Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/yBxXCbdlxj6OJZQOhm9Pw9A1OMo.roa
File: yBxXCbdlxj6OJZQOhm9Pw9A1OMo.roa (raw, json)
Hash identifier: 1pcy20qNFTtjhjHiHiJeAIjzHv3pG1+6Qqgh0k4R+as=
Subject key identifier: C8:1C:57:09:B7:65:C6:3E:8E:25:94:0E:86:6F:4F:C3:D0:35:38:CA
Certificate issuer: /CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Certificate serial: 05A9458C
Authority key identifier: 8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/yBxXCbdlxj6OJZQOhm9Pw9A1OMo.roa
Signing time: Mon 14 Feb 2022 11:39:47 +0000
ROA not before: Mon 14 Feb 2022 11:39:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35489
IP address blocks: 45.133.100.0/24 maxlen: 24
45.133.101.0/24 maxlen: 24
193.8.4.0/24 maxlen: 24
193.8.4.0/23 maxlen: 23
193.8.7.0/24 maxlen: 24
193.8.5.0/24 maxlen: 24
193.8.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94979468 (0x5a9458c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a1ce1d135bf2cf8e8c13f33ec11c8523703dc75
Validity
Not Before: Feb 14 11:39:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c81c5709b765c63e8e25940e866f4fc3d03538ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b4:dc:72:8c:eb:ac:7c:31:b9:a2:39:4f:e8:
29:89:10:b3:1f:53:6d:78:d5:89:aa:68:45:82:bc:
17:68:0e:00:84:d2:9e:07:a1:7e:c8:69:6b:aa:7e:
70:33:43:8b:b8:08:98:dd:84:41:b2:77:ac:f3:d5:
8b:19:e5:c8:95:04:d7:cd:7d:b6:4b:f7:08:08:93:
6b:53:bb:3d:5e:47:03:10:81:9a:27:de:be:8c:b8:
a0:f6:d6:b7:5c:58:9f:9d:fa:04:2e:c7:2e:17:68:
ae:41:fd:ec:f5:4a:ed:55:7c:fe:bb:c6:95:b6:81:
43:ee:2a:39:96:40:78:be:b3:89:4b:36:e0:45:58:
33:c8:c3:1b:fa:54:fa:04:66:11:e4:7b:15:16:6b:
55:f0:65:f0:19:d2:56:16:62:4b:86:37:98:e8:2f:
5d:80:c5:cf:a2:fd:93:14:01:ee:63:05:46:11:e2:
ff:f1:0c:76:a3:62:66:dd:d3:a7:d7:05:a6:17:62:
9a:b3:a8:4c:be:6d:47:3c:d8:e0:20:df:dc:6c:4d:
06:8a:3c:d5:93:56:c6:39:0d:d4:f4:ac:50:88:cc:
ee:8f:62:52:a8:75:68:c4:2d:00:d0:a5:92:35:5e:
f9:2d:89:30:ed:d7:46:37:d6:bf:d6:7b:f1:ed:86:
e0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1C:57:09:B7:65:C6:3E:8E:25:94:0E:86:6F:4F:C3:D0:35:38:CA
X509v3 Authority Key Identifier:
keyid:8A:1C:E1:D1:35:BF:2C:F8:E8:C1:3F:33:EC:11:C8:52:37:03:DC:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ihzh0TW_LPjowT8z7BHIUjcD3HU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/yBxXCbdlxj6OJZQOhm9Pw9A1OMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/daf960-d060-49fc-af42-dee292ea87a3/1/ihzh0TW_LPjowT8z7BHIUjcD3HU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.100.0/23
193.8.4.0/22
Signature Algorithm: sha256WithRSAEncryption
25:83:7a:92:f3:af:73:d6:71:af:ea:83:1e:ce:f5:bc:11:e0:
f6:be:dc:de:a1:32:e8:f7:84:63:31:0b:f3:b8:90:eb:13:69:
e6:99:c7:08:00:4e:a8:0d:dc:cd:a8:18:b6:d2:70:67:42:35:
c9:2c:a0:1b:b9:b3:24:0b:c2:5a:15:0d:d6:8e:0a:ad:01:48:
a3:d3:61:b9:84:da:12:26:72:0d:dc:a1:08:6b:c3:c4:c5:8c:
c9:65:75:4d:4b:4e:d9:6b:9e:29:14:ec:4e:de:c1:92:4a:48:
d6:c4:08:74:6d:27:27:a2:5d:09:0e:9d:5a:72:8c:0b:70:37:
44:ff:74:7b:f5:dc:61:ed:e8:61:be:c7:d9:88:b3:c7:51:e9:
94:d1:c2:44:2e:dc:b3:46:1d:4f:6f:e7:92:7f:59:ba:55:4b:
cf:fb:b2:c5:59:ef:4f:bb:b0:0a:15:53:37:d6:68:4e:7c:57:
b9:9c:27:d8:b1:f8:b0:91:20:7d:9b:2b:37:62:6e:ee:a7:b7:
18:c8:39:1e:14:c1:61:b4:5a:15:44:d1:e5:df:40:7b:f9:b3:
1c:4c:2f:f5:52:90:72:5c:fc:1a:1f:32:71:9c:91:d7:f0:e7:
a4:f4:ad:bc:9c:95:74:fe:f9:b3:01:e8:7f:f7:fb:43:fc:8a:
aa:a1:4a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:36 2024 by rpki-client on console-ams.rpki-client.org