Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/5gCUj23hIPoPtqsf4G73kgTHz54.roa
File: 5gCUj23hIPoPtqsf4G73kgTHz54.roa (raw, json)
Hash identifier: rkjfaIAQPyUDKWHLNCdA1ivHvdXAcE2QiiKazX5299o=
Subject key identifier: E6:00:94:8F:6D:E1:20:FA:0F:B6:AB:1F:E0:6E:F7:92:04:C7:CF:9E
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0183E4DA06AEC1526DA1E6DF34FD1B1DE66A
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/5gCUj23hIPoPtqsf4G73kgTHz54.roa
Signing time: Mon 17 Oct 2022 07:30:37 +0000
ROA not before: Mon 17 Oct 2022 07:30:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206238
IP address blocks: 45.142.144.0/22 maxlen: 24
45.137.88.0/22 maxlen: 24
45.138.52.0/22 maxlen: 24
45.137.100.0/22 maxlen: 24
45.142.16.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e4:da:06:ae:c1:52:6d:a1:e6:df:34:fd:1b:1d:e6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Oct 17 07:30:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e600948f6de120fa0fb6ab1fe06ef79204c7cf9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:87:10:14:f5:65:12:ad:5e:5a:c5:93:18:29:
09:84:0e:18:bf:42:37:9c:cf:ba:11:82:e3:dc:06:
34:e2:85:22:77:fd:fc:a1:fc:51:e7:3c:04:7e:14:
1d:ad:d9:29:62:76:8e:c3:ed:d7:69:c7:03:e5:51:
7a:46:1d:57:3c:ee:57:28:b3:7d:de:02:60:80:b6:
73:ae:a7:e3:95:71:21:77:05:07:0e:ab:4b:c8:01:
f3:5a:a0:8f:d9:b4:78:24:dc:9f:cb:8f:c7:89:13:
7b:18:b6:b0:47:5c:50:24:b6:2c:e5:69:38:5a:01:
b8:fd:e0:41:70:62:f4:30:cb:57:6f:8d:43:14:34:
e9:e8:dc:1f:ba:7f:39:b2:ce:6e:0f:88:82:12:39:
11:a6:f6:1c:44:9d:55:a5:1a:51:7e:0f:1f:41:e1:
5a:34:b5:38:89:41:7a:51:07:65:b7:29:3d:0a:e5:
cd:61:07:bb:c4:56:9f:7d:94:0f:bd:9b:37:df:82:
a5:76:dc:3e:ab:65:cb:96:53:d7:70:f4:88:b0:8d:
60:07:16:26:e6:3d:94:eb:78:0d:4d:d9:a4:71:9f:
26:1f:de:2f:04:eb:4b:8d:67:63:cf:ee:40:99:3f:
94:dd:4c:85:ff:35:0e:40:af:15:0a:76:0d:c3:a0:
ae:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:00:94:8F:6D:E1:20:FA:0F:B6:AB:1F:E0:6E:F7:92:04:C7:CF:9E
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/5gCUj23hIPoPtqsf4G73kgTHz54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.88.0/22
45.137.100.0/22
45.138.52.0/22
45.142.16.0/22
45.142.144.0/22
Signature Algorithm: sha256WithRSAEncryption
34:10:a9:40:04:82:46:af:39:ef:b7:a9:76:11:3e:81:69:61:
76:ef:5c:2b:12:52:75:c7:dd:07:ee:e4:8e:f2:59:20:89:bf:
d2:0f:be:77:fe:e3:ac:ae:82:92:1c:29:75:83:df:12:db:e1:
3c:cf:b6:2e:8c:5e:0a:ec:1f:7d:c2:4b:d3:5c:f7:9f:64:78:
d5:ed:09:2c:78:96:1c:2c:7b:20:7c:fb:27:91:33:92:df:b0:
1c:4b:15:6a:dd:7e:ea:ce:28:ac:38:11:bc:97:e5:5a:f7:af:
9f:47:72:f5:9e:01:1c:f6:09:39:59:d8:7d:ce:c7:86:24:40:
a1:a0:98:e2:44:3b:1a:cb:42:50:0d:bc:d0:8c:b2:19:47:1c:
58:6b:fd:37:9a:7d:11:5b:3c:23:8f:a7:84:22:01:01:b5:c5:
76:3e:8c:d9:a8:97:d2:09:85:3c:f1:38:3a:7d:12:16:9a:75:
4f:a8:47:5d:f8:d7:30:3f:29:c2:6c:1e:16:0b:28:c6:43:c8:
79:46:0e:dd:3c:4a:f9:59:a1:6c:d3:e4:1d:9f:59:c9:e8:16:
ae:b6:03:c6:15:dc:f4:7c:b1:5d:1e:59:e9:ee:13:09:8c:ed:
4f:e0:04:bd:de:7c:68:99:ee:6c:f8:30:e1:79:c7:a4:11:7b:
a7:0e:5d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org