Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/owxoYFGxARmLtSMLPq4ZXYEYezg.roa
File: owxoYFGxARmLtSMLPq4ZXYEYezg.roa (raw, json)
Hash identifier: Et2FdZfV1agCBmmvujBO3dlIydiyajPX1f2qjKftl4c=
Subject key identifier: A3:0C:68:60:51:B1:01:19:8B:B5:23:0B:3E:AE:19:5D:81:18:7B:38
Certificate issuer: /CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Certificate serial: 01565B
Authority key identifier: 4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/owxoYFGxARmLtSMLPq4ZXYEYezg.roa
Signing time: Thu 24 Feb 2022 10:55:42 +0000
ROA not before: Thu 24 Feb 2022 10:55:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201547
IP address blocks: 5.45.44.0/22 maxlen: 22
5.45.45.0/24 maxlen: 24
5.45.46.0/24 maxlen: 24
2a0d:1740::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87643 (0x1565b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bbd04619a2e168ac957522edff022f90bc0a4df
Validity
Not Before: Feb 24 10:55:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a30c686051b101198bb5230b3eae195d81187b38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9c:3a:f6:2d:be:67:56:18:77:db:2e:05:f3:
19:7f:22:d7:ac:67:a9:4a:06:01:f2:f1:07:3b:60:
9c:e7:52:4f:f4:4b:c5:ee:9d:65:a3:83:12:06:f0:
c3:bf:2e:ff:a5:f7:9e:da:8b:ba:36:31:80:44:6a:
2f:35:56:21:35:e5:30:98:4c:38:51:23:c2:0f:f9:
25:a5:aa:30:fe:6b:ff:55:61:7e:b4:9a:ae:61:66:
86:5d:6d:9c:b5:89:12:f1:5b:ec:e3:58:34:8d:ac:
85:e2:8f:ac:69:16:44:8f:a6:54:f3:e7:43:41:13:
2b:b4:57:46:67:da:b4:58:e8:8e:e1:04:5b:8a:9d:
a8:28:fe:80:b2:d1:e8:ad:80:3b:e5:01:93:6b:b1:
37:21:be:5c:e5:77:49:81:37:c6:05:8f:32:88:7d:
43:1a:c5:0e:a6:ec:9d:c8:87:26:49:d3:d1:d0:1e:
2a:8d:62:69:ec:e0:32:50:4a:7f:7c:4a:52:11:b0:
0a:fa:e2:f6:68:e6:61:b2:f5:18:dd:72:1d:2f:8e:
ab:b5:39:88:ba:a8:41:99:38:69:36:5e:2a:fb:d7:
cb:86:71:fc:ce:c2:84:e0:d2:90:7f:bc:de:0f:0b:
bd:43:5b:52:07:9a:27:79:16:ee:ab:8d:3b:3a:b7:
85:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0C:68:60:51:B1:01:19:8B:B5:23:0B:3E:AE:19:5D:81:18:7B:38
X509v3 Authority Key Identifier:
keyid:4B:BD:04:61:9A:2E:16:8A:C9:57:52:2E:DF:F0:22:F9:0B:C0:A4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S70EYZouForJV1Iu3_Ai-QvApN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/owxoYFGxARmLtSMLPq4ZXYEYezg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/fd92cc-4ff4-4957-8898-2faf5383b505/1/S70EYZouForJV1Iu3_Ai-QvApN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.44.0/22
IPv6:
2a0d:1740::/32
Signature Algorithm: sha256WithRSAEncryption
8b:99:27:92:e7:87:80:c2:7e:1e:f1:ae:77:e3:fa:46:93:ab:
3d:e8:24:e2:85:f7:33:75:c1:1b:a3:9e:00:22:0e:39:c8:7e:
0c:2c:43:b3:20:5a:5b:59:e1:cf:65:e5:f7:0e:22:53:08:4b:
c9:cf:8b:ca:cf:eb:12:90:81:63:02:60:39:4b:cf:e6:cf:23:
63:66:75:f2:0f:d9:91:a5:54:7f:1f:42:43:09:41:51:b9:75:
c4:08:c2:53:5a:da:66:bd:f0:48:ef:0f:85:a4:6a:b3:39:ba:
c0:f3:1e:5b:6a:55:15:ee:08:37:0d:7c:cf:06:fe:80:b9:d8:
ab:89:8d:2f:7e:be:7b:c1:96:d0:59:03:5f:2e:90:81:6f:e2:
03:75:96:7c:02:e1:aa:c7:c6:fd:ce:30:66:30:03:8d:ca:5e:
df:26:60:d5:93:f6:ae:73:44:a2:a7:c2:d2:41:b8:44:cd:2a:
5c:87:6d:d4:d6:be:32:f1:5e:28:cc:0f:19:71:d5:bf:d9:1d:
12:ea:59:fd:17:84:f9:d7:29:a2:3a:5b:4a:b8:36:95:48:6c:
85:7b:a5:b4:d2:e8:88:a3:92:9e:f8:30:42:92:79:ad:82:25:
56:0b:4a:e2:b9:8a:fb:83:54:19:72:61:55:54:13:04:7b:f9:
72:b0:44:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:55 2024 by rpki-client on console-ams.rpki-client.org