Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/pPH9if9zfCxPCD2UQ0kHbqhnLpE.roa
File: pPH9if9zfCxPCD2UQ0kHbqhnLpE.roa (raw, json)
Hash identifier: BclwUpNTfrU3SOUk+XRcdcRUm7onnwhAK77ub6liP/M=
Subject key identifier: A4:F1:FD:89:FF:73:7C:2C:4F:08:3D:94:43:49:07:6E:A8:67:2E:91
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 1BA50708
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/pPH9if9zfCxPCD2UQ0kHbqhnLpE.roa
Signing time: Thu 09 Jun 2022 08:44:02 +0000
ROA not before: Thu 09 Jun 2022 08:44:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206092
IP address blocks: 45.86.202.0/24 maxlen: 24
45.86.200.0/24 maxlen: 24
136.144.17.0/24 maxlen: 24
193.37.33.0/24 maxlen: 24
193.37.32.0/24 maxlen: 24
136.144.19.0/24 maxlen: 24
194.5.48.0/24 maxlen: 24
194.5.49.0/24 maxlen: 24
136.144.33.0/24 maxlen: 24
194.34.172.0/24 maxlen: 24
194.5.52.0/24 maxlen: 24
194.5.53.0/24 maxlen: 24
136.144.42.0/24 maxlen: 24
194.34.173.0/24 maxlen: 24
45.84.217.0/24 maxlen: 24
45.84.218.0/24 maxlen: 24
45.84.216.0/24 maxlen: 24
193.36.224.0/24 maxlen: 24
193.36.225.0/24 maxlen: 24
45.95.243.0/24 maxlen: 24
193.176.211.0/24 maxlen: 24
45.154.138.0/24 maxlen: 24
45.146.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 463800072 (0x1ba50708)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jun 9 08:44:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a4f1fd89ff737c2c4f083d944349076ea8672e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f2:80:25:c9:fb:93:1d:a2:75:76:53:97:18:
55:30:c2:eb:37:09:7d:4b:d3:e8:7e:7e:71:a1:f8:
cc:47:a4:8b:9f:47:36:1e:04:33:d0:a2:ae:16:33:
41:e4:4f:d5:d3:d3:c3:d9:85:3a:24:b7:d8:3e:09:
ef:4d:dd:a3:26:fe:bd:54:a7:3f:f3:76:cc:54:c5:
a4:4e:e2:b4:b7:78:06:11:af:24:90:2c:bb:80:4f:
35:d3:12:60:f8:0b:c9:ce:77:5b:86:83:cf:d5:86:
cd:eb:cc:96:b1:d9:e9:e7:2e:03:9d:27:1e:3f:c9:
83:87:af:30:77:91:9b:3d:c4:67:d9:90:ce:24:00:
65:54:58:8e:ad:10:68:54:a2:09:17:55:f7:7d:17:
cb:17:42:68:1f:54:21:fb:5f:8f:4b:a1:02:20:02:
6f:4c:50:f0:70:34:cd:1f:c4:75:16:22:55:b8:d7:
36:25:f8:81:64:a4:30:57:5a:d6:6f:5e:37:e2:e4:
d5:7f:46:5c:41:99:af:aa:a8:00:e3:62:1f:6a:58:
da:ce:0a:57:38:a0:5d:6c:a1:d5:e6:a1:2c:dc:f0:
21:ab:0f:23:27:72:09:6c:46:83:2b:73:2a:b5:f2:
ad:3e:8e:cd:ba:b8:db:5b:ad:da:17:1a:9b:cd:ec:
bf:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:F1:FD:89:FF:73:7C:2C:4F:08:3D:94:43:49:07:6E:A8:67:2E:91
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/pPH9if9zfCxPCD2UQ0kHbqhnLpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.216.0-45.84.218.255
45.86.200.0/24
45.86.202.0/24
45.95.243.0/24
45.146.54.0/24
45.154.138.0/24
136.144.17.0/24
136.144.19.0/24
136.144.33.0/24
136.144.42.0/24
193.36.224.0/23
193.37.32.0/23
193.176.211.0/24
194.5.48.0/23
194.5.52.0/23
194.34.172.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:44:b4:71:ad:c0:3b:cd:ba:33:a8:6a:e5:b4:e2:bb:39:00:
1f:72:ad:8e:0e:b9:7b:f4:a0:9b:88:8a:af:09:16:5f:7a:7d:
9b:6d:b0:2f:37:ea:57:b8:6a:98:a0:15:90:c1:ea:c7:28:76:
d7:b9:6e:76:04:6b:4b:c8:86:d6:52:b9:15:ad:ec:64:30:fa:
cd:2e:a8:50:51:12:5c:89:09:c6:c7:d3:a0:82:c8:34:fe:3b:
38:12:23:59:7c:b2:12:75:06:25:23:3f:ea:10:ee:49:16:44:
39:fa:7d:f9:fe:dd:91:99:6b:30:99:7a:a2:e8:34:5d:08:39:
ba:b3:df:4c:54:2b:d0:a3:97:03:50:6d:cd:cd:5f:19:6b:75:
92:9c:b5:85:30:79:20:ef:a8:47:9b:63:ad:46:a6:68:af:d1:
88:49:a2:c7:b7:21:00:08:cb:0d:95:b8:fa:b8:87:9a:d1:1c:
9b:e0:95:19:c9:7a:90:41:77:fb:bb:c4:41:e8:30:47:76:ba:
f7:cc:4c:51:e5:96:21:d6:ed:a1:73:53:86:fc:d6:ca:8a:d9:
61:50:9a:02:e6:41:ef:bd:ec:ca:3b:b1:2d:5f:0c:74:d6:83:
0d:a1:6d:1c:3b:76:4a:93:53:0a:83:7a:d6:47:0a:c0:b1:28:
40:cf:0e:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:25 2023 by rpki-client on console-ams.rpki-client.org