Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/tNzl9IwqZKdgpvL2B6vhqacb8uo.roa
File: tNzl9IwqZKdgpvL2B6vhqacb8uo.roa (raw, json)
Hash identifier: zcSZ1SbvXufgDtjA8Q4mxhkaRJ/xhaqNJeOxW2tMmwA=
Subject key identifier: B4:DC:E5:F4:8C:2A:64:A7:60:A6:F2:F6:07:AB:E1:A9:A7:1B:F2:EA
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0AF6BD58
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/tNzl9IwqZKdgpvL2B6vhqacb8uo.roa
Signing time: Mon 13 Jun 2022 10:56:15 +0000
ROA not before: Mon 13 Jun 2022 10:56:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213250
IP address blocks: 45.89.124.0/23 maxlen: 23
45.89.126.0/23 maxlen: 23
45.131.66.0/23 maxlen: 23
5.182.206.0/23 maxlen: 23
5.182.204.0/23 maxlen: 23
2.56.245.0/24 maxlen: 24
5.252.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183942488 (0xaf6bd58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jun 13 10:56:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b4dce5f48c2a64a760a6f2f607abe1a9a71bf2ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e0:56:27:47:bb:78:42:3c:22:64:40:53:0c:
74:c7:a8:4e:11:bb:b8:06:59:15:a6:a2:93:cd:66:
82:9c:36:fc:49:c8:da:89:75:e9:28:ff:cf:02:d6:
f7:a3:05:ab:22:51:cc:01:d6:38:fc:d0:51:c8:64:
bb:b4:65:63:20:e6:f0:68:37:d4:9a:9e:c5:94:97:
64:3b:4c:f5:f6:94:f5:c8:a9:b3:8c:32:57:b6:27:
f5:76:4b:e7:fd:c2:8d:b4:e7:74:3e:e7:63:a2:d5:
ad:fc:59:69:62:18:a4:2c:33:ab:46:63:70:9b:b2:
f3:6d:e6:d3:47:69:ee:96:04:40:8c:eb:e8:a3:af:
39:d2:60:fe:d5:03:3e:31:75:b1:05:04:c5:24:7c:
7f:45:5b:7c:22:24:15:e0:f7:9a:8a:28:c7:75:bc:
7b:ed:7a:f1:30:e8:d9:17:86:bb:46:8a:fe:f4:e9:
f9:13:f2:90:3f:6c:c7:ba:0d:94:f7:aa:29:e7:7a:
9b:ae:66:39:a5:7d:e5:9a:6e:fc:9f:1c:5f:b6:5c:
93:fc:4d:6e:45:86:00:36:0b:a5:ef:38:7d:2d:60:
e7:59:b0:18:25:92:15:b2:7a:ad:2d:93:8b:2e:85:
20:71:c2:a3:74:ff:61:54:c2:df:3e:0f:04:a0:d4:
0b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DC:E5:F4:8C:2A:64:A7:60:A6:F2:F6:07:AB:E1:A9:A7:1B:F2:EA
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/tNzl9IwqZKdgpvL2B6vhqacb8uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.245.0/24
5.182.204.0/22
5.252.100.0/22
45.89.124.0/22
45.131.66.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:ac:68:ac:3d:d5:f5:f2:e1:91:ef:ee:15:7d:c1:9c:e7:1f:
c2:5c:bf:52:58:60:8e:63:8c:58:ad:af:2d:8a:1e:08:07:b5:
f1:c8:73:db:89:1f:3d:e7:44:df:e0:0f:8a:f7:ca:b2:66:42:
fd:93:f6:70:22:84:05:e9:d5:f4:e9:03:4b:a0:c1:8a:ae:61:
5c:10:24:08:0e:c3:3a:26:0c:e6:f4:b1:dd:d5:10:4d:77:5e:
67:87:32:2d:1d:02:7e:54:80:6d:db:07:d5:82:90:e3:e9:ba:
ef:64:21:56:4c:fc:bc:a4:af:ce:ee:b5:e8:c8:bb:3f:04:60:
86:cf:14:2a:22:8d:2b:78:bd:96:13:74:77:e0:10:45:a6:52:
97:fd:b1:14:a8:f9:87:3d:6b:74:e7:13:a8:4b:74:43:fe:4b:
5f:2a:88:bd:f1:9f:1b:83:e3:d8:e9:ce:aa:46:1c:e9:87:63:
ee:4b:ce:0a:fc:cf:99:c2:59:a2:94:64:98:5d:b0:0e:3c:96:
27:ca:50:87:7c:d0:ff:e4:e9:06:54:27:c4:33:5a:4e:15:3b:
f8:09:3c:7f:55:e5:2c:0f:10:aa:5f:90:89:49:76:08:f5:56:
1f:16:46:41:df:1b:82:a9:f9:1b:b6:c5:7b:8f:04:bf:00:01:
a2:fa:29:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:19 2023 by rpki-client on console-ams.rpki-client.org