Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/cBySMGhR-U6DYikNF6m4ogHwhtY.roa
File: cBySMGhR-U6DYikNF6m4ogHwhtY.roa (raw, json)
Hash identifier: Ilwgh55lXT/VB/BKZHsyC/mXf+wzkBiq0zxEkbgtGgw=
Subject key identifier: 70:1C:92:30:68:51:F9:4E:83:62:29:0D:17:A9:B8:A2:01:F0:86:D6
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0184A39849A597B6C788778C45FCEFEA89AF
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/cBySMGhR-U6DYikNF6m4ogHwhtY.roa
Signing time: Wed 23 Nov 2022 08:26:17 +0000
ROA not before: Wed 23 Nov 2022 08:26:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210489
IP address blocks: 45.135.96.0/23 maxlen: 23
45.135.98.0/23 maxlen: 23
45.136.64.0/22 maxlen: 23
185.222.32.0/23 maxlen: 23
185.222.34.0/23 maxlen: 23
45.141.16.0/23 maxlen: 23
45.141.18.0/23 maxlen: 23
91.244.204.0/22 maxlen: 23
46.161.220.0/23 maxlen: 23
46.161.222.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:a3:98:49:a5:97:b6:c7:88:77:8c:45:fc:ef:ea:89:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Nov 23 08:26:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=701c92306851f94e8362290d17a9b8a201f086d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:57:13:89:50:36:b3:55:84:cc:a2:e6:bb:b9:
d1:7f:7d:7c:27:56:e6:2a:a6:cf:c8:52:e6:eb:d0:
2a:e4:de:73:b1:67:96:92:f5:ba:7e:46:b9:03:98:
ad:7c:74:40:f1:e3:77:54:b6:4e:8b:a1:27:56:a2:
a3:8b:59:b4:73:b7:dd:5f:7c:36:e2:29:90:5c:20:
7c:3b:1e:0f:8d:e8:25:ba:53:0e:c2:08:43:32:64:
4c:5b:b8:c0:86:94:ab:b5:af:e8:e7:7d:b2:cc:70:
f9:85:91:43:72:a8:a7:2a:0e:9a:3d:60:97:41:6a:
fb:77:f2:8c:12:be:3b:43:ce:5a:f2:95:88:f4:d8:
a8:aa:fd:b4:f1:a9:74:44:67:74:99:50:53:bf:9b:
0b:60:47:8b:00:21:31:d8:be:36:68:c9:c0:4b:dd:
2e:26:01:67:67:74:14:5a:1b:1f:93:72:c4:ae:59:
28:6c:8b:a3:0a:14:90:e8:c9:e7:59:e5:5e:f6:94:
f9:0e:3a:18:60:5e:37:4b:1c:0a:d8:90:a0:a4:b8:
b3:f4:7c:5f:24:ac:79:ba:f1:1e:15:62:fe:7a:ba:
c0:d0:46:50:91:c3:1a:b8:22:c6:9c:f5:49:72:83:
ce:96:b8:cd:25:13:13:ce:89:1c:b5:e0:e0:87:fa:
84:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1C:92:30:68:51:F9:4E:83:62:29:0D:17:A9:B8:A2:01:F0:86:D6
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/cBySMGhR-U6DYikNF6m4ogHwhtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.96.0/22
45.136.64.0/22
45.141.16.0/22
46.161.220.0/22
91.244.204.0/22
185.222.32.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:92:63:4a:eb:a1:2a:cc:76:b1:6c:27:f0:51:91:56:21:e0:
26:90:34:fe:1a:08:48:2a:e2:e4:ca:e0:2e:da:97:98:ba:3a:
46:68:6b:95:4e:cc:ec:9e:9c:e1:41:76:6b:d0:be:1e:0b:3e:
ec:85:38:18:60:f2:b0:8d:6a:f0:fc:61:e0:42:6b:ae:ad:5b:
61:13:cb:ce:1f:48:88:9d:56:fc:a3:2b:87:6b:3e:c9:99:43:
3f:d4:4a:7a:b6:bf:88:bc:5e:cd:23:c1:f5:19:c3:10:98:e0:
63:ae:8e:0f:ef:21:1b:2c:57:ab:9f:6a:19:7a:f9:02:9d:2e:
00:2e:c8:44:24:c7:e2:9f:2e:93:d6:b8:fb:35:4c:d5:7a:98:
d5:aa:81:5a:e7:13:12:c8:a9:27:26:f9:38:f0:08:18:5c:fe:
7d:d7:a6:eb:22:ad:a6:ec:a0:c7:b0:4d:7e:83:5d:1e:30:b0:
ce:2b:12:b8:a8:36:eb:9a:60:23:0b:26:e4:5c:bb:ec:9f:37:
b8:fe:03:45:91:4b:12:44:ab:cf:e5:bf:ad:21:d2:9b:97:31:
fe:5b:6e:65:5a:ee:5c:c3:44:5b:6a:68:88:f8:35:c0:a1:2f:
68:28:df:fe:a4:9c:5c:ea:8d:a3:5d:71:e1:a3:15:76:3b:37:
5d:7f:85:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:17 2024 by rpki-client on console-ams.rpki-client.org