Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/87W9dId5Hut3dEpArQnWgZPJXng.roa
File: 87W9dId5Hut3dEpArQnWgZPJXng.roa (raw, json)
Hash identifier: s6yADIXb2jhWyNlx6T8jOTH3Tl8OpGld4AfsAscd3ko=
Subject key identifier: F3:B5:BD:74:87:79:1E:EB:77:74:4A:40:AD:09:D6:81:93:C9:5E:78
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01827313F263BB296340A7CCB460751F3C76
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/87W9dId5Hut3dEpArQnWgZPJXng.roa
Signing time: Sat 06 Aug 2022 12:14:23 +0000
ROA not before: Sat 06 Aug 2022 12:14:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49581
IP address blocks: 45.134.36.0/24 maxlen: 24
185.117.3.0/24 maxlen: 24
45.13.227.0/24 maxlen: 24
45.131.111.0/24 maxlen: 24
45.131.108.0/24 maxlen: 24
5.253.246.0/24 maxlen: 24
92.118.207.0/24 maxlen: 24
45.142.104.0/24 maxlen: 24
45.142.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:73:13:f2:63:bb:29:63:40:a7:cc:b4:60:75:1f:3c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Aug 6 12:14:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3b5bd7487791eeb77744a40ad09d68193c95e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:90:f1:ba:78:65:37:79:25:0b:7b:62:8b:72:
33:ac:75:7e:ee:57:47:50:54:73:ee:9e:70:ea:8d:
e6:d3:58:b5:ce:fd:e8:8f:c1:11:74:f5:d8:a2:34:
34:28:4b:56:4f:ef:ab:2c:08:8a:71:fa:8b:f0:1b:
26:67:0f:14:aa:da:7f:d2:29:18:0c:f4:ba:06:f7:
67:dc:99:d2:ea:a3:27:6c:5b:02:01:78:0b:20:89:
58:c1:0a:ba:fa:31:f0:65:ca:1b:a2:99:79:0c:a0:
36:c6:2d:62:78:7e:15:6b:29:aa:cb:86:32:66:2f:
a6:dd:0b:55:b8:cd:f1:3b:4b:d4:c9:01:ce:06:dc:
a7:39:20:ad:30:74:5b:e6:7f:c4:3b:6b:41:7d:12:
d5:76:30:5f:fa:ac:84:c9:a3:a0:45:6e:7e:db:19:
25:f9:86:34:1d:f9:0e:a8:32:84:58:42:45:47:f8:
45:85:4e:73:57:6b:e0:91:7e:51:71:ab:e1:45:20:
10:e3:f1:b6:69:ed:fb:cd:c9:f5:7c:21:da:f1:a1:
76:c7:91:b1:4a:b0:15:9c:d2:a1:ae:6b:79:97:46:
cd:29:96:2f:f1:10:6b:ad:d2:ae:37:11:b4:5e:34:
f4:97:fe:70:26:16:a0:76:ca:39:6b:22:22:56:57:
06:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B5:BD:74:87:79:1E:EB:77:74:4A:40:AD:09:D6:81:93:C9:5E:78
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/87W9dId5Hut3dEpArQnWgZPJXng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.246.0/24
45.13.227.0/24
45.131.108.0/24
45.131.111.0/24
45.134.36.0/24
45.142.104.0/24
45.142.107.0/24
92.118.207.0/24
185.117.3.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:12:44:df:dc:6a:2a:d5:c1:cc:df:a0:89:44:c0:83:ed:d7:
b8:67:09:a0:ed:6f:43:a6:98:09:2f:8e:53:67:d6:6f:9e:a2:
b2:c0:e4:3e:79:b7:19:99:46:1a:72:7e:e9:2a:71:4c:2e:41:
4d:a9:8d:10:b9:ad:a0:ed:d8:e8:70:e6:94:cc:82:82:03:15:
7c:4a:6a:c8:66:28:d8:da:2f:26:c7:30:55:85:cd:06:14:6d:
f0:b9:f8:2e:e4:75:36:21:6e:b7:21:a7:d8:38:da:e0:13:20:
a6:90:36:bb:25:24:4f:45:f4:83:76:21:48:bb:a3:06:f4:a7:
f8:52:2e:d3:be:3d:6c:67:a3:ba:25:6e:5a:b0:fc:05:0a:2e:
77:9c:3b:46:36:a2:05:3b:57:44:e3:d3:55:e9:32:0a:86:19:
a6:ad:e6:d6:58:eb:89:81:22:92:f8:24:d5:23:31:45:f6:99:
6d:f9:2c:10:3d:dd:4d:b6:11:23:f8:42:44:5e:7c:87:b5:0a:
70:1d:34:09:e2:3b:be:e8:67:ed:8e:7e:61:43:17:2e:f7:cd:
f8:ef:0a:24:58:5d:58:44:d2:3a:56:77:c2:c5:29:07:70:e0:
c9:83:9b:75:13:0c:9e:92:37:99:ec:5c:e6:ea:97:b7:e4:73:
db:03:98:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:18 2023 by rpki-client on console-ams.rpki-client.org