Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/id-xLMs7o7W096nTnN_f5v8q-jU.roa
File: id-xLMs7o7W096nTnN_f5v8q-jU.roa (raw, json)
Hash identifier: V8cYuZcElakToJbtNArhe5F1Ce5tJcD41VFEAfWUErQ=
Subject key identifier: 89:DF:B1:2C:CB:3B:A3:B5:B4:F7:A9:D3:9C:DF:DF:E6:FF:2A:FA:35
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 1B4E287F
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/id-xLMs7o7W096nTnN_f5v8q-jU.roa
Signing time: Mon 09 May 2022 10:14:24 +0000
ROA not before: Mon 09 May 2022 10:14:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206092
IP address blocks: 45.86.202.0/24 maxlen: 24
45.86.200.0/24 maxlen: 24
136.144.17.0/24 maxlen: 24
193.37.33.0/24 maxlen: 24
193.37.32.0/24 maxlen: 24
136.144.19.0/24 maxlen: 24
194.5.48.0/24 maxlen: 24
194.5.49.0/24 maxlen: 24
194.34.172.0/24 maxlen: 24
194.5.52.0/24 maxlen: 24
194.5.53.0/24 maxlen: 24
136.144.42.0/24 maxlen: 24
194.34.173.0/24 maxlen: 24
45.84.217.0/24 maxlen: 24
45.84.218.0/24 maxlen: 24
45.84.216.0/24 maxlen: 24
193.36.224.0/24 maxlen: 24
193.36.225.0/24 maxlen: 24
45.95.243.0/24 maxlen: 24
193.176.211.0/24 maxlen: 24
45.154.138.0/24 maxlen: 24
45.146.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 458107007 (0x1b4e287f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: May 9 10:14:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=89dfb12ccb3ba3b5b4f7a9d39cdfdfe6ff2afa35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:22:0a:32:b9:4b:dc:7a:80:79:c0:50:98:37:
bf:22:b9:61:b8:90:de:69:7a:2e:aa:f4:12:80:83:
6c:cc:8d:2c:1d:80:fc:eb:cd:b2:8a:6e:ab:f6:44:
82:2f:39:5a:49:a7:7e:4d:12:5d:5e:16:15:c4:38:
a7:7a:66:7c:d2:a5:05:5a:58:80:48:ea:75:5b:92:
08:a6:97:f0:e5:cc:19:33:84:6d:dc:e8:d2:aa:65:
19:1c:20:bc:bf:54:e2:05:ef:e7:85:0f:ec:77:c3:
9b:cd:dd:45:27:8e:0f:89:39:de:76:86:58:22:13:
b1:87:be:d8:54:dd:51:2a:21:9b:1c:3b:10:0b:56:
ea:9d:10:f1:2d:a9:fb:d3:16:ca:ef:a7:b9:b9:09:
d1:b8:f1:27:d3:46:7e:a0:85:bb:fb:0f:b9:ef:8e:
c5:06:24:c3:e9:b0:32:d0:05:7f:a1:92:13:92:2f:
df:00:69:f0:a4:55:fc:96:6b:c9:46:94:20:3f:a4:
0d:5d:b9:cf:3f:07:c6:b1:b1:5e:b2:69:fd:1f:75:
f0:c3:95:68:11:f0:f2:42:1d:ff:f7:04:46:5b:11:
cc:42:c4:d9:be:05:73:84:96:a7:40:bd:f8:9c:6f:
c1:d7:20:ca:4f:ac:d4:d7:0b:c8:b9:70:72:1c:66:
71:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DF:B1:2C:CB:3B:A3:B5:B4:F7:A9:D3:9C:DF:DF:E6:FF:2A:FA:35
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/id-xLMs7o7W096nTnN_f5v8q-jU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.216.0-45.84.218.255
45.86.200.0/24
45.86.202.0/24
45.95.243.0/24
45.146.54.0/24
45.154.138.0/24
136.144.17.0/24
136.144.19.0/24
136.144.42.0/24
193.36.224.0/23
193.37.32.0/23
193.176.211.0/24
194.5.48.0/23
194.5.52.0/23
194.34.172.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:16:81:7d:cd:cc:43:43:21:1f:6b:10:af:c7:6f:2c:f2:10:
5f:b4:2e:b3:3c:5d:fa:23:23:d6:e7:dd:67:50:f2:b9:82:a4:
44:16:54:fc:05:f2:4e:70:17:59:3e:4f:14:4c:65:38:6e:76:
d4:28:44:7f:fc:24:f3:8d:d2:8d:90:15:d5:83:30:bc:0f:c7:
ef:b0:0d:c7:9a:06:d7:7a:d9:e5:47:3d:e0:5c:22:31:e8:0d:
bf:80:55:cd:c1:98:4a:7c:89:cc:4d:85:50:a5:ac:e1:ba:46:
e9:4f:39:66:94:0d:71:7b:0c:9e:a2:41:bb:43:33:35:3e:15:
9d:ab:14:60:c2:92:d5:cc:df:86:16:34:1f:47:ec:e4:72:7c:
94:05:25:ab:b6:ce:f0:7c:61:c8:e1:7a:fb:d2:da:60:bc:b7:
2b:cd:02:38:fa:ff:7d:54:38:a6:99:4f:89:b1:b5:48:e4:7a:
26:50:70:0f:4a:04:20:d4:4c:72:57:e3:18:d1:ee:9c:a9:82:
75:14:76:e0:6a:5f:3f:a6:a3:88:06:4a:44:e8:02:49:ab:e3:
d5:1e:e4:4d:53:31:4d:5a:91:48:88:8b:fc:93:b9:9e:aa:6b:
82:ae:5f:00:38:b5:c6:ad:17:cc:2e:b3:2b:57:ab:33:e8:ae:
f5:e1:9a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:25 2023 by rpki-client on console-ams.rpki-client.org