Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/O4ofQpuWnLx9U6c2LQ2DcgpOwNk.roa
File: O4ofQpuWnLx9U6c2LQ2DcgpOwNk.roa (raw, json)
Hash identifier: v3UTZBc2PGgxfk0ZdD4/u7khI0uFR3uG5V+sAUv2Lt4=
Subject key identifier: 3B:8A:1F:42:9B:96:9C:BC:7D:53:A7:36:2D:0D:83:72:0A:4E:C0:D9
Certificate issuer: /CN=ded7239db81d61f98d586383ccc125d66106cb30
Certificate serial: 070EF912
Authority key identifier: DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/O4ofQpuWnLx9U6c2LQ2DcgpOwNk.roa
Signing time: Sat 01 Jan 2022 10:01:39 +0000
ROA not before: Sat 01 Jan 2022 10:01:39 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51827
IP address blocks: 45.151.243.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118421778 (0x70ef912)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ded7239db81d61f98d586383ccc125d66106cb30
Validity
Not Before: Jan 1 10:01:39 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3b8a1f429b969cbc7d53a7362d0d83720a4ec0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:93:54:7e:e4:4d:5e:1e:7f:b4:20:13:08:7e:
a4:df:2f:6a:75:31:de:a0:5c:90:ad:5f:e2:62:bc:
5c:1f:09:ed:c1:09:1e:61:1c:e5:50:ab:97:ec:74:
7e:f5:23:ef:a5:cc:f6:41:e0:6b:6d:89:a2:60:9d:
56:6e:af:34:5d:96:1d:f0:7b:4c:bf:da:de:57:7c:
c3:28:b0:67:0e:7b:8b:ed:41:e9:b4:d9:e6:40:17:
45:16:92:56:ef:3e:99:e0:77:f9:2d:46:6a:6e:8d:
92:a3:17:b7:64:e1:c0:0e:08:b7:94:db:ae:2d:93:
84:99:f8:37:b2:9f:fa:de:e7:29:44:6c:f9:3a:19:
b7:01:8f:9d:5f:bb:d5:33:2f:f6:6d:d3:48:63:11:
bb:a6:4c:74:e1:68:f6:7b:06:fe:65:c6:42:42:bd:
14:48:d5:e9:43:03:d4:f0:87:c0:6f:e1:00:0f:eb:
16:6c:74:ce:2d:2c:43:08:72:21:e5:d9:95:10:62:
0f:e4:ca:15:29:07:67:61:8a:10:f9:54:8d:08:91:
49:ab:e5:18:11:2a:a8:8e:00:e6:b1:9d:8b:52:86:
87:bd:5b:32:3f:68:45:ec:f7:a1:d8:12:9b:73:59:
03:f7:7e:e0:b0:f9:77:42:27:9a:14:42:1c:b2:d2:
bc:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8A:1F:42:9B:96:9C:BC:7D:53:A7:36:2D:0D:83:72:0A:4E:C0:D9
X509v3 Authority Key Identifier:
keyid:DE:D7:23:9D:B8:1D:61:F9:8D:58:63:83:CC:C1:25:D6:61:06:CB:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3tcjnbgdYfmNWGODzMEl1mEGyzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/O4ofQpuWnLx9U6c2LQ2DcgpOwNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/b6c426-76d5-4a82-9b5f-856b65c75c26/1/3tcjnbgdYfmNWGODzMEl1mEGyzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.243.0/24
Signature Algorithm: sha256WithRSAEncryption
10:ac:bb:0b:4b:46:1d:ea:7e:23:0a:7d:8d:27:2b:20:51:7b:
d5:e9:c7:df:ce:1d:82:df:e4:fa:bf:a8:4c:f4:11:28:9c:c4:
8e:90:fe:98:bf:7f:00:11:fd:3b:78:65:75:95:65:76:66:29:
aa:dc:c7:08:49:3d:5b:fb:ef:bf:42:02:b5:79:26:40:25:76:
1f:cd:4f:10:20:61:c5:ab:a0:b0:d1:84:dd:1a:d7:7a:e8:87:
12:1f:ae:49:17:7b:d2:12:58:eb:3e:94:40:9a:69:69:e6:6c:
b8:10:71:03:bd:f3:19:c0:dd:ee:fb:8f:56:0f:a0:a7:37:11:
8a:49:6f:7b:a7:73:09:30:98:bb:23:a0:62:4d:cc:4c:d4:16:
40:4f:91:32:5c:f4:75:60:9b:80:45:21:51:41:63:6e:fa:f3:
2c:df:d4:c2:e7:d7:11:7b:0c:34:de:17:a0:f1:93:35:ee:b9:
3b:83:d0:ac:b7:14:4a:77:99:99:ee:4b:3d:67:21:c6:db:3d:
b3:d3:78:af:60:a0:48:7d:4f:b4:7b:61:20:f0:79:c3:dc:98:
39:bc:cc:70:cf:b4:62:d5:f9:ad:dc:cc:0a:c0:87:fd:7b:50:
30:19:0a:7d:cc:bb:64:4f:0c:f0:07:8f:e8:5f:23:50:92:70:
64:8c:d5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:58 2023 by rpki-client on console-fra.rpki-client.org