Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/OmV1kplpW9SFKkJMDWtJNCOShPw.roa
File: OmV1kplpW9SFKkJMDWtJNCOShPw.roa (raw, json)
Hash identifier: RX1XcMVM2LxQgV8gSAALtVJIhbdV1fK9WQsNBotibLY=
Subject key identifier: 3A:65:75:92:99:69:5B:D4:85:2A:42:4C:0D:6B:49:34:23:92:84:FC
Certificate issuer: /CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Certificate serial: 40545B
Authority key identifier: 70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/OmV1kplpW9SFKkJMDWtJNCOShPw.roa
Signing time: Thu 16 Jun 2022 19:27:44 +0000
ROA not before: Thu 16 Jun 2022 19:27:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8211
IP address blocks: 145.72.100.0/22 maxlen: 22
2a02:cc4:2100::/41 maxlen: 41
2a02:cc4:2100::/42 maxlen: 42
2a02:cc4:2140::/42 maxlen: 42
2a02:cc4:2f00::/41 maxlen: 42
2a02:cc4:2f0::/44 maxlen: 44
2a02:cc4:2f8::/45 maxlen: 45
2a02:cc4:2f0::/45 maxlen: 45
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4215899 (0x40545b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708612e8703a660889ca0f457cf1b4d8a0d53b4d
Validity
Not Before: Jun 16 19:27:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3a65759299695bd4852a424c0d6b4934239284fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e2:5f:92:35:75:73:88:84:74:90:c8:e9:d3:
47:b8:f9:18:f1:4b:6a:58:48:e6:90:86:43:38:fc:
9a:36:f1:cd:66:2a:e0:5e:cc:2e:bd:81:7d:b0:a8:
f7:cc:87:35:ac:59:f5:3a:01:eb:14:af:20:40:66:
3c:99:42:29:9a:27:46:d4:88:19:14:11:a1:da:b4:
98:b3:28:15:c6:c2:fb:91:7a:88:5f:0d:0d:0f:26:
24:43:c3:20:18:74:1d:bc:a0:2c:eb:51:db:0c:f9:
bd:7b:c8:88:6b:85:31:e9:92:80:03:5d:15:32:7c:
dc:9a:ce:c1:8a:bd:ae:97:9a:05:89:20:6b:d5:33:
65:78:fb:ad:34:dd:17:ff:a6:3c:de:50:13:44:e8:
d9:6e:b7:ac:01:b7:d0:b6:18:ec:e7:ce:2f:06:ea:
86:ef:fb:61:4b:2c:64:96:6f:3f:10:ca:fc:81:0c:
5d:d9:b5:6c:9a:aa:3e:94:d8:e4:85:aa:25:90:0a:
77:c5:af:a9:36:56:53:c3:7f:0c:96:35:1c:12:c5:
ea:42:01:4c:04:46:3d:1d:81:82:92:54:34:f2:c9:
78:39:30:85:23:c3:77:d3:5d:8b:fe:5f:9e:19:31:
19:dc:9f:74:c5:6b:11:40:2c:ce:9b:e3:21:3e:ff:
ff:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:65:75:92:99:69:5B:D4:85:2A:42:4C:0D:6B:49:34:23:92:84:FC
X509v3 Authority Key Identifier:
keyid:70:86:12:E8:70:3A:66:08:89:CA:0F:45:7C:F1:B4:D8:A0:D5:3B:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIYS6HA6ZgiJyg9FfPG02KDVO00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/OmV1kplpW9SFKkJMDWtJNCOShPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/22b0fe-9dc8-4bef-a299-30097a246a9c/1/cIYS6HA6ZgiJyg9FfPG02KDVO00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.72.100.0/22
IPv6:
2a02:cc4:2f0::/44
2a02:cc4:2100::/41
2a02:cc4:2f00::/41
Signature Algorithm: sha256WithRSAEncryption
07:50:75:07:f0:86:b3:a9:be:a3:f2:a4:de:3d:c1:cd:4d:64:
d4:1a:1e:48:c2:ef:e8:2a:d1:c4:f1:b6:8d:bf:f3:d6:0c:7f:
74:8b:67:5a:34:7b:1e:02:01:26:f1:5c:36:af:3b:fd:75:a5:
5c:bb:85:21:53:1c:0e:ae:0b:08:31:86:6f:ac:2a:4c:7e:2e:
5b:ac:1b:c4:55:a7:23:83:ec:5c:a3:b8:18:b7:49:d4:83:d5:
88:3c:89:9b:6c:20:6f:8f:8e:4c:3a:84:8e:d0:c9:6b:c5:b7:
e5:a1:53:b3:2b:9a:f9:33:a2:42:8b:aa:42:46:10:4c:ed:9b:
9d:b7:2c:08:ce:18:1c:b8:21:99:fa:61:14:04:6b:c0:8c:56:
d3:7e:83:73:59:d7:19:25:62:4e:ac:eb:db:2d:8a:f6:13:0c:
3d:7c:0d:be:b5:ee:13:07:32:41:6e:a6:40:fb:17:1b:03:ea:
e0:1a:b0:3e:58:7f:48:5b:4b:05:ea:5f:49:67:35:f3:43:79:
8c:6e:d0:1e:43:d9:e8:a6:b7:2e:80:1e:71:df:32:53:5e:64:
81:69:17:76:b4:88:2d:0d:ab:cc:69:3a:e4:76:ba:95:72:3e:
60:5b:58:6b:6f:67:6a:dd:40:45:92:3f:24:3c:e3:0d:cc:57:
3d:8b:dd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:19:27 2024 by rpki-client on console-fra.rpki-client.org