Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/ozhcYYylrZFYWZBcpn6e5reQrDs.roa
File: ozhcYYylrZFYWZBcpn6e5reQrDs.roa (raw, json)
Hash identifier: MoQZSTTizCIYfDDht7vRLMPXAf14c6X0nE44krkBkCo=
Subject key identifier: A3:38:5C:61:8C:A5:AD:91:58:59:90:5C:A6:7E:9E:E6:B7:90:AC:3B
Certificate issuer: /CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Certificate serial: 01836A685DE26EBA589A29036AFC2B578A3A
Authority key identifier: 48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/ozhcYYylrZFYWZBcpn6e5reQrDs.roa
Signing time: Fri 23 Sep 2022 12:52:48 +0000
ROA not before: Fri 23 Sep 2022 12:52:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200845
IP address blocks: 45.150.12.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:6a:68:5d:e2:6e:ba:58:9a:29:03:6a:fc:2b:57:8a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48395eb4c0ee2daa5392cd99fc45efbc4a754e90
Validity
Not Before: Sep 23 12:52:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3385c618ca5ad915859905ca67e9ee6b790ac3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:94:ba:08:ce:e1:96:16:62:d7:35:93:42:d8:
44:cf:88:8c:e6:65:21:6a:1f:03:63:15:3c:3e:d2:
44:39:37:07:24:5b:11:4d:d3:52:a2:63:e6:15:04:
c3:b1:3b:e5:68:c1:c3:b2:4d:db:7d:16:fe:2f:24:
fc:0f:0f:f0:24:cc:be:6c:0c:6a:f6:54:f9:70:97:
b9:a7:bc:7a:0f:d8:48:8b:cc:0a:c0:66:53:99:6e:
a5:9e:50:eb:21:b0:c7:fa:3e:40:98:fa:22:12:15:
b6:33:17:6d:70:4f:b5:55:f5:1f:97:32:42:13:76:
a5:1d:82:28:5e:64:a3:b2:cf:0e:6b:e9:64:f2:c5:
ec:eb:6d:df:8d:55:f4:cb:44:d3:2d:6d:9a:8a:ef:
13:e8:36:75:50:9f:81:59:89:cf:18:d6:1a:b7:13:
83:af:05:ce:25:c1:8e:53:bb:61:02:89:12:11:e4:
03:50:1b:35:0b:cc:cb:29:07:89:7e:47:ac:f2:71:
92:82:d1:c4:09:e4:36:ce:f5:98:d7:14:cc:e2:6e:
99:f2:cd:2c:b9:9a:f8:9f:3e:9c:39:0f:d8:30:d2:
5e:5d:4c:e3:9e:a1:9c:8d:53:ac:07:e0:de:48:ab:
04:81:1d:06:ae:6d:c7:ca:26:a2:52:24:48:57:b5:
84:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:38:5C:61:8C:A5:AD:91:58:59:90:5C:A6:7E:9E:E6:B7:90:AC:3B
X509v3 Authority Key Identifier:
keyid:48:39:5E:B4:C0:EE:2D:AA:53:92:CD:99:FC:45:EF:BC:4A:75:4E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDletMDuLapTks2Z_EXvvEp1TpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/ozhcYYylrZFYWZBcpn6e5reQrDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7a9961-213e-4cc4-8f96-7f579ba098be/1/SDletMDuLapTks2Z_EXvvEp1TpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.12.0/22
Signature Algorithm: sha256WithRSAEncryption
22:65:72:41:ad:8f:62:00:79:7f:51:ef:ba:00:57:42:43:63:
