68:7a:d8:16:46:
ed:4f:19:6d:fc:69:29:7d:16:3f:e3:a8:fc:0f:79:c8:e2:fb:
2d:2e:7f:a3:77:41:64:79:d8:d7:42:43:68:3b:31:16:23:26:
cc:65:39:02:86:3f:9a:bf:b3:03:f3:27:4d:fe:33:60:df:0f:
84:13:dd:47:ae:a7:cd:c1:bb:e1:e2:c4:03:3d:2c:1e:87:64:
ba:10:11:e4:a7:c7:e3:3d:aa:4f:68:ca:80:50:a7:ef:55:ca:
7b:48:e9:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYPqgp9LD6dA2ixKIpILE94VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjIxMDE4MDk1MjUyWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTBlMjY0OWE1MzQzNzg3ZGU0YTNiMWQ4OWQyOTRhMTAxNmJkNjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQnLJqeX8NB/QRXkD6/01XngPzrt
OEARz2rRsvhwgQW88qCFBsBgAsKkoWdiBYe9joUQe0lDB73mkdHjj450gQHGohio
5MK1CeNA14KeqJ8z/MUkezUBz1VShgN4qT0zWV4qKE02TvZgulP4nkpf2cJhAPid
b7cdtI3t5Gd9JOC0r3ztxO1NI9VBTsGRax+beEMQyAtcTgO5wcJm0DToCULsRYTN
bG1B3scGxVRmDmVA/IT8lp4+iR55gnPg51OMANFNoOxjHXeDsrV+ZkNVhzlKURSg
ag0U5PV22C1KjI820kScAl0ur5Pvavv0JzBXcfjPV3DCcmJxq2bhm9uH8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDoOJkmlNDeH3ko7HYnSlKEBa9YkMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvT2c0bVNhVTBONGZlU2pzZGlkS1VvUUZyMWlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQi6MA0G
CSqGSIb3DQEBCwUAA4IBAQA9GTg33svq8ugihYsmY6H5F3LcT738cSY8c4ai9xDf
iUKdoyrAopkb4ENhfCZYb/jTRr5e44TH4U5e3TVJqpzU1+vpdN4fs4LOuu4IVhnc
x1IR6cLHDSc6xIG+10doMqnqmf3kd44/bniUEX3gT46v2Hwgag63wy3sJ2b1qoXm
7QtxJk05xuopr8jgzn+FN92OXzHt6CrJ8CW0g8q3aHrYFkbtTxlt/GkpfRY/46j8
D3nI4vstLn+jd0FkedjXQkNoOzEWIybMZTkChj+av7MD8ydN/jNg3w+EE91HrqfN
wbvh4sQDPSweh2S6EBHkp8fjPapPaMqAUKfvVcp7SOmr
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:22 2023 by rpki-client on console-ams.rpki-client.org