Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ObZQPBmMMx2ZXokUpWkNijEVIW4.roa
File: ObZQPBmMMx2ZXokUpWkNijEVIW4.roa (raw, json)
Hash identifier: ywquoDqShk4/EaRWlLlBs62E23sgW0dK65rw6Kohnp0=
Subject key identifier: 39:B6:50:3C:19:8C:33:1D:99:5E:89:14:A5:69:0D:8A:31:15:21:6E
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01850CF88DA8AECD1DC1E653C919960DA1F2
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ObZQPBmMMx2ZXokUpWkNijEVIW4.roa
Signing time: Tue 13 Dec 2022 19:31:33 +0000
ROA not before: Tue 13 Dec 2022 19:31:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207459
IP address blocks: 45.90.17.0/24 maxlen: 24
193.58.146.0/24 maxlen: 24
194.5.64.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0c:f8:8d:a8:ae:cd:1d:c1:e6:53:c9:19:96:0d:a1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 13 19:31:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39b6503c198c331d995e8914a5690d8a3115216e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c5:df:55:3e:33:bb:50:3f:23:16:4c:33:98:
21:c0:b6:e4:55:94:7b:09:46:d7:b2:93:69:e2:de:
fb:6d:f2:7b:62:d8:ee:ef:b0:ae:06:28:24:53:f4:
b7:af:68:10:26:e7:e1:14:85:c1:1d:ea:be:92:12:
46:95:9a:30:48:10:57:5e:78:5b:8e:98:1a:8f:62:
06:80:6d:32:6f:88:44:cf:14:58:a8:2d:d3:3f:d8:
51:47:2b:90:ed:a1:a2:f6:d0:1f:b1:a7:a8:91:c3:
48:94:16:56:62:33:58:64:8f:4b:83:f7:d0:74:b4:
5e:6f:d0:24:d2:6e:1a:bb:3e:9e:a6:f0:ce:2c:aa:
07:b5:bd:15:ba:26:ae:98:a4:a9:aa:63:d5:e7:28:
6c:0d:43:ad:c3:8d:c9:11:76:7a:43:7f:97:74:2d:
88:a1:21:9e:15:ed:12:d9:c0:4e:d4:d7:58:63:a1:
14:b2:9f:a1:f1:f2:63:8d:6f:4b:2c:d8:62:3c:b1:
34:1d:c0:ae:4b:6f:ff:bd:25:dd:2b:58:db:21:a2:
dd:e4:8f:f5:d7:39:9e:54:67:c1:fe:19:d1:46:ff:
64:fb:06:8a:65:23:ce:ad:a6:ce:8b:bd:fc:0b:d5:
8b:3b:f8:ce:68:68:7c:55:2f:bc:9d:a4:b1:c3:37:
19:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B6:50:3C:19:8C:33:1D:99:5E:89:14:A5:69:0D:8A:31:15:21:6E
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/ObZQPBmMMx2ZXokUpWkNijEVIW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.17.0/24
193.58.146.0/24
194.5.64.0/24
Signature Algorithm: sha256WithRSAEncryption
82:e9:d4:c4:be:9e:8e:e3:7e:ae:c5:11:90:12:8a:49:00:67:
a8:fa:c1:5a:9b:6d:8f:f0:12:11:80:53:a7:31:0f:10:55:9c:
ed:92:80:20:5d:51:ed:a4:e2:28:4e:bf:34:da:a4:54:b9:53:
e1:a8:b9:a0:b5:29:d4:39:08:dc:bd:44:67:9a:eb:d7:ff:53:
7b:08:97:2b:51:a4:d3:ed:e7:1d:90:5c:05:16:bf:38:4f:b5:
48:65:46:cf:55:43:b8:e0:ba:f5:b0:bc:ea:17:98:d8:7c:38:
7d:ec:c8:b9:b6:48:4f:16:bb:66:8f:f8:f0:c8:16:d1:36:4b:
57:30:41:b9:fd:0a:11:16:1a:9f:f7:22:3c:c2:1f:9a:fb:e9:
6a:30:d8:2e:92:b7:9d:5f:73:b5:66:bf:7e:6c:7e:39:f3:12:
c8:c3:97:8d:8f:55:6c:11:65:b3:6a:e1:95:81:7e:ec:33:68:
ae:30:1d:eb:0a:fe:45:4c:84:be:75:5a:f0:12:52:5e:af:d5:
c4:d8:4b:30:62:39:d0:41:eb:0a:d7:8c:bc:c0:64:9d:46:f4:
8e:a8:12:94:86:e5:95:81:d8:00:94:27:f0:1a:ff:2f:a2:57:
65:76:c8:c0:76:70:40:f7:d4:46:3a:98:cb:d0:05:a8:38:c1:
0b:83:34:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:41 2024 by rpki-client on console-fra.rpki-client.org