65:63:2b:7a:5b:c7:e1:cd:52:6d:74:44:f8:8b:e2:76:13:f1:
36:2f:50:c8:10:46:ed:6a:d2:e6:65:50:b4:4b:b6:db:aa:8b:
bc:58:b5:90:c3:28:1c:94:73:68:52:0c:5e:27:f9:38:9c:18:
8d:91:ac:25:33:cb:25:6b:13:39:b1:bb:34:de:c2:35:9e:93:
d2:1c:93:a5:8c:3c:81:2e:c1:c6:5b:64:33:ca:9b:a0:a3:1d:
64:24:d0:78:ab:0c:0c:65:8d:ed:fe:fc:cf:05:eb:96:10:7f:
df:1f:49:15:1b:da:63:51:af:6e:a5:09:98:0b:0b:d5:c5:b8:
67:a0:c5:95:c0:06:15:8e:e8:2c:0b:25:ef:c7:d4:76:89:78:
55:7c:33:19:05:ec:9b:27:1f:5c:64:7b:86:2e:50:7c:42:9d:
af:3f:e1:3f:05:b3:d7:a2:a0:2d:de:59:ab:e9:77:b0:12:2d:
10:2e:6e:14:0e:30:8a:82:24:0e:41:15:ad:1f:b9:e6:b4:b2:
d7:f3:e9:b3:c8:6c:6b:d0:17:8f:be:94:d5:ec:b7:91:be:88:
1c:02:77:09:23:26:45:c2:7c:c9:2d:81:a8:d2:9c:f8:a4:4f:
01:5d:ca:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYNqaF3ibrpYmikDavwrV4o6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4Mzk1ZWI0YzBlZTJkYWE1MzkyY2Q5OWZjNDVlZmJjNGE3
NTRlOTAwHhcNMjIwOTIzMTI1MjQ4WhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMzM4NWM2MThjYTVhZDkxNTg1OTkwNWNhNjdlOWVlNmI3OTBhYzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJS6CM7hlhZi1zWTQthEz4iM5mUh
ah8DYxU8PtJEOTcHJFsRTdNSomPmFQTDsTvlaMHDsk3bfRb+LyT8Dw/wJMy+bAxq
9lT5cJe5p7x6D9hIi8wKwGZTmW6lnlDrIbDH+j5AmPoiEhW2MxdtcE+1VfUflzJC
E3alHYIoXmSjss8Oa+lk8sXs623fjVX0y0TTLW2aiu8T6DZ1UJ+BWYnPGNYatxOD
rwXOJcGOU7thAokSEeQDUBs1C8zLKQeJfkes8nGSgtHECeQ2zvWY1xTM4m6Z8s0s
uZr4nz6cOQ/YMNJeXUzjnqGcjVOsB+DeSKsEgR0Grm3HyiaiUiRIV7WEQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKM4XGGMpa2RWFmQXKZ+nua3kKw7MB8GA1UdIwQY
MBaAFEg5XrTA7i2qU5LNmfxF77xKdU6QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0RsZXRNRHVMYXBUa3MyWl9FWHZ2RXAxVHBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy83YTk5NjEtMjEzZS00Y2M0LThmOTYt
N2Y1NzliYTA5OGJlLzEvb3poY1lZeWxyWkZZV1pCY3BuNmU1cmVRckRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy83YTk5NjEtMjEzZS00Y2M0LThmOTYtN2Y1NzliYTA5OGJl
LzEvU0RsZXRNRHVMYXBUa3MyWl9FWHZ2RXAxVHBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZYMMA0G
CSqGSIb3DQEBCwUAA4IBAQAiZXJBrY9iAHl/Ue+6AFdCQ2NlYyt6W8fhzVJtdET4
i+J2E/E2L1DIEEbtatLmZVC0S7bbqou8WLWQwygclHNoUgxeJ/k4nBiNkawlM8sl
axM5sbs03sI1npPSHJOljDyBLsHGW2Qzypugox1kJNB4qwwMZY3t/vzPBeuWEH/f
H0kVG9pjUa9upQmYCwvVxbhnoMWVwAYVjugsCyXvx9R2iXhVfDMZBeybJx9cZHuG
LlB8Qp2vP+E/BbPXoqAt3lmr6XewEi0QLm4UDjCKgiQOQRWtH7nmtLLX8+mzyGxr
0BePvpTV7LeRvogcAncJIyZFwnzJLYGo0pz4pE8BXcpc
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:51 2024 by rpki-client on console-fra.rpki-client.org