Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/18O8BVOLl5izujXP9Q0aYidYjyM.roa
File: 18O8BVOLl5izujXP9Q0aYidYjyM.roa (raw, json)
Hash identifier: Rg6Q7jc/B9cRwOfG2xeAKKxnJFu/OnfdtBOWjUjTH60=
Subject key identifier: D7:C3:BC:05:53:8B:97:98:B3:BA:35:CF:F5:0D:1A:62:27:58:8F:23
Certificate issuer: /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial: 02674B5A
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/18O8BVOLl5izujXP9Q0aYidYjyM.roa
Signing time: Sat 01 Jan 2022 15:03:51 +0000
ROA not before: Sat 01 Jan 2022 15:03:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 23959
IP address blocks: 45.149.4.0/24 maxlen: 24
45.149.5.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40323930 (0x2674b5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Validity
Not Before: Jan 1 15:03:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7c3bc05538b9798b3ba35cff50d1a6227588f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:78:cc:11:bc:1d:a2:15:00:e1:ac:60:6f:50:
bb:59:98:a0:ff:f9:86:48:b8:3a:e1:29:5c:5d:22:
93:10:77:cc:a0:0b:e4:ce:2d:56:a2:ee:d2:4b:d1:
5e:8b:f5:20:bf:17:4b:7d:e7:0d:df:65:4d:d7:51:
db:83:4b:63:d4:ef:be:4c:75:40:80:99:f9:19:6f:
f9:df:bc:af:39:21:45:25:b9:e3:2c:8a:8b:4f:1a:
d7:cc:43:34:5d:ab:2e:9c:83:1c:19:0e:0d:81:2d:
6e:7f:6d:41:b6:a9:e0:c1:43:44:cb:57:6b:94:71:
b4:00:c7:e7:ab:88:eb:84:f4:3c:35:6a:8b:89:cf:
a8:24:a7:34:91:ba:18:6c:39:55:49:1b:2c:c5:72:
fa:31:f8:eb:47:c0:7e:cc:a9:bf:c9:b1:f1:7e:85:
19:3b:db:fe:65:56:a9:eb:8d:9c:4b:7a:05:6b:b8:
a4:fd:3d:8b:b9:f5:6a:cf:3e:18:5b:86:0f:41:a1:
c7:fc:20:83:a8:c2:69:a1:f5:21:60:c8:2b:47:04:
7f:68:96:41:0a:c6:94:29:9f:85:6c:84:53:03:96:
7b:a8:1c:bb:46:f3:bc:5f:5d:e8:60:83:40:13:aa:
ef:b3:fe:b5:74:2b:b3:06:04:20:10:4b:82:99:cb:
bd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C3:BC:05:53:8B:97:98:B3:BA:35:CF:F5:0D:1A:62:27:58:8F:23
X509v3 Authority Key Identifier:
keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/18O8BVOLl5izujXP9Q0aYidYjyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.4.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:96:55:6e:d6:3e:31:a4:5f:fa:68:35:3b:8e:86:89:a0:de:
bc:16:86:a0:5d:40:34:83:f0:62:1d:75:9e:de:e0:9e:73:32:
25:12:f9:64:02:e7:75:18:52:c3:c3:d8:10:71:8a:fa:d1:ff:
ab:70:f5:73:60:39:38:5e:95:1d:9f:7d:fa:68:52:46:76:e1:
51:13:e6:b7:83:e0:87:36:f9:7b:e7:31:b0:66:f3:8a:1d:44:
b9:0f:83:e5:22:0b:5a:00:5c:97:03:5f:17:dd:62:fc:a2:f7:
3d:8f:ad:a5:54:cd:98:76:c5:75:83:55:6e:a7:3a:78:85:f1:
dc:57:a1:cb:f8:8e:42:5c:40:52:0a:3e:b5:58:bc:a6:b3:9a:
d9:23:fe:9a:a6:04:dc:a9:07:0f:6e:6d:4c:eb:c3:82:9c:53:
4e:92:d3:b4:e6:63:00:62:30:ff:9d:3f:f3:87:a9:24:f9:38:
c7:81:08:73:0f:96:22:db:5d:5b:cb:7c:de:31:2f:12:d1:ff:
91:a4:9d:fa:cc:43:13:6b:f8:a1:72:f4:d3:2e:ff:b1:4e:3e:
de:9b:3c:5e:85:fd:69:7c:09:70:d9:28:31:2a:37:f0:08:0d:
76:0a:3f:c6:91:0b:73:9d:e5:60:13:65:17:1c:51:f1:ba:64:
7f:66:6e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:04 2024 by rpki-client on console-fra.rpki-client.org