Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Am5HoCTz42weO_bKX2zEozDMhFc.roa
File: Am5HoCTz42weO_bKX2zEozDMhFc.roa (raw, json)
Hash identifier: 7tOLeM5RLTyb88/lU4l4Uv8Tbl4KalnCQLtBQWiVx+0=
Subject key identifier: 02:6E:47:A0:24:F3:E3:6C:1E:3B:F6:CA:5F:6C:C4:A3:30:CC:84:57
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 1A3A8DF2
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Am5HoCTz42weO_bKX2zEozDMhFc.roa
Signing time: Tue 25 Jan 2022 12:01:15 +0000
ROA not before: Tue 25 Jan 2022 12:01:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206092
IP address blocks: 45.86.202.0/24 maxlen: 24
45.86.200.0/24 maxlen: 24
136.144.17.0/24 maxlen: 24
193.37.32.0/24 maxlen: 24
136.144.19.0/24 maxlen: 24
194.5.48.0/24 maxlen: 24
194.5.49.0/24 maxlen: 24
194.34.172.0/24 maxlen: 24
194.5.52.0/24 maxlen: 24
194.5.53.0/24 maxlen: 24
136.144.42.0/24 maxlen: 24
194.34.173.0/24 maxlen: 24
45.84.219.0/24 maxlen: 24
45.84.217.0/24 maxlen: 24
45.84.218.0/24 maxlen: 24
45.84.216.0/24 maxlen: 24
193.36.224.0/24 maxlen: 24
193.36.225.0/24 maxlen: 24
193.176.211.0/24 maxlen: 24
45.154.138.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 440045042 (0x1a3a8df2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 25 12:01:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=026e47a024f3e36c1e3bf6ca5f6cc4a330cc8457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:71:43:1f:0d:b5:61:42:58:cf:97:6b:bf:77:
c1:83:6d:a5:0f:1d:90:80:ee:a0:58:4b:8a:c2:a3:
dd:45:72:12:7c:c0:5a:23:70:4e:30:3d:a9:fe:b6:
f7:74:0d:71:a3:0b:b9:48:b9:4e:3b:ee:0f:f5:6e:
b1:b8:e8:5e:5d:dc:83:46:63:53:69:18:1b:96:b1:
a4:49:f4:bd:36:7a:00:ac:01:fc:13:ba:83:a8:d6:
82:93:f4:25:d1:01:67:2f:01:64:2c:62:24:14:d1:
a6:48:85:00:be:7d:62:e1:3a:e5:71:e5:fc:7e:ac:
08:21:37:9c:11:c4:ec:1f:21:cc:b4:97:ba:e4:be:
e0:41:b9:65:5c:67:25:0b:d4:8f:6d:1b:ac:d2:ce:
57:19:9e:b6:ca:aa:dc:e6:ef:59:00:cb:d3:1b:82:
28:0c:d0:9c:89:2e:73:0e:31:d4:8e:d8:54:e9:a9:
bd:03:71:6d:0c:bb:d3:84:f5:5e:7c:29:28:5e:b9:
14:bb:51:68:82:25:83:98:24:64:c7:8b:21:db:a1:
e3:17:1c:d1:38:ce:cf:05:99:c4:19:f0:bf:5d:7d:
d7:db:d6:e3:ad:89:d2:f1:cc:81:6b:c7:e3:ab:39:
f3:4e:05:a2:71:c3:7a:23:54:7a:a6:40:65:a0:b6:
d8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:6E:47:A0:24:F3:E3:6C:1E:3B:F6:CA:5F:6C:C4:A3:30:CC:84:57
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/Am5HoCTz42weO_bKX2zEozDMhFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.216.0/22
45.86.200.0/24
45.86.202.0/24
45.154.138.0/24
136.144.17.0/24
136.144.19.0/24
136.144.42.0/24
193.36.224.0/23
193.37.32.0/24
193.176.211.0/24
194.5.48.0/23
194.5.52.0/23
194.34.172.0/23
Signature Algorithm: sha256WithRSAEncryption
35:75:02:e4:c3:08:35:c2:3f:f7:b0:ab:4e:61:d1:05:d6:d0:
00:77:4c:4c:3d:40:2b:f5:9d:17:9f:29:f2:81:b3:c7:56:4a:
c9:c7:a9:4a:ec:35:71:1c:24:bc:4a:2a:13:6f:5a:2d:62:f4:
ae:85:50:6f:21:6c:d1:ac:80:78:26:62:6c:4c:80:37:07:fe:
90:b9:ea:45:5a:5f:8c:73:0b:94:2b:05:2e:95:0a:ef:cd:23:
d9:b2:11:a3:b9:3d:2f:81:eb:55:b2:91:54:9a:98:73:00:a4:
0e:c1:06:cf:79:ee:7a:7e:1c:f3:aa:f1:78:7c:20:46:1d:dc:
c9:80:ba:87:bf:9d:c1:3b:94:01:76:34:d4:18:33:f8:da:31:
03:51:ed:1c:15:3c:ec:7f:6d:a4:3f:e6:24:0d:e1:5f:c8:b9:
e8:60:d3:08:2d:91:09:85:d0:ac:30:b3:4c:70:14:ed:43:64:
f7:26:b2:a7:72:64:86:4e:4a:b8:04:73:20:4c:5c:30:82:b2:
67:d1:2f:50:ba:36:22:bf:45:cc:90:59:af:c4:7f:1c:87:53:
e8:4b:92:21:b4:36:eb:82:97:4a:27:c7:be:a1:23:7c:30:32:
1c:3d:c4:28:ce:f5:d9:0e:01:7b:ff:5b:25:4a:f0:10:35:d9:
88:bc:24:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:32 2023 by rpki-client on console-fra.rpki-client.org