Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/O0NT_l4mqWnQX25j4LDUYMiV3Q4.roa
File: O0NT_l4mqWnQX25j4LDUYMiV3Q4.roa (raw, json)
Hash identifier: WczCZ82FORHZGPfbUzoi42Mxl2624aCf0WXU/6cNM2M=
Subject key identifier: 3B:43:53:FE:5E:26:A9:69:D0:5F:6E:63:E0:B0:D4:60:C8:95:DD:0E
Certificate issuer: /CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Certificate serial: 2E41DF
Authority key identifier: 0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/O0NT_l4mqWnQX25j4LDUYMiV3Q4.roa
Signing time: Mon 07 Mar 2022 07:21:23 +0000
ROA not before: Mon 07 Mar 2022 07:21:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50359
IP address blocks: 82.146.15.0/24 maxlen: 24
212.72.206.0/24 maxlen: 24
176.113.92.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3031519 (0x2e41df)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b78b2d3f62700fe67e593b5a33d1cf91789252f
Validity
Not Before: Mar 7 07:21:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b4353fe5e26a969d05f6e63e0b0d460c895dd0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:13:52:ec:44:be:32:1b:ee:4c:9f:27:6c:38:
b4:5e:b9:a0:1c:9b:13:4e:c3:b9:df:94:b1:6a:e1:
2a:02:a0:47:a9:5d:a6:93:d0:98:07:6a:9f:8f:c7:
1a:ac:0f:bf:79:b6:91:e0:23:f6:65:e0:8c:86:62:
03:44:ba:ec:68:98:5f:67:38:44:b2:46:b5:bf:ef:
e1:de:b5:61:0e:ac:53:94:c3:03:98:70:92:71:69:
14:a2:12:9e:d3:93:b0:ff:d3:15:cb:03:95:12:3a:
a0:e7:60:6e:02:5e:a2:ae:27:47:c7:34:e5:17:a7:
01:05:30:d3:73:92:ee:5b:a4:86:8f:7e:3d:e7:0f:
e3:f6:35:12:6b:fd:16:56:82:2c:d1:34:4c:3f:06:
1e:4c:3c:3a:5f:87:52:38:4f:1e:d7:b2:56:d0:4f:
7d:bf:b4:21:0e:b2:30:16:70:e4:19:0c:cc:6e:5c:
ee:76:0a:39:1e:d0:a9:e2:dc:20:42:5e:de:d2:c1:
b4:20:39:ad:4a:c5:b8:c9:ed:47:f6:a4:7f:e5:f2:
98:ea:5f:d1:3b:34:09:f5:6a:44:ce:53:31:5a:e6:
55:59:8e:f9:9e:00:02:66:96:4e:7c:71:07:c4:8d:
2e:a9:54:a8:78:5a:cd:ee:04:b1:83:21:e8:85:80:
19:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:43:53:FE:5E:26:A9:69:D0:5F:6E:63:E0:B0:D4:60:C8:95:DD:0E
X509v3 Authority Key Identifier:
keyid:0B:78:B2:D3:F6:27:00:FE:67:E5:93:B5:A3:3D:1C:F9:17:89:25:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/O0NT_l4mqWnQX25j4LDUYMiV3Q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cd7047-0816-4821-8dea-6078efd0785e/1/C3iy0_YnAP5n5ZO1oz0c-ReJJS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.146.15.0/24
176.113.92.0/23
212.72.206.0/24
Signature Algorithm: sha256WithRSAEncryption
27:e2:10:cc:d3:9f:21:9c:29:8b:22:85:15:54:3f:17:57:ed:
8c:0c:4d:19:e1:b0:17:fb:9d:a6:d0:6b:04:aa:7d:ad:12:e5:
05:fa:40:2e:af:46:67:2b:02:30:d1:7f:82:1e:c9:d7:3a:83:
fa:b4:a7:c5:a0:1d:73:1e:ac:df:46:d9:8e:27:be:bc:88:8d:
4a:0c:9c:31:a6:da:b7:de:fd:27:41:4f:2e:af:e4:ae:78:34:
4b:5b:ed:9b:7b:a9:07:14:2b:07:24:08:27:0b:af:bc:f9:03:
c1:38:3e:2e:fc:7b:df:46:d3:bf:c9:54:c2:4c:53:50:fd:60:
c1:f8:e0:12:ed:04:55:0f:a1:ec:d0:c1:07:ea:4f:7a:cf:cf:
56:0d:7d:e5:35:b3:c7:02:cd:25:7b:34:6d:e7:a2:2c:bd:12:
e2:71:19:de:a0:3f:79:a4:6b:e3:99:b6:f6:e9:25:2c:e0:03:
31:41:a2:1c:91:c5:3e:bc:c9:bb:bc:9d:09:30:d4:7d:fd:de:
2b:da:a6:52:89:54:67:2d:62:93:a8:d2:05:d1:c5:b5:3f:b6:
79:60:8c:54:db:ea:0f:16:3a:8f:d5:27:98:e5:11:9a:f9:ec:
51:85:9e:c2:fe:ef:59:03:64:67:79:1d:fe:d2:0e:be:90:35:
33:fd:34:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:37 2023 by rpki-client on console-fra.rpki-client.org