Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/vx4dNNgUKtHhUATQ5z-gzEvn0YA.roa
File: vx4dNNgUKtHhUATQ5z-gzEvn0YA.roa (raw, json)
Hash identifier: L+jGh6uL0smvneWi0+MX812oGpxa3iSZkckrwQYQxQY=
Subject key identifier: BF:1E:1D:34:D8:14:2A:D1:E1:50:04:D0:E7:3F:A0:CC:4B:E7:D1:80
Certificate issuer: /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Certificate serial: 08670B2E
Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/vx4dNNgUKtHhUATQ5z-gzEvn0YA.roa
Signing time: Tue 12 Apr 2022 08:02:40 +0000
ROA not before: Tue 12 Apr 2022 08:02:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13101
IP address blocks: 45.145.236.0/22 maxlen: 22
185.234.200.0/22 maxlen: 22
192.166.40.0/22 maxlen: 22
46.22.152.0/21 maxlen: 21
202.71.144.0/21 maxlen: 21
109.94.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 140970798 (0x8670b2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Validity
Not Before: Apr 12 08:02:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bf1e1d34d8142ad1e15004d0e73fa0cc4be7d180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2e:a7:46:b2:b9:80:fd:ab:eb:9a:cb:c4:5a:
95:76:a3:91:68:4b:53:10:8c:58:71:13:f0:4c:4b:
5c:bf:58:72:0f:0c:60:9e:c6:3e:54:d2:70:c8:10:
32:5d:e7:ab:e3:52:cf:d9:c1:0b:c0:dd:b2:45:62:
6e:18:06:c1:a5:af:d4:f7:d8:72:7e:d5:b0:62:4f:
fe:52:8e:6c:d8:da:21:e6:f4:78:f4:59:2d:bf:7a:
8f:ea:4d:21:8c:99:d8:bc:97:94:88:ec:f8:10:07:
e5:bc:03:4c:94:56:6b:51:50:d7:f6:65:a9:02:b2:
9b:9f:fb:17:7b:72:f6:f8:b5:6c:d9:82:ff:b8:fe:
9e:0c:24:8a:79:7b:8d:5e:a1:95:c5:88:10:22:30:
e3:10:22:f3:6a:dc:7a:8a:30:a7:df:c7:22:10:df:
20:f4:a8:93:56:f3:e8:52:d3:85:2e:93:ca:b3:29:
a4:86:26:18:34:fb:87:82:98:56:e6:ca:2e:61:24:
d4:0a:bd:89:7e:7b:87:a8:9d:12:2d:12:3f:95:3b:
c3:7e:a3:0b:90:b3:6a:9d:d6:dc:69:65:d5:43:18:
be:a9:5f:0f:72:d2:58:57:f3:f0:70:58:42:bd:55:
a7:ec:f0:49:75:c4:3e:66:ea:28:e5:b6:f4:d5:9c:
89:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1E:1D:34:D8:14:2A:D1:E1:50:04:D0:E7:3F:A0:CC:4B:E7:D1:80
X509v3 Authority Key Identifier:
keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/vx4dNNgUKtHhUATQ5z-gzEvn0YA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.236.0/22
46.22.152.0/21
109.94.212.0/22
185.234.200.0/22
192.166.40.0/22
202.71.144.0/21
Signature Algorithm: sha256WithRSAEncryption
73:63:21:09:38:4a:08:58:d6:56:a9:00:97:4b:ac:f8:a7:75:
93:00:76:45:97:70:73:2a:fe:68:41:e4:88:e3:d0:d2:d1:bb:
ae:07:80:a6:41:bd:49:43:63:51:44:4d:40:04:1a:1f:1b:7e:
af:78:51:ee:a0:0c:f7:f7:c7:cf:73:d9:f0:4d:10:fb:0b:9f:
30:e5:1a:2f:30:4e:96:43:f2:3d:78:ad:57:39:50:99:55:31:
c5:eb:0e:35:ab:44:5e:4e:74:8c:b4:65:89:29:95:78:8a:2f:
31:6c:4b:e5:5e:48:f6:0b:cb:4c:09:03:19:94:eb:20:cd:8b:
24:5e:f2:d9:42:9e:a4:c3:20:9c:30:f6:42:d3:75:3a:50:0d:
3b:7a:92:f4:de:35:45:e5:f9:58:dc:02:b6:23:25:ae:cd:de:
bf:e6:29:7c:df:9a:bf:50:af:9b:f3:86:29:1e:20:27:db:e1:
7c:27:20:8a:cb:c6:0f:f3:8a:a4:7c:88:4a:7b:f5:1a:48:54:
f8:68:9f:fa:87:1e:9e:db:4e:ee:f7:fb:3f:4c:84:4e:33:cc:
b3:6b:36:67:3d:03:6d:9e:a8:f2:d7:82:28:fc:61:a9:a8:04:
b6:f0:88:2e:19:6d:94:fa:a6:00:ca:2d:84:0e:c9:3c:72:04:
cd:e2:ac:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:22 2024 by rpki-client on console-fra.rpki-client.org