Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/F8SYuhj9syHgyMSWlbyzeKettGM.roa
File: F8SYuhj9syHgyMSWlbyzeKettGM.roa (raw, json)
Hash identifier: 9ATVwLnuvq6yQz4KRvJrgZ8LqjGreIqXbeG2ULw9RMg=
Subject key identifier: 17:C4:98:BA:18:FD:B3:21:E0:C8:C4:96:95:BC:B3:78:A7:AD:B4:63
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 0181FC8F2AE383FFD31FDF964B7BA59BA8A9
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/F8SYuhj9syHgyMSWlbyzeKettGM.roa
Signing time: Thu 14 Jul 2022 11:54:09 +0000
ROA not before: Thu 14 Jul 2022 11:54:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206119
IP address blocks: 185.169.180.0/24 maxlen: 24
185.169.183.0/24 maxlen: 24
45.133.37.0/24 maxlen: 24
45.133.36.0/24 maxlen: 24
45.133.38.0/24 maxlen: 24
185.174.21.0/24 maxlen: 24
185.174.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fc:8f:2a:e3:83:ff:d3:1f:df:96:4b:7b:a5:9b:a8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: Jul 14 11:54:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=17c498ba18fdb321e0c8c49695bcb378a7adb463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:54:fa:f8:a1:fc:62:3a:f0:27:36:c7:5b:29:
7d:be:f9:0e:6c:70:74:65:ee:8e:be:33:ab:04:e3:
c4:39:4e:03:d1:38:a2:2e:37:79:b9:b4:19:82:1f:
6c:96:54:57:5c:15:8c:8f:7f:5f:f7:5f:c7:72:f0:
9b:05:6e:fa:05:ad:ce:43:bd:1c:fe:bf:51:7e:a1:
b4:a4:5f:f7:13:ee:e2:71:d2:8a:60:c8:53:a2:64:
c5:75:eb:b0:fd:83:a6:d9:76:32:ef:c6:dc:9b:cb:
12:c1:ee:db:fc:23:76:61:fa:01:2e:37:eb:f7:ed:
cf:42:e3:99:ea:55:7d:7c:62:d9:14:fe:27:a7:10:
48:06:47:55:54:a1:80:74:ba:2f:01:51:50:4a:0f:
e2:ce:6e:a7:b0:4d:37:b0:99:48:e8:37:0f:11:06:
f6:ab:fb:71:3c:2f:08:d8:72:f7:b6:f2:20:47:8f:
7e:4d:d3:41:b5:3a:60:93:ea:58:bf:f8:77:7c:6a:
ec:ea:ad:be:ac:ae:70:69:1f:ee:1f:fd:ce:0c:29:
04:b9:14:24:3d:3e:db:8c:06:35:cb:3b:2d:00:1d:
88:fb:6d:dc:ce:06:06:0c:55:1b:69:dd:82:9e:65:
6b:d6:7b:65:a5:8a:a6:d3:60:88:8e:e5:2c:13:82:
b2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:C4:98:BA:18:FD:B3:21:E0:C8:C4:96:95:BC:B3:78:A7:AD:B4:63
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/F8SYuhj9syHgyMSWlbyzeKettGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.36.0-45.133.38.255
185.169.180.0/24
185.169.183.0/24
185.174.20.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:9e:20:bd:25:39:46:b7:e1:10:b7:a5:bb:ea:d5:b5:a7:7e:
0d:64:18:9f:5b:c8:08:f7:7b:ad:aa:7c:1f:d0:ce:aa:5e:6d:
a6:d7:67:ef:ab:25:9d:ca:21:07:6b:54:21:62:ad:db:e3:c6:
83:80:0b:83:e1:1c:e7:0b:ee:58:1f:b9:07:9a:fd:b6:39:9a:
22:25:73:c3:d8:2f:aa:23:4b:f8:22:8a:0f:dd:6c:76:8f:60:
ec:02:f8:92:6e:b0:e7:11:57:be:82:24:93:4f:b7:36:85:a4:
aa:0f:04:81:51:1c:5f:41:da:d6:3b:f3:97:9d:ea:92:56:73:
64:51:db:79:64:a8:7e:c2:39:05:72:51:e0:e4:e4:96:d0:9b:
99:27:6e:a4:2e:ba:5e:6f:63:32:e4:f6:72:cd:d1:07:97:ce:
22:75:58:38:d6:4f:2e:82:8d:4d:64:6a:b8:4f:96:64:d7:1c:
29:b4:f4:93:1b:8d:79:fc:6c:2e:2a:08:d0:83:22:31:b5:14:
b9:df:43:cf:99:44:b2:dd:33:05:89:b2:dd:44:a3:d0:e7:0a:
73:6e:b8:61:ae:8e:b7:4c:51:92:d8:4f:83:9e:98:2a:0b:00:
69:ac:8a:bc:fe:38:1d:ee:8d:9d:50:ad:28:9b:e6:f2:21:07:
66:c3:10:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:45 2024 by rpki-client on console-ams.rpki-client.org