Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/vMOPjvAv6zW2kcHaDth4m_qPD7I.roa
File: vMOPjvAv6zW2kcHaDth4m_qPD7I.roa (raw, json)
Hash identifier: Avm7jhc0yTZ0v5uycxd1sjRt0FqOB86NfnyQEGYpTQc=
Subject key identifier: BC:C3:8F:8E:F0:2F:EB:35:B6:91:C1:DA:0E:D8:78:9B:FA:8F:0F:B2
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01850FBC40CDAF43F48982B4000A49D7A3B1
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/vMOPjvAv6zW2kcHaDth4m_qPD7I.roa
Signing time: Wed 14 Dec 2022 08:24:33 +0000
ROA not before: Wed 14 Dec 2022 08:24:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210636
IP address blocks: 45.139.254.0/23 maxlen: 24
45.94.30.0/24 maxlen: 24
45.94.28.0/23 maxlen: 23
45.148.26.0/24 maxlen: 24
45.88.246.0/24 maxlen: 24
45.132.192.0/24 maxlen: 24
45.88.247.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0f:bc:40:cd:af:43:f4:89:82:b4:00:0a:49:d7:a3:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Dec 14 08:24:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bcc38f8ef02feb35b691c1da0ed8789bfa8f0fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:05:c8:50:04:f8:c9:65:61:3c:9b:b8:cb:79:
a9:1b:23:d6:7d:19:82:14:55:ef:27:3c:4a:c2:01:
c2:cb:3c:23:f1:88:73:d5:ef:b0:9a:31:b8:00:89:
6a:02:2a:ca:64:be:a4:67:f4:57:d6:07:5c:22:8b:
1a:99:21:ad:83:8d:4f:af:4b:86:6e:90:15:a0:6c:
0c:f2:9d:02:bf:7e:e9:56:00:b3:a9:78:48:46:b4:
b8:bf:ab:b4:a5:be:4e:32:68:97:f4:af:c1:ec:2e:
f1:7f:ac:62:2a:ee:0b:21:e0:1d:0a:ac:70:97:18:
94:35:24:b9:f0:78:00:98:83:33:d6:ac:99:6c:51:
ec:71:58:66:74:9e:e3:37:b1:58:9c:f7:df:76:a4:
54:55:b4:da:d2:dc:29:50:dd:ff:45:39:9a:59:b6:
e1:e9:25:1a:01:0f:aa:fb:0e:d0:7a:c8:4c:43:54:
4a:da:f4:ed:b1:d8:82:b1:3a:05:55:d6:90:fd:55:
72:c1:b0:ff:80:a4:da:13:e8:57:79:e5:71:93:86:
97:85:47:3e:68:4b:63:9a:47:bf:98:36:1d:17:11:
4b:56:03:81:cd:fd:ee:7a:74:13:64:1e:3b:0c:f8:
8a:d0:8a:f8:a1:e9:bd:d2:4a:94:cd:d7:a6:20:01:
36:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C3:8F:8E:F0:2F:EB:35:B6:91:C1:DA:0E:D8:78:9B:FA:8F:0F:B2
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/vMOPjvAv6zW2kcHaDth4m_qPD7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.246.0/23
45.94.28.0-45.94.30.255
45.132.192.0/24
45.139.254.0/23
45.148.26.0/24
Signature Algorithm: sha256WithRSAEncryption
21:c8:3e:23:5f:ae:98:f2:35:ef:23:7f:77:5b:22:b0:5c:98:
03:cf:a2:3f:f4:73:0c:3b:76:fe:7e:62:fe:5b:41:95:4c:1a:
85:d0:b4:c7:85:61:13:00:2c:e4:19:aa:9f:ed:34:3d:a7:86:
c8:d2:46:17:aa:99:be:3e:c1:f8:11:c0:e2:bd:36:07:a1:07:
7a:78:4f:a1:1d:93:a7:78:71:7b:87:e5:1e:99:78:a3:9c:4e:
ae:da:75:e1:40:c2:19:97:f3:2c:c4:70:64:6b:1f:f9:cf:af:
c3:0e:95:68:f7:d9:52:82:3c:ff:8f:11:73:a0:41:4f:ea:b6:
65:11:ef:2f:68:01:91:dd:2d:55:e7:07:91:79:68:86:2e:da:
3d:8f:ff:ae:4c:a9:66:e8:5b:55:57:d3:11:12:b8:d6:cd:6c:
a2:34:5b:42:34:63:97:15:e2:06:1f:d3:9e:08:12:fb:7b:35:
ac:50:f9:39:c3:e2:f6:2d:d0:ec:c0:97:65:56:d6:66:d3:de:
73:db:98:26:81:57:27:29:f7:4b:76:2e:57:a1:dd:78:6d:02:
ce:21:e6:35:4a:6a:30:1e:a3:ef:cc:33:d5:49:91:11:cf:e2:
08:e4:b2:b9:9c:8d:a3:63:f1:d8:a1:f2:8b:e0:cc:be:a7:c3:
64:af:e5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:25 2023 by rpki-client on console-ams.rpki-client.org