Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/E_g3-9iWgFhm05USqGKJl3gAVIo.roa
File: E_g3-9iWgFhm05USqGKJl3gAVIo.roa (raw, json)
Hash identifier: qlDEHMzQt1+QspMOCJ2gxWSgUFnQAynav/2pBLqtoz4=
Subject key identifier: 13:F8:37:FB:D8:96:80:58:66:D3:95:12:A8:62:89:97:78:00:54:8A
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 093DE3FB
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/E_g3-9iWgFhm05USqGKJl3gAVIo.roa
Signing time: Sat 01 Jan 2022 06:00:31 +0000
ROA not before: Sat 01 Jan 2022 06:00:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 44592
IP address blocks: 45.134.36.0/24 maxlen: 24
185.117.3.0/24 maxlen: 24
45.13.227.0/24 maxlen: 24
5.253.246.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 155051003 (0x93de3fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 06:00:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13f837fbd896805866d39512a86289977800548a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ae:9f:77:88:24:34:bb:7d:d0:78:c1:52:d7:
99:05:cf:ee:42:be:4c:6b:63:e4:30:18:21:cc:36:
67:ff:3e:00:d3:6a:59:b7:d3:35:f9:95:bc:2e:09:
64:06:f0:55:1c:25:36:06:eb:93:35:c6:92:54:2a:
c8:6a:c7:44:5f:1e:16:9b:97:78:cc:3c:69:4b:b9:
bf:cc:84:d9:b4:e9:cf:68:33:8f:4f:35:38:61:ae:
88:29:65:ac:26:03:ee:d7:80:04:9c:61:83:d8:a8:
97:27:52:51:1d:ef:f6:77:f7:a7:30:2c:56:3d:e1:
7e:2e:c5:11:e8:72:26:5e:6d:92:97:3c:f1:e4:fb:
4e:5f:bc:9b:c8:81:8b:d3:cb:b0:eb:d2:a1:56:00:
f2:29:32:9f:65:0c:e4:c8:71:39:8c:03:1a:82:f1:
14:cc:9f:0c:73:63:50:c2:e7:e5:99:1c:0a:da:04:
67:15:96:4a:fc:43:aa:80:8e:5d:6e:f7:02:da:54:
ec:ad:a1:97:65:61:23:31:31:39:a0:7b:99:62:02:
c0:5c:28:9a:0c:18:9a:03:d7:32:bf:a9:2a:a3:ea:
61:57:67:6f:12:62:fd:ee:c3:8d:1a:b8:3c:18:2f:
92:5f:ad:0e:3d:5a:99:65:e8:a9:c0:4c:99:0d:ff:
59:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:F8:37:FB:D8:96:80:58:66:D3:95:12:A8:62:89:97:78:00:54:8A
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/E_g3-9iWgFhm05USqGKJl3gAVIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.246.0/24
45.13.227.0/24
45.134.36.0/24
185.117.3.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:2a:c6:22:6e:cb:a5:58:06:da:04:30:e3:19:6a:fb:73:98:
66:61:f5:62:8f:84:0d:39:08:00:28:90:1d:2a:0e:7d:98:6c:
3c:dc:a7:62:02:0e:8d:5d:41:9a:56:8b:1a:7d:62:72:b4:58:
bb:2a:70:88:77:79:79:91:21:7a:94:1b:26:cf:ab:76:06:20:
3e:7a:e5:20:ee:d3:49:ff:18:99:30:92:40:16:eb:64:16:aa:
05:e0:ed:60:8a:e4:43:79:92:2b:9e:c9:40:82:09:7c:ff:a3:
e0:34:bd:d9:de:e4:8b:dd:f3:59:22:75:9b:24:d0:5d:17:5a:
d5:30:93:82:b3:7d:ba:df:1a:08:d9:5e:19:9a:cb:30:ac:2c:
24:04:d0:fd:59:0c:92:9e:7d:30:17:82:fc:7a:9c:73:39:08:
d3:27:29:8c:c2:67:71:59:1f:35:3e:1f:27:a8:60:39:1d:cb:
c4:cd:24:29:31:ed:15:be:b5:fd:e0:c1:aa:47:47:b4:a8:21:
90:5d:22:d2:3c:84:a8:34:14:0e:a2:50:6d:41:e1:44:9b:3d:
b4:19:e7:1f:d8:06:79:09:17:c1:d2:3d:df:a0:df:10:d0:ac:
db:ed:40:9e:8d:35:9a:70:64:4a:df:ce:aa:7e:a0:19:27:80:
99:ac:33:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:13 2024 by rpki-client on console-ams.rpki-client.org