Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/8nCoSLZckLjuzov7T5A7bpU3uok.roa
File: 8nCoSLZckLjuzov7T5A7bpU3uok.roa (raw, json)
Hash identifier: e5+GTCglyKS65+sib9ccwK598rqWjPiFOm0B0r8mUr8=
Subject key identifier: F2:70:A8:48:B6:5C:90:B8:EE:CE:8B:FB:4F:90:3B:6E:95:37:BA:89
Certificate issuer: /CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Certificate serial: 0AB39C60
Authority key identifier: 0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/8nCoSLZckLjuzov7T5A7bpU3uok.roa
Signing time: Sat 01 Jan 2022 09:06:18 +0000
ROA not before: Sat 01 Jan 2022 09:06:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58075
IP address blocks: 45.150.244.0/22 maxlen: 22
185.248.236.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 179543136 (0xab39c60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c323eec94edd0e748616150e00d06a2d6690ff2
Validity
Not Before: Jan 1 09:06:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f270a848b65c90b8eece8bfb4f903b6e9537ba89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9f:7f:0c:77:12:c1:da:01:bd:a8:67:96:42:
a3:2b:f1:b1:7b:b6:86:c0:2b:6c:a9:be:60:a0:ae:
45:8a:3d:d5:d3:42:7d:89:1a:bd:54:92:f5:b2:fd:
6c:93:1d:67:1a:90:fa:d2:27:c6:63:2c:35:9d:bc:
da:79:02:bb:a4:67:a5:46:4c:fd:bb:87:76:51:70:
0b:7a:02:69:11:54:8e:a3:2e:7f:24:e6:6d:4a:4a:
36:ec:88:d4:11:1a:dd:09:0d:bd:1e:af:0a:54:c1:
85:b6:a7:f8:cf:69:d0:66:4f:bd:57:e5:1f:b5:24:
34:4f:45:6e:46:3d:1d:87:0e:35:da:f3:ca:35:90:
ca:2a:35:8a:2d:fc:cb:8a:da:a9:c4:1f:71:e3:96:
4c:13:9e:e2:af:38:e9:c0:b0:bd:98:3b:32:e5:0e:
39:07:88:a2:5c:f1:c7:c9:3a:3f:28:66:c7:8b:d3:
89:2f:f5:f3:54:1d:d5:05:13:b2:05:f2:e2:68:7f:
95:79:3b:06:f6:a6:ed:9d:1f:a1:2c:e6:57:6c:57:
77:b4:cc:da:47:a3:89:16:4d:7b:fa:2c:a2:fc:c9:
d1:b4:18:5f:79:7c:41:01:a4:fe:51:98:b7:bd:4c:
69:34:7a:b1:84:16:8b:69:2d:56:2c:76:1d:54:ca:
a9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:70:A8:48:B6:5C:90:B8:EE:CE:8B:FB:4F:90:3B:6E:95:37:BA:89
X509v3 Authority Key Identifier:
keyid:0C:32:3E:EC:94:ED:D0:E7:48:61:61:50:E0:0D:06:A2:D6:69:0F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDI-7JTt0OdIYWFQ4A0GotZpD_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/8nCoSLZckLjuzov7T5A7bpU3uok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/fb7a42-1001-480d-8a6b-10dd952e2412/1/DDI-7JTt0OdIYWFQ4A0GotZpD_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.244.0/22
185.248.236.0/22
Signature Algorithm: sha256WithRSAEncryption
05:b9:2e:d6:8e:89:58:03:9a:42:fb:c7:b1:50:74:24:d1:02:
79:b8:95:11:2b:4e:ce:6e:f6:af:74:45:ee:33:ef:b5:0a:ef:
b3:b4:16:40:04:cd:f9:44:49:f7:eb:5d:47:0f:29:e5:b7:bb:
6f:f5:68:69:a2:e7:44:e8:4f:db:d2:da:46:45:cd:39:9a:17:
22:26:06:bc:8d:05:94:6f:73:8f:c4:40:03:be:7f:87:71:8e:
3d:77:67:c0:ce:17:fe:81:e9:6f:15:3b:7a:2c:42:40:e9:cc:
b1:04:f1:50:b9:80:b0:55:34:cd:26:c5:f5:7a:c5:85:78:d3:
08:f0:3e:6f:21:b7:a6:9b:6e:eb:78:50:6d:f9:9a:e9:92:e2:
20:69:60:61:c8:dc:a1:c5:bd:59:c6:fa:e6:c7:09:1f:c2:61:
17:ce:e2:74:e4:71:96:3f:8c:87:32:d3:c2:6e:65:c1:74:fc:
fc:6f:03:9a:a8:b4:e3:01:c9:d3:c8:44:a1:b3:83:41:3d:ed:
74:a5:94:e3:56:60:c2:9a:d3:79:8f:eb:ff:7b:49:52:4b:2f:
fa:00:86:86:d1:aa:36:1c:02:a0:4f:df:4d:99:df:f2:e1:db:
5c:bd:ca:8e:5b:80:d7:4d:23:ea:27:2b:a1:f6:11:70:3e:fb:
de:26:4a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:36 2023 by rpki-client on console-ams.rpki-client.org