Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/yFCG5BzvLunwcrVNrRnQtVhc_HM.roa
File: yFCG5BzvLunwcrVNrRnQtVhc_HM.roa (raw, json)
Hash identifier: MSGTF4uvPdblo6RmVioB3FwBAZKF9utEmFYLisvZgvI=
Subject key identifier: C8:50:86:E4:1C:EF:2E:E9:F0:72:B5:4D:AD:19:D0:B5:58:5C:FC:73
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 19CD195B
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/yFCG5BzvLunwcrVNrRnQtVhc_HM.roa
Signing time: Sat 01 Jan 2022 15:56:37 +0000
ROA not before: Sat 01 Jan 2022 15:56:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8038
IP address blocks: 45.95.240.0/24 maxlen: 24
45.149.104.0/24 maxlen: 24
45.87.28.0/24 maxlen: 24
45.130.142.0/24 maxlen: 24
45.134.222.0/24 maxlen: 24
45.148.96.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 432871771 (0x19cd195b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 15:56:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c85086e41cef2ee9f072b54dad19d0b5585cfc73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1e:cf:52:30:d2:de:c0:39:10:68:0e:8e:6d:
fd:24:40:59:bf:ee:c4:aa:ec:ba:04:15:bd:68:31:
e9:e4:ed:39:ce:40:9f:00:ce:46:a3:da:14:b0:af:
47:9d:1b:8f:d2:80:ed:7d:21:9a:79:4e:46:72:91:
69:a4:a3:27:d6:bb:81:53:a2:eb:e9:ca:fc:32:78:
e3:b7:8c:86:b9:05:00:89:5a:88:7a:cf:52:57:b1:
4d:14:23:6f:c5:0b:b9:b8:dd:d9:a3:e6:93:5e:91:
ce:59:2e:7f:fa:08:5a:12:ee:f6:98:88:91:21:b2:
1d:01:72:aa:ae:86:c3:58:b3:8a:13:c0:5d:a7:7d:
ba:84:ea:e6:62:85:c2:0d:28:18:fd:e8:94:30:9b:
37:b2:05:80:05:48:d2:35:e5:a8:0f:8f:0a:a7:05:
63:a0:ab:24:74:45:16:6b:f9:52:48:a5:30:97:ce:
ab:27:1b:00:51:b9:c5:8a:01:a1:c8:37:c3:73:a3:
83:7e:01:cd:d5:6c:b1:1e:82:b3:bc:a9:83:95:98:
06:cd:b7:d1:a4:cb:f8:67:f6:fc:ea:ff:ae:a0:1a:
ba:a7:e9:72:17:c8:fc:e6:a8:d0:92:c5:e3:51:2d:
18:d1:a9:3e:b3:d3:ef:c7:23:f7:90:a1:ec:1e:4f:
03:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:50:86:E4:1C:EF:2E:E9:F0:72:B5:4D:AD:19:D0:B5:58:5C:FC:73
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/yFCG5BzvLunwcrVNrRnQtVhc_HM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.28.0/24
45.95.240.0/24
45.130.142.0/24
45.134.222.0/24
45.148.96.0/24
45.149.104.0/24
Signature Algorithm: sha256WithRSAEncryption
13:2e:52:2e:aa:45:73:be:68:ec:bd:da:22:6f:f7:e8:f7:f0:
11:41:b4:65:40:b6:6c:f7:c1:d2:82:23:b9:5f:12:13:b2:d2:
d8:93:18:2a:8d:94:ac:99:d0:61:05:7e:0c:1b:fd:63:2e:e5:
e9:df:bf:cb:76:1a:57:23:e9:5f:01:7e:e5:73:e9:57:6d:0e:
df:b5:67:21:37:5c:2a:63:57:c9:8a:16:f4:25:c6:7c:6b:59:
d6:22:2b:78:9c:f7:9a:e1:6b:94:d0:7c:8c:a3:b7:8f:ac:dc:
b4:2a:ae:5a:a2:65:be:6e:12:76:03:48:73:11:ca:88:25:80:
82:10:d2:08:d5:be:a9:03:aa:f8:9c:c4:9b:3c:84:f6:94:a5:
54:43:46:47:42:2a:a8:a4:dc:c1:7c:44:7c:b1:fd:44:ad:e1:
54:60:eb:cf:8d:fe:11:ea:13:e4:bd:62:5e:05:bd:b6:d6:e5:
78:4d:c4:ca:d9:4a:02:0f:d8:60:ee:d4:29:ba:82:25:87:95:
57:36:7d:da:e9:f1:2e:fe:dd:2f:2e:b6:8a:ee:d2:78:b0:09:
bd:a2:10:d5:29:a3:a9:2f:13:25:0a:b5:23:32:3b:23:a2:d0:
2b:7e:9c:86:da:dc:0f:32:35:ef:82:f3:70:8c:40:55:69:10:
66:55:66:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:25 2023 by rpki-client on console-ams.rpki-client.org