Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/KEs_PimTEG8be_BXzIEwCAJtCBA.roa
File: KEs_PimTEG8be_BXzIEwCAJtCBA.roa (raw, json)
Hash identifier: uWo1IaWY25dHXd6WiviAneUEYGTaMwb2Pfo1AuGh2t4=
Subject key identifier: 28:4B:3F:3E:29:93:10:6F:1B:7B:F0:57:CC:81:30:08:02:6D:08:10
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 08ED4F28
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/KEs_PimTEG8be_BXzIEwCAJtCBA.roa
Signing time: Thu 24 Mar 2022 09:58:56 +0000
ROA not before: Thu 24 Mar 2022 09:58:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208258
IP address blocks: 185.243.112.0/24 maxlen: 24
185.243.113.0/24 maxlen: 24
185.228.83.0/24 maxlen: 24
185.227.82.0/24 maxlen: 24
185.208.208.0/24 maxlen: 24
185.208.209.0/24 maxlen: 24
185.208.210.0/24 maxlen: 24
194.146.48.0/24 maxlen: 24
45.140.10.0/24 maxlen: 24
45.151.156.0/23 maxlen: 24
45.151.158.0/24 maxlen: 24
195.60.176.0/24 maxlen: 24
195.60.177.0/24 maxlen: 24
45.144.244.0/23 maxlen: 24
195.26.7.0/24 maxlen: 24
2a0b:3c40:17::/48 maxlen: 48
2a0b:3c40:12::/48 maxlen: 48
2a0e:5540:11::/48 maxlen: 48
2a0b:3c40:fca6::/48 maxlen: 48
2a0b:3c40:1::/48 maxlen: 48
2a0e:5540:100::/48 maxlen: 48
2a0e:5540::/48 maxlen: 48
2a0b:3c40:20::/48 maxlen: 48
2a0b:3c40:16::/48 maxlen: 48
2a0b:3c40:11::/48 maxlen: 48
2a0e:5540:10::/48 maxlen: 48
2a0b:3c40:15::/48 maxlen: 48
2a0e:5540:12::/48 maxlen: 48
2a0b:3c40:9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 149770024 (0x8ed4f28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Mar 24 09:58:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=284b3f3e2993106f1b7bf057cc813008026d0810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:17:11:98:5e:85:30:f9:f1:0a:76:65:90:84:
8a:2c:14:07:44:4b:e7:2b:64:11:01:66:cc:5c:e6:
b0:30:1e:33:55:c6:10:00:50:5e:66:bd:17:ea:2a:
bc:85:95:89:90:17:de:a8:5e:d7:50:67:c4:bc:fc:
b4:7f:ef:f2:11:19:90:02:29:c8:13:f7:fc:3a:76:
c8:d2:2b:82:e1:8e:36:2d:6a:c5:7d:08:ae:3f:95:
8f:f2:5b:c4:a3:0f:16:70:c9:9e:04:25:9a:f2:bd:
14:a0:5e:a3:3d:02:31:92:c4:14:5e:19:fe:10:f6:
87:7a:3b:15:d8:8e:c1:4f:5c:7b:e9:b2:ef:12:c0:
a5:00:0e:6b:b7:6f:fe:61:73:9c:e8:f2:c2:b5:13:
aa:76:e3:bb:d5:dd:16:eb:99:0d:eb:37:bc:df:69:
17:7a:4f:51:b5:07:ec:03:06:61:61:9a:bb:a6:de:
ea:5d:c2:fb:4a:06:28:56:ac:44:61:41:de:76:bb:
c0:be:33:ba:4a:d8:a6:cc:d5:51:76:17:ff:70:79:
5d:48:2b:eb:86:e8:1b:54:2a:dd:01:b0:c4:5c:dc:
da:98:47:4e:df:b9:dd:9b:ff:99:64:45:da:41:0f:
6e:e1:a1:07:28:6f:be:89:60:5d:40:0c:9a:82:a8:
a7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:4B:3F:3E:29:93:10:6F:1B:7B:F0:57:CC:81:30:08:02:6D:08:10
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/KEs_PimTEG8be_BXzIEwCAJtCBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.10.0/24
45.144.244.0/23
45.151.156.0-45.151.158.255
185.208.208.0-185.208.210.255
185.227.82.0/24
185.228.83.0/24
185.243.112.0/23
194.146.48.0/24
195.26.7.0/24
195.60.176.0/23
IPv6:
2a0b:3c40:1::/48
2a0b:3c40:9::/48
2a0b:3c40:11::-2a0b:3c40:12:ffff:ffff:ffff:ffff:ffff
2a0b:3c40:15::-2a0b:3c40:17:ffff:ffff:ffff:ffff:ffff
2a0b:3c40:20::/48
2a0b:3c40:fca6::/48
2a0e:5540::/48
2a0e:5540:10::-2a0e:5540:12:ffff:ffff:ffff:ffff:ffff
2a0e:5540:100::/48
Signature Algorithm: sha256WithRSAEncryption
1a:ee:63:55:8b:1f:c2:cc:05:24:2a:c9:4a:55:46:86:77:61:
02:1c:88:2d:e2:fd:54:a2:a3:cb:b5:9f:98:b1:1c:47:5e:9c:
0e:e4:9c:03:45:c1:63:b2:07:9e:de:b4:7a:c2:c3:f1:7d:02:
cc:c8:0e:34:3e:a2:98:35:79:d1:74:85:83:5f:32:16:f8:bd:
2d:d4:a0:87:0e:11:6a:73:4a:fc:23:0c:e4:5b:4f:ff:4e:cd:
a9:bd:68:a3:e4:5a:bc:66:ea:29:3e:b5:8c:5a:49:fe:5a:bf:
59:3a:8e:19:fa:12:28:d0:30:e3:3d:b4:ba:45:57:b4:12:d1:
bd:a6:ac:4b:1e:a5:98:9b:6a:0d:7c:94:b4:59:68:f5:5f:fb:
a1:4f:d2:fe:82:10:7b:34:3f:24:40:ca:40:95:52:df:d2:00:
c9:97:00:92:5e:0e:01:96:7d:95:68:80:22:5f:97:f2:37:33:
41:59:71:bd:4e:14:60:7d:f8:e5:ca:7d:b1:c6:c1:77:8d:c8:
8a:20:3a:b5:13:3d:eb:93:25:29:6c:ce:80:87:69:22:00:9e:
25:04:9b:c1:15:58:16:3f:ec:58:b0:61:c6:06:e6:12:32:84:
fa:d5:c2:30:3f:1a:9f:6d:d2:c5:3e:fa:f5:71:88:6d:8c:a7:
42:9a:d8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org