Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/wp4dsnQ6bQGE5XpvToIUSY8IYXI.roa
File: wp4dsnQ6bQGE5XpvToIUSY8IYXI.roa (raw, json)
Hash identifier: LD2BdQpG8+j+wE2++9nCy3yOOx/0Qv3fT3v9svqeMxQ=
Subject key identifier: C2:9E:1D:B2:74:3A:6D:01:84:E5:7A:6F:4E:82:14:49:8F:08:61:72
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 1A9C1C5A
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/wp4dsnQ6bQGE5XpvToIUSY8IYXI.roa
Signing time: Thu 30 Jun 2022 15:51:02 +0000
ROA not before: Thu 30 Jun 2022 15:51:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52423
IP address blocks: 45.85.85.0/24 maxlen: 24
185.185.248.0/24 maxlen: 24
185.185.249.0/24 maxlen: 24
45.85.86.0/24 maxlen: 24
77.243.92.0/24 maxlen: 32
185.190.80.0/24 maxlen: 32
77.243.94.0/24 maxlen: 32
185.184.141.0/24 maxlen: 32
185.184.143.0/24 maxlen: 24
185.184.142.0/24 maxlen: 24
91.188.200.0/24 maxlen: 32
45.130.72.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 446438490 (0x1a9c1c5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jun 30 15:51:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c29e1db2743a6d0184e57a6f4e8214498f086172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:96:15:a4:40:a6:fa:0e:fc:09:1d:f4:c1:16:
b8:3b:62:14:02:e5:40:14:64:b6:74:4c:64:b3:44:
ac:16:ba:9d:51:dc:31:f1:9a:a2:56:8d:8f:f5:5f:
97:c8:d6:49:e6:f8:ee:82:04:2c:ec:0c:8b:ca:89:
5f:e4:c8:c0:14:d7:8d:46:ec:26:1a:8f:40:c9:b1:
36:9b:f2:8a:59:90:94:56:32:41:c1:6b:c8:22:f4:
0b:f5:23:bf:64:7c:5a:37:8d:19:1a:73:4c:23:1b:
41:8b:d3:7b:bf:9b:0c:b0:44:6c:ec:ca:fd:11:04:
b0:c5:ef:8b:11:1f:28:fd:10:00:26:88:0f:33:b5:
c9:9f:1a:cf:82:63:6d:5d:ad:da:ce:3f:6a:45:e4:
33:95:1b:fe:97:09:59:8c:c4:71:f5:e0:e2:f0:a2:
b4:63:80:ff:b7:e5:8d:74:e3:93:cf:2f:68:f1:3f:
65:4e:bc:c9:a0:e2:23:71:85:f3:68:90:78:33:68:
ae:4a:fa:02:57:74:6e:da:fd:c9:56:2b:34:1f:fb:
c5:ee:0e:4e:ca:05:25:89:8e:9a:fc:c0:62:13:39:
6f:45:2b:6f:6e:48:2f:b4:b1:88:c9:d0:bc:32:8d:
ad:78:a3:69:b2:7f:09:dd:ea:5c:93:99:63:87:19:
95:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9E:1D:B2:74:3A:6D:01:84:E5:7A:6F:4E:82:14:49:8F:08:61:72
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/wp4dsnQ6bQGE5XpvToIUSY8IYXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.85.0-45.85.86.255
45.130.72.0/23
77.243.92.0/24
77.243.94.0/24
91.188.200.0/24
185.184.141.0-185.184.143.255
185.185.248.0/23
185.190.80.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:74:d1:43:36:31:07:7e:12:79:58:e3:f1:2e:44:3f:60:56:
e3:c3:2c:37:a0:a7:ef:bd:d8:e2:c9:2a:3a:a3:75:62:97:21:
4f:10:d4:5b:1c:42:8c:fa:f2:bd:f2:6d:8e:77:16:ab:c9:5a:
a5:26:39:2a:e0:c8:6c:c1:eb:61:c4:e5:d3:8a:de:89:91:9e:
7c:72:f7:28:8e:06:fb:8b:93:55:d2:e1:b3:62:fd:79:d4:3a:
88:78:37:80:ea:a4:1f:f0:68:30:b3:a9:33:66:16:02:25:fc:
6a:06:a8:2a:dd:0c:10:9c:06:dc:2d:c9:c4:60:ed:c8:8f:fe:
0f:9a:e9:fa:a1:25:27:e7:e0:04:9a:43:4c:ef:35:13:d4:36:
67:d6:4c:e7:0e:ad:e8:53:ed:b4:6c:f2:21:1f:26:8b:7a:e7:
78:c0:08:0b:05:45:2d:83:d2:50:9e:ff:ea:bf:ad:f0:01:0d:
fe:64:2c:db:45:0f:59:bd:e3:c4:29:8a:d5:9a:7b:b0:10:70:
36:f1:98:e6:f7:8a:3b:f2:9f:d1:d2:5b:b6:1f:e7:2a:3d:a0:
2c:d9:9f:7d:a3:18:e5:ad:6e:03:b2:42:6e:f0:e6:1b:9f:c6:
ad:2a:bf:c0:53:1e:a4:2d:77:fb:f1:e8:1f:8a:6e:19:1f:43:
48:3c:3f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:18 2023 by rpki-client on console-fra.rpki-client.org