Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/vrXBMP7rp07VyHynHD7YrSTKV10.roa
File: vrXBMP7rp07VyHynHD7YrSTKV10.roa (raw, json)
Hash identifier: N3PtbPid4BTaY+mxLv1SAWSQMxSzC+2M7ANHwcW+G38=
Subject key identifier: BE:B5:C1:30:FE:EB:A7:4E:D5:C8:7C:A7:1C:3E:D8:AD:24:CA:57:5D
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0B006283
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/vrXBMP7rp07VyHynHD7YrSTKV10.roa
Signing time: Fri 17 Jun 2022 13:48:44 +0000
ROA not before: Fri 17 Jun 2022 13:48:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 45.89.124.0/23 maxlen: 23
45.89.126.0/23 maxlen: 23
185.117.1.0/24 maxlen: 24
185.117.2.0/24 maxlen: 24
45.137.68.0/24 maxlen: 24
45.91.250.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 184574595 (0xb006283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jun 17 13:48:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=beb5c130feeba74ed5c87ca71c3ed8ad24ca575d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9b:fe:43:be:4e:00:8d:0d:8d:a2:b6:f6:92:
d5:5e:0a:8e:4d:88:3f:c0:df:3e:83:9d:0e:e7:3d:
01:d8:40:f1:83:38:8e:53:b3:68:c4:0b:22:cb:6e:
9a:0d:c9:cc:b1:6b:f4:93:a7:45:89:7b:e4:33:ec:
de:a8:30:c1:12:5e:ee:1a:47:8f:bc:46:59:96:11:
04:65:89:2c:68:c8:9b:39:10:9a:a6:b4:a5:59:5c:
00:80:83:bd:4f:10:ba:29:ab:b6:94:a0:d9:cb:e8:
f5:e1:d4:cc:ff:ac:66:bb:f2:72:da:58:b1:f9:b3:
6e:7a:94:6b:0d:9e:8e:4e:5d:f0:ba:a2:6a:bb:d0:
36:64:d5:44:02:5d:01:91:f4:f7:04:7c:79:03:fb:
5c:28:81:0f:3c:a0:56:41:53:61:dc:53:c5:66:2b:
b2:29:19:b4:78:b7:82:69:28:a9:a9:54:37:3c:5a:
55:0a:e5:3e:57:56:3b:e1:55:a0:40:b7:fd:94:01:
8e:50:6e:a8:4e:7d:fc:0d:43:83:a0:5f:34:bc:3f:
36:f8:df:e3:dc:d9:72:0f:c9:97:71:5c:77:93:43:
c6:5a:63:07:bd:28:99:50:83:5b:61:c9:8b:62:c0:
db:42:f1:cd:92:72:86:58:ad:39:a6:fc:7f:4f:74:
32:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B5:C1:30:FE:EB:A7:4E:D5:C8:7C:A7:1C:3E:D8:AD:24:CA:57:5D
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/vrXBMP7rp07VyHynHD7YrSTKV10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.124.0/22
45.91.250.0/24
45.137.68.0/24
185.117.1.0-185.117.2.255
Signature Algorithm: sha256WithRSAEncryption
a0:9b:df:46:45:90:bd:62:eb:08:89:aa:ba:46:68:ee:ef:a9:
0a:33:3c:01:16:0d:37:ba:67:4a:37:27:7e:5c:5b:85:16:21:
44:8d:dd:46:f3:0f:f7:70:ca:ca:a6:2e:d3:29:a9:d6:22:c3:
3c:6c:71:1b:00:da:48:79:91:ef:f2:2b:9e:73:13:c3:b5:c4:
98:8f:1f:39:ba:41:33:a9:97:03:47:4c:21:04:81:09:c8:07:
fa:4a:81:b1:b6:71:ba:e8:46:94:0e:12:52:c2:7c:70:3a:b1:
0a:32:8e:56:6e:59:cf:83:db:83:5a:2e:25:54:ca:8f:fb:48:
57:d7:38:2b:65:95:aa:6b:c1:3b:8f:31:a9:7b:ca:64:0b:0f:
d6:d6:2d:31:22:1e:f7:19:4c:d1:ff:52:c2:08:01:b6:78:aa:
4c:c8:c4:c9:fc:7d:6c:2b:14:db:a1:e1:4e:cb:d0:2d:67:45:
4c:f1:68:89:21:a7:5b:7b:b1:ef:3c:f9:87:21:ca:49:36:d7:
12:54:7b:8e:1d:c9:85:ef:a6:74:49:df:3a:aa:dd:86:87:48:
dc:29:a2:a4:67:e2:2f:e0:3d:19:42:03:d7:7d:24:34:aa:b6:
6a:96:61:a5:f3:03:71:3c:a8:9b:56:c3:91:f7:22:f0:8c:3e:
3a:a0:93:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:19 2023 by rpki-client on console-ams.rpki-client.org