Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/JJDbfpQ0xjAF2tuS86uW9zAdIfE.roa
File: JJDbfpQ0xjAF2tuS86uW9zAdIfE.roa (raw, json)
Hash identifier: PC/EFsoXngdJe9sQOTeN5UXrzoIGJ78aiT19N7+N55E=
Subject key identifier: 24:90:DB:7E:94:34:C6:30:05:DA:DB:92:F3:AB:96:F7:30:1D:21:F1
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 09508773
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/JJDbfpQ0xjAF2tuS86uW9zAdIfE.roa
Signing time: Sat 01 Jan 2022 06:00:41 +0000
ROA not before: Sat 01 Jan 2022 06:00:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 397525
IP address blocks: 45.13.226.0/24 maxlen: 24
45.147.7.0/24 maxlen: 24
45.11.229.0/24 maxlen: 24
45.84.197.0/24 maxlen: 24
45.145.225.0/24 maxlen: 24
45.145.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156272499 (0x9508773)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 06:00:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2490db7e9434c63005dadb92f3ab96f7301d21f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:28:1a:19:a2:79:cd:79:b6:fb:bf:20:18:b4:
61:6d:de:2a:ee:fa:99:a0:67:bd:ca:40:30:6c:1a:
20:9e:a6:b1:4d:da:70:d7:6e:23:6f:46:09:cb:19:
47:33:8f:16:db:16:4a:9d:a1:37:e1:72:6d:d9:b8:
27:21:21:33:15:98:6e:7d:b8:2c:3c:a1:fe:d3:18:
de:0f:4b:b0:93:25:54:2f:b1:b3:24:1a:e5:02:6a:
f5:fa:74:c8:59:d9:4a:06:c9:55:9b:bb:63:30:03:
62:88:ad:62:87:9d:67:6e:f1:e8:d0:c5:6e:0a:d1:
05:f1:32:0e:d6:61:b7:1a:0e:d8:67:8b:69:17:3f:
82:f8:dc:a7:67:83:3e:3b:bf:60:21:18:67:54:37:
9c:ed:9c:c3:c6:87:eb:9c:dc:92:0e:09:4e:bc:85:
ae:7b:14:fa:54:17:85:3d:de:83:0a:31:44:6d:60:
1b:db:b0:2e:5e:5b:8c:bd:f9:27:77:7b:f8:4d:dc:
0a:f2:73:6b:db:b5:23:e1:68:37:8c:b0:22:9d:3f:
eb:71:29:98:9e:08:aa:f4:cd:c0:d8:3c:10:77:39:
c5:59:94:c4:60:e2:bf:c7:65:d1:d2:a2:26:17:b4:
b8:14:9e:9f:67:32:6c:1f:7c:51:8d:89:7a:e2:ec:
8d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:90:DB:7E:94:34:C6:30:05:DA:DB:92:F3:AB:96:F7:30:1D:21:F1
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/JJDbfpQ0xjAF2tuS86uW9zAdIfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.229.0/24
45.13.226.0/24
45.84.197.0/24
45.145.224.0/23
45.147.7.0/24
Signature Algorithm: sha256WithRSAEncryption
44:b6:5f:83:55:7d:0b:c6:03:3b:29:11:df:51:85:b4:c3:66:
3f:37:d1:41:4f:be:c1:97:06:42:c3:fa:e0:21:2c:bf:5a:4f:
2b:0c:29:aa:1a:87:c1:2e:71:4e:db:4d:46:4b:d5:ad:b1:81:
61:3c:f8:a4:91:6a:a0:2f:2d:56:ac:b6:0d:bd:3e:df:e2:47:
47:83:b1:e4:61:db:bf:5e:8d:da:bc:44:9d:bf:09:b1:c9:a5:
5b:e8:51:f0:da:7a:fb:ad:09:f6:7e:10:58:d2:d3:30:c7:05:
63:09:9a:4f:e8:61:b4:45:91:de:e9:10:b2:c0:10:ac:b7:a7:
86:11:a9:40:00:43:cd:3a:1f:24:8a:92:a1:a3:42:7f:1e:70:
8a:0a:78:c2:aa:d3:8b:42:3a:80:e6:af:63:55:b8:3e:54:b7:
d4:52:f6:48:fa:0c:4f:3f:19:f5:3b:a2:67:cb:55:47:41:fb:
00:5a:44:ac:05:e4:58:ac:e5:96:d1:d4:71:b3:65:43:b0:ea:
bf:67:9e:c4:4d:a6:39:fd:74:6a:2b:87:af:b4:07:1d:5a:da:
f6:55:df:44:86:38:3b:b0:84:ec:a0:96:63:f1:bd:f8:88:37:
92:ee:1f:99:c0:35:1e:87:81:ef:a2:dc:44:8d:3a:e7:36:62:
bf:b6:96:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:19 2023 by rpki-client on console-ams.rpki-client.org