Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/2Ocwsj3sfW3oL6D7WLSdrOOff2Q.roa
File: 2Ocwsj3sfW3oL6D7WLSdrOOff2Q.roa (raw, json)
Hash identifier: 2sIoM0579Bzl7cl51uUAXAc+vg10MsI1BGQCuSr0gsU=
Subject key identifier: D8:E7:30:B2:3D:EC:7D:6D:E8:2F:A0:FB:58:B4:9D:AC:E3:9F:7F:64
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018289A70A364E65BDD8F7BBC373FAFF70A0
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/2Ocwsj3sfW3oL6D7WLSdrOOff2Q.roa
Signing time: Wed 10 Aug 2022 21:26:41 +0000
ROA not before: Wed 10 Aug 2022 21:26:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 45.136.7.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:89:a7:0a:36:4e:65:bd:d8:f7:bb:c3:73:fa:ff:70:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Aug 10 21:26:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8e730b23dec7d6de82fa0fb58b49dace39f7f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f5:56:b6:a5:6e:73:1c:40:8e:c5:27:d8:8d:
7b:39:2a:cb:fa:00:94:8e:5f:d6:f1:58:59:27:4e:
f3:31:81:18:bb:a5:4c:ac:d0:29:55:fc:74:f1:ae:
e9:5b:9d:6d:32:bb:4e:a1:64:74:6e:7c:f7:9e:d5:
20:7b:0b:c4:1d:44:11:58:b3:43:10:40:7e:5a:9f:
8a:74:33:da:b9:a1:94:46:5d:dc:3c:f4:13:5f:ce:
0f:30:9a:2b:27:0f:3f:31:eb:67:e0:0f:4c:b0:50:
e3:ac:62:58:7d:fb:6f:c2:17:4c:dc:a3:d5:82:a2:
06:7e:5b:6a:09:23:fe:7c:8d:e2:ad:a7:aa:ba:7e:
74:1b:fb:5b:07:3e:f7:bd:95:7a:a4:87:4f:20:41:
45:95:e4:01:c9:d0:2a:a4:dd:da:26:34:09:db:8e:
a9:97:4b:ea:89:0a:cf:5d:52:98:72:6f:c2:8a:f9:
99:e8:fa:61:17:bb:06:2a:cb:28:75:32:b3:24:ab:
8c:f6:ee:5d:0c:96:01:8c:c7:3c:55:2b:e8:11:9e:
3c:24:44:3f:c9:ef:41:3d:69:19:d1:1d:3f:5b:4e:
0f:b0:4e:1b:3b:9e:3a:dd:e3:36:d3:c4:f9:a6:37:
81:e0:78:39:7f:cd:b3:10:24:05:1b:07:d0:37:31:
c3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E7:30:B2:3D:EC:7D:6D:E8:2F:A0:FB:58:B4:9D:AC:E3:9F:7F:64
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/2Ocwsj3sfW3oL6D7WLSdrOOff2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.7.0/24
Signature Algorithm: sha256WithRSAEncryption
93:ea:5a:33:2d:9a:f0:a5:f6:8b:9a:20:e3:df:6b:98:a7:9d:
e3:c3:7f:d8:1b:97:5f:13:3c:a0:76:ff:d9:97:f8:4b:f5:8a:
5b:be:90:f3:be:ce:30:e1:20:88:28:65:ac:dc:2d:73:46:71:
6e:e0:5c:a0:b3:7e:ff:60:44:33:d5:26:d6:9a:87:f2:a9:8d:
f1:2f:e8:8e:00:cc:ac:fd:fa:53:91:3e:2b:70:19:77:8d:56:
c1:8c:69:d1:c7:92:fb:65:1b:a8:33:50:94:6c:88:a1:98:5e:
57:dd:81:27:96:95:41:d3:ea:1c:db:d5:e9:5f:49:c9:eb:f4:
e0:3d:76:57:1b:dd:a3:50:80:46:2e:b4:30:b5:f6:2b:6a:b5:
0b:8d:5b:b8:d1:0e:a6:8c:dd:77:db:0a:d8:a7:5b:28:2d:a3:
1c:15:18:fe:c6:4e:8a:aa:7e:8f:7d:2a:a2:0a:f6:3d:98:9a:
2a:b0:80:cd:25:2b:70:b7:92:4f:b2:f6:1d:b4:71:f9:a3:e1:
25:f5:4b:6b:31:0c:ad:bc:54:9b:bf:2e:86:58:8a:fa:ad:6b:
87:4d:5a:2c:2c:76:12:44:6a:e7:f7:75:ac:bc:9b:80:00:ed:
8d:1b:6d:0e:51:d8:c0:79:52:fc:4f:0c:c2:42:2c:93:26:60:
a6:30:ee:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:55 2025 by rpki-client