Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/13A6RrbYaKzqn2m2fnSVm80dgps.roa
File: 13A6RrbYaKzqn2m2fnSVm80dgps.roa (raw, json)
Hash identifier: KomttKpaDenodKkNiWS58xiKBlBquc9VtTo1k0oLqJ4=
Subject key identifier: D7:70:3A:46:B6:D8:68:AC:EA:9F:69:B6:7E:74:95:9B:CD:1D:82:9B
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 19DC969B
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/13A6RrbYaKzqn2m2fnSVm80dgps.roa
Signing time: Sat 01 Jan 2022 15:56:44 +0000
ROA not before: Sat 01 Jan 2022 15:56:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48806
IP address blocks: 45.148.25.0/24 maxlen: 24
45.149.1.0/24 maxlen: 24
45.157.112.0/24 maxlen: 24
45.154.137.0/24 maxlen: 24
45.150.93.0/24 maxlen: 24
89.251.0.0/24 maxlen: 24
89.251.2.0/24 maxlen: 24
45.146.53.0/24 maxlen: 24
185.227.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 433886875 (0x19dc969b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 15:56:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d7703a46b6d868acea9f69b67e74959bcd1d829b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:12:ba:71:ad:df:9f:27:29:b3:ac:2e:f9:f3:
50:64:7c:20:60:82:12:b9:66:ee:b2:30:6b:6b:17:
df:dc:7f:7a:eb:1f:be:56:12:bd:ba:88:1f:70:76:
57:45:6c:db:26:3b:23:6b:47:bf:63:15:89:b7:d1:
a5:69:cb:53:df:cb:88:57:64:e8:bd:da:52:02:ff:
c3:b9:8c:48:da:7b:ad:62:ac:2c:7c:dc:b3:8b:26:
66:55:2e:b2:e0:38:04:55:a8:f3:4b:bd:0a:32:7c:
cf:64:64:fa:d3:be:90:e6:96:05:3e:59:74:9b:d4:
0d:43:f6:60:a1:1f:2a:e0:a7:69:34:c2:56:de:4e:
de:c9:7b:39:6c:52:37:77:21:ec:0c:b6:99:57:6f:
56:02:6f:d5:62:7b:27:26:1f:70:24:7c:0b:de:bc:
32:59:b4:c4:a7:da:06:31:00:0d:5a:d5:dd:5f:bc:
11:64:a0:62:49:b4:27:72:aa:4a:25:e3:30:df:13:
eb:07:81:51:0d:d2:a7:90:42:71:d7:54:a2:a8:a8:
b7:db:0c:eb:5f:ee:d9:dc:c7:ee:ad:ea:e1:65:ff:
87:a6:98:cc:be:31:96:f5:d4:ad:2a:b6:7f:9d:db:
45:e4:98:41:0b:68:17:47:3d:55:13:56:c0:36:22:
44:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:70:3A:46:B6:D8:68:AC:EA:9F:69:B6:7E:74:95:9B:CD:1D:82:9B
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/13A6RrbYaKzqn2m2fnSVm80dgps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.53.0/24
45.148.25.0/24
45.149.1.0/24
45.150.93.0/24
45.154.137.0/24
45.157.112.0/24
89.251.0.0/24
89.251.2.0/24
185.227.33.0/24
Signature Algorithm: sha256WithRSAEncryption
70:98:ca:94:fe:44:2e:4a:07:9e:0a:50:8e:fc:99:2f:10:0c:
c6:89:91:59:e4:f4:96:45:b2:9a:0f:09:d0:0f:d5:19:62:a0:
26:eb:dc:63:43:e9:7b:80:84:3b:c8:ea:3c:09:e3:49:e4:56:
b0:f1:68:a4:81:97:35:41:59:f4:f9:3a:2a:4f:10:64:9c:a8:
db:a7:e8:d3:53:5a:e1:38:23:76:90:ba:d9:95:f6:47:e2:ca:
7d:0b:62:4f:d0:75:4c:91:68:e7:43:5c:65:e3:48:06:8e:0f:
38:b4:10:ac:80:a9:d5:22:d2:61:16:6a:18:05:b0:f5:76:15:
dd:3a:4e:8b:3e:a9:fe:fb:71:f0:ef:15:54:4c:1c:0b:e8:e3:
58:bd:6b:97:fd:d5:78:25:0e:f0:31:62:1b:01:5c:12:41:d2:
62:00:db:a1:d6:24:37:9e:da:38:a6:db:48:dc:f9:38:5c:26:
9d:d5:f6:7b:4e:b1:12:ba:5c:2b:15:64:00:cd:4a:34:a6:b4:
25:e4:5e:a3:09:46:42:aa:dd:5f:6f:71:80:85:9f:c7:41:73:
df:bc:ae:54:6f:af:cb:bd:e7:68:d0:18:59:b8:f9:cb:62:f8:
bc:15:50:51:60:c1:30:b8:07:bf:fc:d6:78:7e:9a:87:bf:00:
54:f2:7f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-ams.rpki-client.org