Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/NmyWuno6IweW_AAqaIXGFfXiFpM.roa
File: NmyWuno6IweW_AAqaIXGFfXiFpM.roa (raw, json)
Hash identifier: UkYOfXvGIf6Fyh+5TxQxurOrIGW1aBzUgMWOlFsbjVI=
Subject key identifier: 36:6C:96:BA:7A:3A:23:07:96:FC:00:2A:68:85:C6:15:F5:E2:16:93
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0183556EC5215E71E7CBFF51BD89A4290985
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/NmyWuno6IweW_AAqaIXGFfXiFpM.roa
Signing time: Mon 19 Sep 2022 11:07:46 +0000
ROA not before: Mon 19 Sep 2022 11:07:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 45.145.227.0/24 maxlen: 24
212.87.214.0/23 maxlen: 23
5.180.252.0/23 maxlen: 23
5.180.254.0/23 maxlen: 23
185.132.55.0/24 maxlen: 24
185.132.54.0/24 maxlen: 24
45.137.71.0/24 maxlen: 24
45.131.109.0/24 maxlen: 24
5.253.244.0/24 maxlen: 24
45.145.224.0/23 maxlen: 23
45.91.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:55:6e:c5:21:5e:71:e7:cb:ff:51:bd:89:a4:29:09:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Sep 19 11:07:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=366c96ba7a3a230796fc002a6885c615f5e21693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:66:f8:08:4d:4c:34:73:fd:87:e6:43:8d:0d:
0f:18:37:44:f4:22:35:f3:c6:c8:15:d0:0f:69:37:
80:a5:9f:1a:54:d7:67:0c:a1:0b:8e:50:c6:b1:93:
ea:49:c3:5b:5f:4f:1d:14:7c:f3:31:75:a2:9d:f5:
4f:95:7d:bd:33:c7:27:5f:07:9b:95:f0:ca:13:53:
16:35:5b:1d:12:81:07:d8:40:32:8c:f7:a7:8a:9e:
ba:8e:5b:3f:87:9b:c6:d6:3b:7c:77:13:89:55:c0:
22:94:2d:20:6b:af:79:db:93:0a:ea:f7:33:ac:71:
f2:1b:1a:24:ac:20:78:21:99:74:17:1e:6f:43:1e:
41:f1:06:6f:17:11:7e:97:cc:6c:65:af:88:eb:0d:
83:16:52:f8:93:57:5f:85:d2:44:d2:ea:89:4e:84:
bd:d1:25:6c:55:ec:e2:4b:b6:96:be:f1:b9:e7:f3:
5a:d1:21:13:26:7d:e8:45:28:58:3b:39:e0:ba:7e:
1a:79:c3:6c:cd:2a:32:ed:a2:c3:ba:af:0a:b1:c9:
a4:57:65:3a:fd:06:c3:4c:6e:c6:22:1f:25:2d:35:
64:cb:90:3e:cf:cb:c3:a7:16:fb:af:8d:38:a6:f7:
ed:66:4f:d1:91:d5:bf:4f:f3:f7:52:27:39:1d:0f:
7c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:6C:96:BA:7A:3A:23:07:96:FC:00:2A:68:85:C6:15:F5:E2:16:93
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/NmyWuno6IweW_AAqaIXGFfXiFpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.252.0/22
5.253.244.0/24
45.91.251.0/24
45.131.109.0/24
45.137.71.0/24
45.145.224.0/23
45.145.227.0/24
185.132.54.0/23
212.87.214.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:c9:3a:6e:e1:3b:11:f1:8f:63:90:6e:85:81:f7:e7:98:4e:
63:ff:dd:3d:0e:8f:21:c0:8b:82:87:48:27:e2:f3:87:d9:47:
dc:18:0b:94:9d:f8:58:25:e3:70:1c:e8:4c:1a:bf:41:55:85:
d0:04:1c:3d:79:5f:93:23:10:7a:3e:ed:1e:3a:93:10:95:97:
fd:5d:cb:4f:11:eb:62:7f:d2:2a:cb:16:c2:f5:cd:51:47:8b:
08:cd:98:97:1b:3d:7e:85:7b:2f:ee:a0:ae:fc:57:9b:39:23:
1e:88:78:0e:f5:4e:2d:86:1a:e7:8f:06:6f:a0:f0:fb:36:0b:
28:e7:8c:30:4e:0f:52:e7:12:66:af:26:95:30:c8:bc:e3:ec:
a7:e2:d5:d0:f5:df:d0:ec:4e:77:39:8e:d6:03:73:24:03:46:
2d:5b:9e:9c:90:e3:46:42:e3:72:b4:2b:1a:a9:1f:22:c6:a2:
e6:c0:73:e0:d6:f1:da:43:b0:44:1d:70:14:c4:72:ab:8f:4f:
6f:fd:bf:65:e0:f0:8e:96:29:2c:7b:12:be:13:60:3e:92:ce:
93:91:ee:ae:9f:54:67:42:f1:2a:7e:9e:f2:a1:bc:19:87:85:
b4:ac:a8:5e:82:f7:cb:4c:3e:dd:61:f4:7f:f4:b9:5e:94:c7:
06:06:85:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:30 2023 by rpki-client on console-fra.rpki-client.org