Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Rv4m_t96edWdOnz-hd2OQnFIPWk.roa
File: Rv4m_t96edWdOnz-hd2OQnFIPWk.roa (raw, json)
Hash identifier: No+NctwaurbGhNyi0Y4mEhy+ce9pslzLi/u8fOg9Ifc=
Subject key identifier: 46:FE:26:FE:DF:7A:79:D5:9D:3A:7C:FE:85:DD:8E:42:71:48:3D:69
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01837E75BE17C1FEDBB4E4C17AF0451E9600
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Rv4m_t96edWdOnz-hd2OQnFIPWk.roa
Signing time: Tue 27 Sep 2022 10:19:49 +0000
ROA not before: Tue 27 Sep 2022 10:19:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 45.145.227.0/24 maxlen: 24
212.87.214.0/23 maxlen: 23
5.180.252.0/23 maxlen: 23
5.180.254.0/23 maxlen: 23
185.132.55.0/24 maxlen: 24
185.132.54.0/24 maxlen: 24
45.137.71.0/24 maxlen: 24
45.131.109.0/24 maxlen: 24
5.253.244.0/24 maxlen: 24
45.84.199.0/24 maxlen: 24
45.145.224.0/23 maxlen: 23
45.91.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7e:75:be:17:c1:fe:db:b4:e4:c1:7a:f0:45:1e:96:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Sep 27 10:19:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46fe26fedf7a79d59d3a7cfe85dd8e4271483d69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f0:57:36:df:05:84:2f:4f:ad:9f:c9:98:cc:
f4:ff:81:6d:81:c6:d5:4e:f4:59:47:72:e3:9f:a0:
4f:59:11:11:6f:d0:8a:04:b0:ec:88:d1:44:26:64:
2a:d5:04:5a:1f:c7:a7:50:2e:ce:d1:ab:2a:55:f7:
91:66:ea:f7:a1:e1:86:0b:57:6f:e8:c7:10:d1:92:
20:96:44:df:ac:ba:d6:cb:03:28:6e:0e:2b:bd:05:
ee:54:3f:a8:dd:84:bb:57:5d:3f:de:c6:d9:f6:ce:
06:05:3d:bb:ae:92:ac:ca:93:f2:a6:47:72:e9:69:
6a:4f:58:5e:01:49:45:78:71:71:03:7f:9b:32:7f:
49:cf:9c:d8:54:58:fb:54:83:37:c2:a8:3d:c8:d0:
ce:37:f8:06:8c:39:38:5a:7b:b6:c6:62:4a:c0:19:
2f:38:87:77:af:cb:a7:98:3a:37:53:2c:bd:0f:67:
32:ea:45:77:b6:47:ac:17:43:e1:41:c3:f6:0e:b6:
80:b8:76:18:59:aa:79:5e:2d:1a:a6:16:f9:a5:f6:
d7:b6:94:aa:81:37:e9:90:09:e5:fc:c5:96:d3:89:
c4:af:d1:07:d0:dc:e8:fd:6b:cd:6a:00:8e:48:d6:
97:d6:0f:37:f2:d6:4c:b9:1d:99:b0:4e:c0:42:a5:
7c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FE:26:FE:DF:7A:79:D5:9D:3A:7C:FE:85:DD:8E:42:71:48:3D:69
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Rv4m_t96edWdOnz-hd2OQnFIPWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.252.0/22
5.253.244.0/24
45.84.199.0/24
45.91.251.0/24
45.131.109.0/24
45.137.71.0/24
45.145.224.0/23
45.145.227.0/24
185.132.54.0/23
212.87.214.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:a5:14:b6:92:15:07:86:60:eb:ee:7b:23:47:cd:d8:49:5f:
69:e4:c4:a8:7d:5d:ea:18:b8:58:d8:48:0b:1e:a4:bc:8f:e3:
02:d8:60:28:54:53:0c:19:ae:dd:61:f9:7c:73:db:34:1f:6a:
51:0f:cb:54:ad:4f:f9:40:87:d4:e9:e4:45:81:7e:72:ac:1f:
49:13:14:c2:25:be:0b:34:8e:76:fb:2e:b5:df:f6:3b:74:2e:
39:37:2c:cb:6a:d8:93:39:a6:5b:4b:b1:7b:29:a4:c2:4d:16:
10:c7:da:f5:3f:72:f7:59:6a:70:19:a7:c3:1a:c6:ac:c9:35:
06:94:f9:35:bb:83:4e:7d:a8:51:d0:1b:25:19:70:70:e6:c1:
b6:18:43:f6:aa:1c:70:bb:80:e5:7d:3c:03:99:a6:1a:08:71:
a9:7a:9e:0c:87:a8:fa:b6:f1:a7:8a:fe:43:b6:4b:f7:d0:f5:
cc:f2:38:49:ff:61:2b:05:01:4f:cf:fd:9c:9d:7b:d0:ad:81:
cc:13:e5:4a:51:dd:bb:27:ce:12:fd:25:14:ef:c0:d8:7e:e6:
e9:4d:b3:67:93:38:32:10:9d:c5:b5:a7:39:bb:76:8e:01:63:
43:99:2a:4c:d3:97:9b:d2:9c:b5:e8:cc:9f:fd:d7:20:70:06:
f8:57:3b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:19 2023 by rpki-client on console-ams.rpki-client.org