Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/ci2ZLJHjNDltqRA3-jExsg9uFsA.roa
File: ci2ZLJHjNDltqRA3-jExsg9uFsA.roa (raw, json)
Hash identifier: 2Y3Sdq4IvMzeaPrA5uq9iMauYe+oguFr7/cGClBsxf4=
Subject key identifier: 72:2D:99:2C:91:E3:34:39:6D:A9:10:37:FA:31:31:B2:0F:6E:16:C0
Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Certificate serial: 0BE2D820
Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/ci2ZLJHjNDltqRA3-jExsg9uFsA.roa
Signing time: Mon 09 May 2022 22:51:16 +0000
ROA not before: Mon 09 May 2022 22:51:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206119
IP address blocks: 185.169.180.0/24 maxlen: 24
45.133.37.0/24 maxlen: 24
45.133.36.0/24 maxlen: 24
45.133.38.0/24 maxlen: 24
185.174.21.0/24 maxlen: 24
185.174.20.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 199415840 (0xbe2d820)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5
Validity
Not Before: May 9 22:51:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=722d992c91e334396da91037fa3131b20f6e16c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ce:06:8c:22:ab:1f:cb:88:75:13:3b:9e:89:
37:6e:ec:08:4c:45:be:92:2a:7b:59:93:41:ba:d6:
43:17:ae:8b:81:6f:65:c8:08:ec:01:bb:36:70:0e:
e4:c0:99:0c:4d:b9:d9:ce:0d:91:68:20:e8:3a:77:
0f:d7:fd:99:a5:cb:75:19:aa:91:3a:47:6b:70:2e:
c8:7c:c6:d3:a4:37:b9:fd:be:52:0a:10:e3:d6:6f:
27:62:e1:05:8a:1c:80:e8:c3:f0:d5:bc:ac:b7:24:
e2:a8:7e:e5:6b:9b:61:dc:22:05:50:15:52:78:64:
c4:86:20:9c:f3:a1:7f:b0:dd:42:d4:e0:48:c5:e0:
f2:6e:ca:d9:be:01:fa:d9:66:63:a5:a8:09:fe:d8:
4f:e3:77:ad:19:03:68:2e:de:24:7a:14:32:07:df:
04:76:f1:83:ea:63:09:26:d1:f4:4a:56:71:ac:84:
36:47:3d:f7:c6:88:fd:e1:49:1f:01:ef:08:9c:da:
90:ca:bd:c6:39:f3:1d:8b:7b:93:ef:6b:db:9c:81:
e6:69:9b:dd:58:15:b7:94:9d:73:d0:36:45:97:07:
9a:d9:a6:7b:39:d9:92:04:49:03:dc:25:ad:4e:40:
3e:7a:16:98:01:b3:df:2d:6c:5d:f1:b8:4e:a5:23:
89:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2D:99:2C:91:E3:34:39:6D:A9:10:37:FA:31:31:B2:0F:6E:16:C0
X509v3 Authority Key Identifier:
keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/ci2ZLJHjNDltqRA3-jExsg9uFsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.36.0-45.133.38.255
185.169.180.0/24
185.174.20.0/23
Signature Algorithm: sha256WithRSAEncryption
c4:ad:50:de:21:ce:8d:f5:80:52:5b:ea:97:f6:e2:c9:65:05:
21:f0:8e:42:5a:1e:3e:82:40:6a:6a:a1:ce:02:ff:f2:ad:31:
90:b1:6a:c1:01:71:a6:bd:51:da:e4:cf:a1:6d:12:68:11:8c:
cf:4b:8a:e7:a1:dc:3a:03:f7:a7:82:cb:03:02:6a:f3:ec:5a:
1b:05:b4:d8:45:b6:c0:05:83:87:3b:fd:65:bc:81:90:15:f2:
69:60:44:78:84:10:e1:4a:e1:1e:f9:6e:15:06:ed:6d:0f:12:
73:94:92:8b:13:5a:a5:82:22:ed:13:62:2d:ae:cf:e1:8a:cd:
3a:5b:10:8a:c3:65:28:99:bb:41:56:4b:44:96:82:4f:61:fc:
61:98:49:87:77:99:09:92:e0:9d:18:80:68:1f:da:60:7f:3d:
81:c0:c8:10:59:ae:75:f8:26:83:85:e2:73:d4:1a:e5:9d:7c:
56:fc:6f:dd:84:df:85:6f:ff:5e:bf:c7:b9:77:27:c6:56:c7:
cd:93:e6:9c:8a:26:34:11:2d:87:9d:e3:ab:87:2d:00:a6:0d:
42:9f:a8:3d:5b:dc:80:bd:64:c1:cb:a2:f0:36:f1:23:22:2a:
be:e6:0d:a2:43:51:9a:5e:60:fb:5b:fb:6a:d9:83:0c:ce:42:
83:17:4d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:45 2024 by rpki-client on console-ams.rpki-client.org