Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/DucI8u96170JAo_WC3Sd73l5DRg.roa
File: DucI8u96170JAo_WC3Sd73l5DRg.roa (raw, json)
Hash identifier: rCGx7VW4lcrTnIFFnx4//5R9gB63aOm+0sSQm5AMxcg=
Subject key identifier: 0E:E7:08:F2:EF:7A:D7:BD:09:02:8F:D6:0B:74:9D:EF:79:79:0D:18
Certificate issuer: /CN=2d1815b0c9dc9ee2207ec9417cdec2bc4be23c61
Certificate serial: 05CCBFF4
Authority key identifier: 2D:18:15:B0:C9:DC:9E:E2:20:7E:C9:41:7C:DE:C2:BC:4B:E2:3C:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRgVsMncnuIgfslBfN7CvEviPGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/DucI8u96170JAo_WC3Sd73l5DRg.roa
Signing time: Sat 01 Jan 2022 03:00:13 +0000
ROA not before: Sat 01 Jan 2022 03:00:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 25274
IP address blocks: 45.138.88.0/22 maxlen: 22
45.140.232.0/22 maxlen: 22
37.218.232.0/21 maxlen: 21
45.10.28.0/22 maxlen: 22
85.235.92.0/22 maxlen: 22
185.40.136.0/22 maxlen: 22
45.132.200.0/22 maxlen: 22
185.153.216.0/22 maxlen: 22
109.105.0.0/19 maxlen: 19
45.134.236.0/22 maxlen: 22
2a00:d240::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97304564 (0x5ccbff4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1815b0c9dc9ee2207ec9417cdec2bc4be23c61
Validity
Not Before: Jan 1 03:00:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ee708f2ef7ad7bd09028fd60b749def79790d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:29:34:b9:d7:18:1f:ac:3c:82:95:ca:27:13:
d7:02:7f:98:b6:b4:ad:09:44:8e:43:31:79:47:52:
79:4c:a8:a6:8f:b0:63:32:d3:45:54:89:6c:ef:5f:
b1:61:98:4c:f2:e1:24:d0:e4:b0:c9:4c:b1:25:40:
03:3e:e8:1d:21:bb:2a:06:8b:5c:c9:fd:2d:4d:99:
3c:11:63:ab:3a:4a:b7:bc:ed:f6:e1:13:4d:a3:47:
04:17:72:d7:5d:fb:ae:77:f5:7e:10:25:66:7b:b5:
78:5f:56:30:16:63:a1:61:0a:ca:18:1c:ab:38:f7:
1d:a0:6e:15:14:57:23:dd:52:19:33:e4:88:53:bc:
d1:a0:cd:e6:66:ab:72:df:17:40:9a:58:3f:75:54:
63:7b:49:21:4d:45:4d:9b:49:ff:03:74:5d:5e:3e:
8d:7f:a9:4d:ba:a4:c5:f2:4c:60:57:a6:34:4c:1b:
a5:84:e2:41:93:e1:94:61:0d:eb:e3:e7:01:33:a6:
24:7b:c3:3a:f2:7f:a4:5a:19:ec:0f:9c:9e:7d:a9:
62:59:39:95:8c:eb:43:3f:58:b6:70:20:e8:e1:ba:
08:94:2f:b3:10:a5:37:8c:56:5b:5d:60:63:26:b4:
36:56:8c:99:9d:55:7a:5a:37:21:9e:38:00:fc:1b:
db:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E7:08:F2:EF:7A:D7:BD:09:02:8F:D6:0B:74:9D:EF:79:79:0D:18
X509v3 Authority Key Identifier:
keyid:2D:18:15:B0:C9:DC:9E:E2:20:7E:C9:41:7C:DE:C2:BC:4B:E2:3C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRgVsMncnuIgfslBfN7CvEviPGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/DucI8u96170JAo_WC3Sd73l5DRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/d38ec1-d4c6-40fb-ab1d-d202f2a40081/1/LRgVsMncnuIgfslBfN7CvEviPGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.218.232.0/21
45.10.28.0/22
45.132.200.0/22
45.134.236.0/22
45.138.88.0/22
45.140.232.0/22
85.235.92.0/22
109.105.0.0/19
185.40.136.0/22
185.153.216.0/22
IPv6:
2a00:d240::/32
Signature Algorithm: sha256WithRSAEncryption
74:40:0c:50:b8:fe:2d:4a:76:d1:43:f5:97:dd:a1:51:92:4d:
31:cc:9a:0a:2d:fc:47:5e:7e:e4:52:5c:0d:b6:a5:ee:d7:4b:
9e:e7:50:ee:20:54:74:2d:78:a0:d4:3f:b9:73:fd:f6:b0:34:
95:07:f3:c4:5c:41:be:6e:de:23:d3:1a:3a:e3:b3:64:54:94:
ef:29:a7:5b:81:52:5e:5b:c5:cb:09:47:04:15:10:6b:13:4c:
a3:72:9a:ec:e8:76:aa:05:51:b7:45:8b:c3:fc:c7:16:2c:21:
d4:a1:a6:9c:4f:05:e2:cf:7f:c1:72:ef:65:f9:78:83:93:b3:
3f:6c:fd:21:ef:1a:c1:e1:ce:72:e6:84:cf:ba:07:30:da:7a:
ea:ed:b2:9c:9a:30:5f:fe:15:da:5d:20:01:48:04:f0:15:e7:
a5:70:fa:62:d8:45:2d:1c:12:00:96:70:4c:c1:42:79:00:9c:
d6:7e:62:7d:a0:33:4d:cb:b7:cc:a5:c4:e6:10:b2:8a:15:f2:
ce:29:16:3b:55:8b:64:5a:8a:ba:e4:00:fd:fc:d3:6d:91:8d:
bd:b8:1e:d6:b7:2f:71:02:1f:f7:0f:59:e0:65:93:c0:49:64:
0d:48:47:25:dc:cb:63:27:c5:fb:9d:67:f6:1d:4c:32:73:36:
44:45:57:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:57 2024 by rpki-client on console-fra.rpki-client.org