Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/pzCwfbMCvdgy9rAOg0Om0QdMv-o.roa
File: pzCwfbMCvdgy9rAOg0Om0QdMv-o.roa (raw, json)
Hash identifier: /RQ2ajI9wE0YnQpAeakl7R0Bk6Ws8goVO0np0B9XnvI=
Subject key identifier: A7:30:B0:7D:B3:02:BD:D8:32:F6:B0:0E:83:43:A6:D1:07:4C:BF:EA
Certificate issuer: /CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb
Certificate serial: 0183E77B2E44E0732B2D7232C0895A6FAC38
Authority key identifier: C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/pzCwfbMCvdgy9rAOg0Om0QdMv-o.roa
Signing time: Mon 17 Oct 2022 19:45:53 +0000
ROA not before: Mon 17 Oct 2022 19:45:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 32338
IP address blocks: 185.213.88.0/22 maxlen: 24
45.84.30.0/24 maxlen: 24
45.84.28.0/23 maxlen: 23
185.149.132.0/23 maxlen: 23
185.149.134.0/23 maxlen: 23
185.73.220.0/22 maxlen: 24
2a0b:85c0::/29 maxlen: 32
2a05:44c0::/29 maxlen: 32
2a0e:9480::/29 maxlen: 32
2a07:68c0::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e7:7b:2e:44:e0:73:2b:2d:72:32:c0:89:5a:6f:ac:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb
Validity
Not Before: Oct 17 19:45:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a730b07db302bdd832f6b00e8343a6d1074cbfea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:52:f8:73:d6:f4:09:b9:b0:bc:e8:92:1f:c6:
85:c0:7b:73:8e:97:e2:eb:57:0d:f3:8e:ac:59:72:
24:3e:b1:20:f2:20:9a:aa:97:78:f3:a0:83:64:ee:
05:35:77:e2:16:e7:27:e0:35:fc:fb:37:01:6f:56:
1d:02:d2:36:6f:c8:69:d7:e2:05:b5:c5:6f:fc:21:
2d:d1:b5:e8:ef:42:01:e7:c9:a7:65:0b:d7:3b:97:
0e:d1:a1:b8:5e:58:5e:a8:e3:0b:29:61:e4:66:50:
02:f8:ec:d7:1f:48:15:1c:d9:ac:1d:61:22:62:ed:
27:4f:71:a2:c4:cd:32:e0:0a:d6:2f:72:a9:52:1f:
04:60:fa:dc:58:b3:cb:87:a7:7e:ee:2d:26:e4:e8:
44:43:3a:e5:24:05:cc:00:06:f4:05:95:04:44:63:
fe:23:4b:22:f7:e7:c7:66:b6:69:82:2a:a4:04:f1:
42:f9:ff:d0:a3:c5:58:3f:74:39:d2:76:46:60:a9:
ee:15:4c:18:e8:5e:1f:fd:f7:f4:18:e9:ce:2d:74:
fe:db:9c:e8:e2:47:96:40:f0:84:f6:d5:ae:69:46:
9b:86:01:a1:98:32:b6:92:4e:be:c0:37:f0:32:1f:
a1:0f:16:ac:60:f4:11:b9:5e:f8:c3:8e:7b:2d:78:
09:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:30:B0:7D:B3:02:BD:D8:32:F6:B0:0E:83:43:A6:D1:07:4C:BF:EA
X509v3 Authority Key Identifier:
keyid:C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/pzCwfbMCvdgy9rAOg0Om0QdMv-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.28.0-45.84.30.255
185.73.220.0/22
185.149.132.0/22
185.213.88.0/22
IPv6:
2a05:44c0::/29
2a07:68c0::/29
2a0b:85c0::/29
2a0e:9480::/29
Signature Algorithm: sha256WithRSAEncryption
6f:23:4b:b3:6d:9c:47:4e:c9:14:ca:3b:ff:76:0a:5a:c2:48:
29:2e:31:a3:e8:cf:ac:c3:a8:d4:74:44:6f:30:28:cb:d2:ae:
70:16:5a:ec:37:21:a9:8c:e6:45:af:5c:20:1e:81:c4:21:20:
0a:dc:3a:3e:49:53:b3:ee:af:51:92:75:e5:f4:ae:65:f4:56:
e3:07:ee:c6:d5:dc:1f:05:d9:4d:10:75:06:0e:da:99:b7:48:
d3:ad:12:d7:00:bf:f7:d2:2f:87:f3:fd:ac:b1:24:f5:75:07:
f2:23:a3:b5:21:e5:62:31:56:ac:f1:dd:fc:f9:28:65:96:eb:
26:37:36:5b:4c:bf:fb:ae:1a:17:53:e4:79:73:81:b2:1c:95:
14:5f:04:34:fa:96:50:70:65:a1:dd:34:15:70:1d:fb:ce:1d:
85:91:1e:b1:ab:f4:33:b9:d1:ea:02:08:f9:94:ff:86:2b:69:
40:03:ef:60:4e:46:8e:74:8c:4e:ea:fe:09:23:cf:be:77:04:
ae:11:03:48:a5:49:7c:27:dc:40:16:99:bf:89:98:dc:5c:80:
50:52:9e:69:6e:e3:c6:b1:61:40:14:40:a2:87:d9:c0:f7:ef:
d7:c0:0f:54:cd:a5:3c:74:4d:86:1b:8d:dc:a2:2a:25:7e:05:
a7:ad:9e:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:09 2024 by rpki-client on console-fra.rpki-client.org