Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/pd7LWteNA-vnuY7EbfmlgkueHLA.roa
File: pd7LWteNA-vnuY7EbfmlgkueHLA.roa (raw, json)
Hash identifier: CrTFl0t81AmiiH3xQV1TNgFe6aFy0lMeiCUWOB4sMs8=
Subject key identifier: A5:DE:CB:5A:D7:8D:03:EB:E7:B9:8E:C4:6D:F9:A5:82:4B:9E:1C:B0
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 093D1C40
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/pd7LWteNA-vnuY7EbfmlgkueHLA.roa
Signing time: Sat 01 Jan 2022 06:00:31 +0000
ROA not before: Sat 01 Jan 2022 06:00:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44486
IP address blocks: 45.145.227.0/24 maxlen: 24
194.15.36.0/24 maxlen: 24
185.132.55.0/24 maxlen: 24
185.132.54.0/24 maxlen: 24
45.137.71.0/24 maxlen: 24
5.253.245.0/24 maxlen: 24
5.253.244.0/24 maxlen: 24
45.91.251.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 154999872 (0x93d1c40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 06:00:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a5decb5ad78d03ebe7b98ec46df9a5824b9e1cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:30:52:ab:bc:3e:f4:49:52:cf:c6:ce:ef:bc:
3c:66:f9:30:9f:a2:ca:d4:34:b3:59:aa:15:de:c1:
4d:b5:44:da:95:11:a2:a6:ac:7c:5c:90:c6:ec:9f:
ff:53:93:40:0e:4b:bf:eb:f6:98:ab:1f:a7:ea:cc:
6e:f6:a8:4e:81:8a:54:de:20:13:2e:99:c3:c8:71:
da:24:e0:3d:1a:96:30:f3:da:64:fb:02:f3:d5:e1:
9a:70:8c:a1:88:17:05:c9:76:9f:ae:f9:0f:ff:14:
bc:ed:b0:df:9b:51:d5:35:9c:c2:c3:0a:29:cd:19:
1d:e3:81:90:32:e3:88:14:7d:60:d0:f7:17:9d:03:
94:1b:71:8b:b6:12:96:10:38:eb:e4:b9:31:09:93:
36:7d:e6:ad:41:22:47:db:3e:c9:1a:f1:aa:2f:6b:
5f:83:08:98:0c:f9:c0:84:33:6e:1b:d9:fa:68:ea:
ea:36:3b:d7:b6:ff:62:23:ec:9d:9e:68:c5:8e:62:
85:2c:e9:a6:11:1f:b3:5a:31:b6:16:1d:5c:6a:2b:
df:a7:51:56:24:b0:c9:20:30:f3:4b:af:89:d9:d9:
f7:df:da:77:2f:bc:1f:03:b3:7d:7c:0a:18:15:c4:
a5:de:09:03:68:be:63:09:f9:a7:11:db:b5:b7:d4:
9e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DE:CB:5A:D7:8D:03:EB:E7:B9:8E:C4:6D:F9:A5:82:4B:9E:1C:B0
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/pd7LWteNA-vnuY7EbfmlgkueHLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.244.0/23
45.91.251.0/24
45.137.71.0/24
45.145.227.0/24
185.132.54.0/23
194.15.36.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:ff:0d:85:af:95:b1:23:06:c1:44:f2:6c:1c:1f:6f:70:93:
c0:9b:39:d7:5b:95:d5:89:d7:57:fe:8c:ac:db:75:b8:18:41:
bd:d7:5a:d8:c7:ee:5a:15:75:7d:74:e1:4d:26:d9:d4:ea:a1:
7b:49:78:23:17:d0:51:08:1b:91:8b:15:0b:0d:a9:b1:c0:12:
30:95:17:55:c4:1c:33:37:54:f2:47:31:1d:c2:a9:7c:aa:3f:
d6:a5:44:ff:a7:bb:76:1d:6c:d3:62:a0:aa:ce:32:8f:69:a9:
94:e1:7f:39:7f:a8:f9:93:c6:36:13:69:17:7d:c4:82:8c:80:
96:a9:15:e8:d5:5d:68:f6:af:df:7c:c9:d6:88:8c:a6:37:9e:
66:1a:d9:5d:3c:d0:7a:18:c1:f1:4a:e4:f3:78:d5:5a:ba:fe:
d6:4c:ef:e2:fd:f2:a8:8c:b4:94:23:37:2f:d4:f0:d4:93:3b:
c0:a8:42:8e:18:7f:54:86:bf:c2:5a:95:44:3e:8c:03:58:fa:
d9:36:b6:bf:c5:83:32:67:45:84:8f:1b:62:7c:fa:c3:3d:fc:
ac:5d:98:5c:c6:0e:c5:4c:2e:77:56:ad:14:4b:fb:4b:23:39:
1a:9d:75:b9:78:ec:d1:39:3d:04:f9:7f:75:8e:c9:ee:fa:37:
db:91:f1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:31 2023 by rpki-client on console-fra.rpki-client.org