Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Sp2ddA6M2NZNA9ww4HOZuKDMIkI.roa
File: Sp2ddA6M2NZNA9ww4HOZuKDMIkI.roa (raw, json)
Hash identifier: II9WbDShKdl/UyRHdPTRfjX/BGYsLZx0fGI5p3C7fPE=
Subject key identifier: 4A:9D:9D:74:0E:8C:D8:D6:4D:03:DC:30:E0:73:99:B8:A0:CC:22:42
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0B13B947
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Sp2ddA6M2NZNA9ww4HOZuKDMIkI.roa
Signing time: Thu 23 Jun 2022 06:39:32 +0000
ROA not before: Thu 23 Jun 2022 06:39:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49581
IP address blocks: 45.134.36.0/24 maxlen: 24
185.117.3.0/24 maxlen: 24
45.13.227.0/24 maxlen: 24
45.131.111.0/24 maxlen: 24
45.131.108.0/24 maxlen: 24
5.253.246.0/24 maxlen: 24
45.142.104.0/24 maxlen: 24
45.142.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 185841991 (0xb13b947)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jun 23 06:39:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a9d9d740e8cd8d64d03dc30e07399b8a0cc2242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:cb:47:61:8a:ef:1b:80:28:f7:16:e6:78:73:
3e:e0:a4:51:6d:cd:dd:c0:19:e4:f0:68:37:e0:ab:
0b:2d:0e:d9:70:a1:21:24:72:a9:b6:0b:36:4b:ca:
be:3c:c0:1d:dc:82:1d:b9:da:73:d5:ab:eb:46:9a:
c4:12:6c:1b:c9:55:c1:2c:bf:d4:1b:c4:86:7e:1f:
91:8a:14:6c:85:a0:a6:b0:59:9e:4e:76:0a:28:75:
58:5f:e5:5f:fa:95:7e:04:69:15:60:5d:a3:c8:db:
20:e2:41:70:03:7c:86:e9:25:db:68:7a:d6:26:07:
94:ab:56:57:e1:c1:3e:66:5d:e6:a7:cb:42:8e:37:
f0:f6:47:88:2d:d5:4f:87:83:f3:0a:6a:55:27:ec:
ee:49:58:83:3b:97:3f:d9:ac:4e:a4:0d:2c:16:9b:
c9:ab:ea:e5:4e:8b:8b:76:87:73:45:91:22:4b:d7:
41:7a:95:b7:1a:9e:e3:92:e2:ba:1f:ff:1b:61:e4:
01:a6:2b:4b:af:c7:94:07:9a:b9:57:3c:dd:cc:92:
ec:50:d8:af:2c:77:e4:1d:73:22:f3:98:6a:9f:06:
9e:d5:b4:0c:3e:42:b6:06:fb:0f:1b:62:aa:22:ef:
96:10:25:1f:96:e5:03:b1:8f:cc:87:67:d4:50:f9:
cd:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:9D:9D:74:0E:8C:D8:D6:4D:03:DC:30:E0:73:99:B8:A0:CC:22:42
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/Sp2ddA6M2NZNA9ww4HOZuKDMIkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.246.0/24
45.13.227.0/24
45.131.108.0/24
45.131.111.0/24
45.134.36.0/24
45.142.104.0/24
45.142.107.0/24
185.117.3.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:a6:62:70:53:01:fb:4b:35:e4:c3:1d:49:d9:67:1b:ed:d0:
e4:96:cb:04:d8:68:09:4d:c8:7c:0d:75:57:0a:f7:2c:f3:22:
bb:85:81:36:6f:09:2d:50:0e:41:76:81:9f:3e:01:4b:31:f2:
db:40:b2:bb:ac:cb:8a:9e:5d:51:37:2f:bd:46:24:f2:06:fb:
50:2a:5d:41:ae:d1:e6:f0:22:92:95:42:52:0d:d4:25:0e:d2:
6d:a4:6f:04:09:39:ee:7a:e8:fb:28:80:1c:a0:86:c3:78:ed:
84:13:2c:ec:1d:2c:f0:02:24:91:ec:17:c3:53:c5:8f:45:c9:
0e:26:bd:c3:48:91:44:6a:8c:91:b9:3a:9b:35:34:c7:11:8f:
14:f4:60:d1:95:1b:1a:ea:2d:0a:0a:2e:b7:e2:19:91:f7:a5:
d4:ba:39:0e:8a:de:6b:12:3c:2e:a6:a1:de:a0:d5:79:f5:dc:
80:bc:27:9d:ef:00:84:4b:9b:67:66:75:73:14:50:84:ea:2d:
d4:35:8e:58:54:60:33:0c:d6:fe:b5:e4:4e:f9:72:f2:62:33:
e4:7a:19:34:94:65:82:25:9a:f7:03:a8:90:83:dd:50:c4:5d:
c3:50:09:26:fa:b7:02:41:9a:f8:69:9e:a6:37:86:7a:42:07:
cb:13:c8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:28 2024 by rpki-client on console-fra.rpki-client.org