Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/OR0Wksr2HUOj2TguVgUqMUw1B64.roa
File: OR0Wksr2HUOj2TguVgUqMUw1B64.roa (raw, json)
Hash identifier: UZWFYWsHZ00J5k9O1Y8SCl4YJ1UC5hj7N1CaUiE0yAM=
Subject key identifier: 39:1D:16:92:CA:F6:1D:43:A3:D9:38:2E:56:05:2A:31:4C:35:07:AE
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 071A878A
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/OR0Wksr2HUOj2TguVgUqMUw1B64.roa
Signing time: Sat 01 Jan 2022 08:53:09 +0000
ROA not before: Sat 01 Jan 2022 08:53:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 45.158.60.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119179146 (0x71a878a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: Jan 1 08:53:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=391d1692caf61d43a3d9382e56052a314c3507ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:19:92:70:13:76:a8:38:e8:28:bc:ae:dd:4e:
d7:a6:a2:11:d5:7a:15:25:94:ad:71:73:27:18:5e:
e2:b2:81:90:2d:f0:6d:c1:d1:2d:97:9a:be:09:36:
1d:f2:02:ec:f5:24:fb:13:75:f4:1d:69:84:f7:0b:
77:80:26:74:88:84:52:97:67:45:98:1d:64:93:ac:
91:e8:54:4c:d6:a3:7b:83:d1:6d:c3:9c:57:57:e9:
47:2f:96:fe:e0:19:ba:fd:09:a2:27:c0:7c:b6:fe:
8f:ae:fb:a6:8a:6e:c1:b1:6c:2f:fe:fc:d1:ab:0d:
99:6f:1e:b6:27:e2:72:5e:c1:f8:fa:ab:68:f3:ec:
79:1a:ca:7b:e7:dd:ef:c6:51:9f:2b:80:45:40:ce:
64:ee:96:3d:3c:0e:f8:97:d5:6e:33:cf:eb:ee:df:
ef:71:55:b3:c4:22:30:c8:18:fe:6e:fc:78:d7:ce:
14:84:2e:f5:cf:4e:80:b6:53:21:7f:e8:59:38:23:
30:10:f9:77:51:75:3a:00:b9:a0:5d:a1:24:52:c3:
a5:52:87:5b:59:2f:47:11:c8:36:eb:b5:bc:69:65:
48:8e:c7:73:b2:66:71:d7:a9:10:3c:1c:bf:2d:b4:
c2:b5:6f:84:f9:2d:a8:ff:a9:86:4d:bc:ed:06:e8:
2e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:1D:16:92:CA:F6:1D:43:A3:D9:38:2E:56:05:2A:31:4C:35:07:AE
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/OR0Wksr2HUOj2TguVgUqMUw1B64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.60.0/22
Signature Algorithm: sha256WithRSAEncryption
79:a8:58:a2:4b:b3:e4:b2:a7:8c:b5:eb:f3:9c:26:07:67:eb:
f5:eb:47:f8:97:2c:f8:bf:70:0b:46:27:35:ad:11:20:93:98:
46:3c:6f:7d:2e:5a:a3:14:86:4b:6a:4b:5a:69:bb:5f:e3:d1:
b4:b4:91:e9:45:3a:80:1d:2b:85:19:a5:a9:7f:65:cd:6a:b8:
6d:91:84:a7:0e:7e:08:87:b5:31:00:e6:9e:f0:1a:6b:1a:24:
4e:0a:e9:9b:92:59:a4:c7:c6:04:24:d0:b5:91:e1:80:67:4a:
c4:63:fc:97:50:cf:ad:17:a2:4e:c1:fa:1e:b6:77:6e:47:b0:
c8:cd:cc:3d:5e:4f:49:ef:08:9f:93:5e:80:3d:cf:81:99:00:
01:f1:fe:1a:a3:bc:8b:23:30:97:47:22:0b:28:f3:f7:b2:ae:
da:c1:5a:74:d0:29:64:f2:9b:0b:71:45:05:2a:31:ce:d4:b5:
a4:62:e1:e1:61:76:0f:87:3d:60:45:96:dc:bf:3c:ed:ae:b5:
96:c1:40:c3:7e:4f:af:50:d6:d2:28:11:41:32:36:bd:fa:2b:
e5:4f:98:d1:3a:2e:b1:68:b7:03:05:f3:54:ae:7d:aa:3f:bc:
b7:f8:58:9a:2b:04:10:35:44:e1:81:41:a3:72:b8:51:ac:bc:
a4:2c:f9:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:56 2024 by rpki-client on console-ams.rpki-client.org