Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/saij7m9OeJxVvUEhdyUrmJtiqbQ.roa
File: saij7m9OeJxVvUEhdyUrmJtiqbQ.roa (raw, json)
Hash identifier: E37QiNEJ+8QS3cVBua5fGBv/CvXrw5c27tGCG90eYCk=
Subject key identifier: B1:A8:A3:EE:6F:4E:78:9C:55:BD:41:21:77:25:2B:98:9B:62:A9:B4
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0184403F702C154BBFD2ACCDCC1831C78536
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/saij7m9OeJxVvUEhdyUrmJtiqbQ.roa
Signing time: Fri 04 Nov 2022 01:26:50 +0000
ROA not before: Fri 04 Nov 2022 01:26:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208258
IP address blocks: 185.243.112.0/24 maxlen: 24
185.243.113.0/24 maxlen: 24
185.228.83.0/24 maxlen: 24
185.227.82.0/24 maxlen: 24
185.208.208.0/24 maxlen: 24
185.208.209.0/24 maxlen: 24
185.208.210.0/24 maxlen: 24
194.146.48.0/24 maxlen: 24
45.140.10.0/24 maxlen: 24
45.151.156.0/23 maxlen: 24
45.151.158.0/24 maxlen: 24
45.144.244.0/23 maxlen: 24
195.26.6.0/24 maxlen: 24
195.26.7.0/24 maxlen: 24
2a0b:3c40:17::/48 maxlen: 48
2a0b:3c40:12::/48 maxlen: 48
2a0e:5540:11::/48 maxlen: 48
2a0b:3c40:fca6::/48 maxlen: 48
2a0b:3c40:1::/48 maxlen: 48
2a0b:3c40:21::/48 maxlen: 48
2a0e:5540::/48 maxlen: 48
2a0e:5540:100::/48 maxlen: 48
2a0b:3c40:20::/48 maxlen: 48
2a0b:3c40:16::/48 maxlen: 48
2a0b:3c40:11::/48 maxlen: 48
2a0e:5540:10::/48 maxlen: 48
2a0b:3c40:15::/48 maxlen: 48
2a0e:5540:12::/48 maxlen: 48
2a0b:3c40:9::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:40:3f:70:2c:15:4b:bf:d2:ac:cd:cc:18:31:c7:85:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Nov 4 01:26:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b1a8a3ee6f4e789c55bd412177252b989b62a9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d0:0d:21:4e:4d:03:d6:db:e8:34:35:4e:6c:
b5:dc:99:5a:a3:d6:3d:48:9b:16:c4:d4:01:0e:e5:
74:41:5b:c7:40:19:a9:fb:df:5d:4c:97:c9:68:ba:
7d:7f:e3:3c:7f:c2:36:5c:a4:f4:30:62:e5:53:e0:
e6:1c:b6:75:bb:7d:c5:8a:58:ae:02:65:32:c5:33:
c1:8e:9a:45:fb:d7:db:6e:1d:45:d9:a8:02:f0:12:
a6:52:09:d4:8b:d7:e9:c0:61:e9:0c:aa:47:a0:11:
cc:8b:41:e0:1e:a3:c5:b3:68:40:8e:cb:82:0f:c8:
99:55:df:8e:a8:4e:86:88:37:83:66:1a:5e:dc:12:
ae:05:0c:14:e2:87:a7:1d:81:b1:c2:f2:74:5c:a4:
42:5e:61:46:e3:47:89:b9:3c:93:cb:25:69:d2:24:
08:86:ed:b5:32:27:dd:28:f5:a0:4c:6f:e6:47:c7:
f8:72:0a:37:2a:b3:95:25:a3:1e:85:cb:04:cc:48:
d0:90:0e:a9:fc:22:6c:0a:a6:ec:86:58:59:58:b8:
64:4f:a7:82:3a:e9:fb:04:15:3f:ba:22:d1:97:47:
44:9f:01:11:25:81:05:fe:03:f5:4c:84:14:9c:94:
70:11:6c:e5:ae:3e:1b:6d:35:58:2b:32:4b:f5:e3:
7e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A8:A3:EE:6F:4E:78:9C:55:BD:41:21:77:25:2B:98:9B:62:A9:B4
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/saij7m9OeJxVvUEhdyUrmJtiqbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.10.0/24
45.144.244.0/23
45.151.156.0-45.151.158.255
185.208.208.0-185.208.210.255
185.227.82.0/24
185.228.83.0/24
185.243.112.0/23
194.146.48.0/24
195.26.6.0/23
IPv6:
2a0b:3c40:1::/48
2a0b:3c40:9::/48
2a0b:3c40:11::-2a0b:3c40:12:ffff:ffff:ffff:ffff:ffff
2a0b:3c40:15::-2a0b:3c40:17:ffff:ffff:ffff:ffff:ffff
2a0b:3c40:20::/47
2a0b:3c40:fca6::/48
2a0e:5540::/48
2a0e:5540:10::-2a0e:5540:12:ffff:ffff:ffff:ffff:ffff
2a0e:5540:100::/48
Signature Algorithm: sha256WithRSAEncryption
bf:34:48:5f:7d:a2:d0:0d:0b:cf:70:6f:a1:39:5a:d1:c1:1d:
41:e4:ef:d5:59:6e:fc:2b:f5:9e:2a:ff:da:40:98:7f:b2:43:
57:1e:ad:e0:77:56:0d:ef:ec:17:bb:fd:69:48:42:80:f0:e8:
17:24:6a:ef:e4:87:63:4b:39:fc:20:4b:19:3a:86:84:e9:20:
87:e7:05:61:c5:1c:f5:bc:a8:f1:9b:c4:69:e4:34:fb:12:4f:
22:d5:38:29:37:d9:34:70:0e:03:7d:a1:d5:8d:b8:5b:51:73:
ec:38:62:4d:27:d8:8c:d0:d6:d5:3d:ce:0d:dc:47:7d:bc:11:
81:ab:fb:bb:c9:15:b7:e6:02:16:11:30:9f:d7:91:b4:05:77:
46:c6:17:a9:81:99:ee:09:b8:d8:33:ba:5f:ef:28:19:cf:2d:
0c:8e:33:9c:e0:cf:dc:82:cf:82:1c:28:df:ce:9b:86:e8:85:
16:14:a0:7b:e3:6d:e1:3c:d7:be:c0:99:6a:56:d4:57:93:55:
cd:eb:7c:4b:21:6e:92:10:41:1f:fe:32:93:35:4f:4d:ef:ad:
92:27:7c:ed:b2:45:e7:cc:fa:89:76:ca:4a:25:f9:5b:b5:07:
67:6e:6f:25:6d:51:60:ac:86:0b:9c:fd:04:af:f4:9f:93:37:
ca:9b:66:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:25 2024 by rpki-client on console-fra.rpki-client.org