Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/FFhGapCXAMIocut0kJq6W3QoMnU.roa
File: FFhGapCXAMIocut0kJq6W3QoMnU.roa (raw, json)
Hash identifier: uNkzIfIeKJTR7bXvVrOoXfTZj2yF2SbrsaW+X4F9ICU=
Subject key identifier: 14:58:46:6A:90:97:00:C2:28:72:EB:74:90:9A:BA:5B:74:28:32:75
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0B1BF458
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/FFhGapCXAMIocut0kJq6W3QoMnU.roa
Signing time: Tue 28 Jun 2022 09:04:02 +0000
ROA not before: Tue 28 Jun 2022 09:04:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213250
IP address blocks: 45.89.124.0/23 maxlen: 23
45.89.126.0/23 maxlen: 23
45.131.66.0/23 maxlen: 23
45.13.224.0/23 maxlen: 23
5.182.206.0/23 maxlen: 23
5.182.204.0/23 maxlen: 23
2.56.245.0/24 maxlen: 24
5.252.100.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186381400 (0xb1bf458)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jun 28 09:04:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1458466a909700c22872eb74909aba5b74283275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:9d:54:9d:3d:44:b1:c8:2d:f5:a6:dd:28:1d:
95:67:65:59:27:18:bf:35:cd:7c:ae:a6:3b:82:a1:
1e:38:d7:e6:34:f9:fd:47:48:e7:a2:5e:bc:3d:d6:
b4:3a:6b:c9:da:01:55:87:6f:20:70:a5:c8:36:83:
c2:63:6a:cc:18:59:75:af:c2:71:1a:ef:d7:4b:2d:
b5:15:d5:12:5c:7c:c6:d7:3a:23:ea:8a:e4:46:9d:
a9:ae:a2:61:d1:ac:8b:0b:07:dd:a1:b5:92:75:3b:
fa:4f:5d:76:d6:2b:22:4e:bd:17:71:3f:cc:92:e3:
14:80:67:00:67:3f:11:44:62:6a:ce:69:ad:cb:48:
e2:3c:f8:ee:d1:74:92:d8:21:81:3e:9f:c0:5d:29:
88:22:9e:cc:e4:2f:b3:be:73:c0:4a:5f:74:c5:68:
91:7c:e0:fc:af:7d:5c:f1:54:0d:ff:09:ff:f1:0c:
cb:97:cb:4c:24:96:bd:93:dd:74:c5:ed:d9:b4:98:
24:5b:e1:7f:43:1d:2b:49:51:cb:02:98:e4:7d:d0:
d9:e7:50:22:14:ee:42:f3:e0:25:ae:69:9a:74:bb:
86:51:5c:41:27:f0:ca:fe:5d:7b:a0:ae:eb:9d:53:
aa:50:9b:03:ea:78:63:43:29:5a:ba:b2:ec:4e:54:
54:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:58:46:6A:90:97:00:C2:28:72:EB:74:90:9A:BA:5B:74:28:32:75
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/FFhGapCXAMIocut0kJq6W3QoMnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.245.0/24
5.182.204.0/22
5.252.100.0/22
45.13.224.0/23
45.89.124.0/22
45.131.66.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:19:6a:8a:18:72:e7:14:fe:53:b3:d5:fc:5c:54:01:4c:61:
85:9c:2c:44:2e:c4:3f:65:07:23:02:7a:6d:06:54:f4:53:1a:
c8:5c:74:78:05:ab:0e:38:ec:35:71:fb:a9:9b:b9:04:3a:d6:
5f:0a:8c:7e:65:d9:7e:00:0d:c0:81:a5:78:9f:ff:bf:8f:e4:
68:fc:36:a3:a7:1c:b1:11:4b:f5:8d:3e:a6:0f:06:0e:d5:31:
97:d6:f5:7d:27:42:99:fb:26:2d:42:26:8b:fb:67:18:f8:19:
de:e9:02:be:17:c4:4c:9a:84:93:55:6d:4b:9c:4c:38:aa:1f:
71:00:30:ef:d7:85:07:29:df:d5:c8:0a:9f:eb:ba:88:6c:25:
5c:eb:9b:85:be:31:1d:70:74:5d:38:68:a1:11:75:a7:12:a1:
b5:13:8e:7b:f0:3e:25:81:16:c4:a8:7e:5a:ea:ed:b9:95:6e:
74:56:37:cd:d0:79:a8:96:56:a1:d0:9a:dc:d0:f8:07:02:e2:
12:35:09:0d:02:20:30:3a:1d:00:15:8f:82:77:d5:77:12:5b:
08:3f:15:f2:82:85:1c:a6:c5:48:22:1d:29:93:1c:32:e6:38:
d7:0f:3c:a3:00:3b:dc:05:1b:40:9d:34:14:74:10:c4:e3:76:
21:18:e9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:19 2023 by rpki-client on console-ams.rpki-client.org