Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/ss6aX72BlfdbdI7CFSSFqKA9TVw.roa
File: ss6aX72BlfdbdI7CFSSFqKA9TVw.roa (raw, json)
Hash identifier: IvCGGWq6YOlsn6l9IIfJcjsy9cL4+PEn5hMep4BkyOA=
Subject key identifier: B2:CE:9A:5F:BD:81:95:F7:5B:74:8E:C2:15:24:85:A8:A0:3D:4D:5C
Certificate issuer: /CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Certificate serial: 01855DB2E01AE1B35A4123BBD9FD2CD19AB9
Authority key identifier: 8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/ss6aX72BlfdbdI7CFSSFqKA9TVw.roa
Signing time: Thu 29 Dec 2022 11:44:41 +0000
ROA not before: Thu 29 Dec 2022 11:44:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207054
IP address blocks: 45.15.92.0/22 maxlen: 22
185.167.112.0/22 maxlen: 22
185.231.192.0/22 maxlen: 22
2a0b:1a07::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5d:b2:e0:1a:e1:b3:5a:41:23:bb:d9:fd:2c:d1:9a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac7eae649d9547b0ad0ab007ab4e8a48ded4d5d
Validity
Not Before: Dec 29 11:44:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2ce9a5fbd8195f75b748ec2152485a8a03d4d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:3b:59:5e:21:08:42:70:58:b2:1c:11:73:b9:
75:25:71:47:23:c9:a6:95:60:24:09:db:05:9c:c5:
11:c8:39:9d:7a:fd:75:14:4c:1a:26:b0:76:23:6c:
37:fe:4c:59:f4:04:e6:99:3a:af:d5:55:23:43:7f:
80:91:b6:04:3a:50:82:51:d6:aa:85:29:78:24:f5:
56:da:99:69:b6:21:50:3e:9a:6d:3d:92:2e:d8:41:
fe:c2:cc:42:65:7c:e6:ca:39:f6:fb:72:0b:e2:ff:
ee:d2:ae:95:64:ab:be:92:e4:91:63:cc:c5:91:5d:
1e:c4:e0:73:fb:e8:ca:7b:be:c0:7b:08:80:61:21:
25:df:7c:b7:bd:9f:44:94:fe:7b:ea:13:1d:67:c8:
0a:0a:06:9c:0c:3b:76:b2:0d:c8:84:da:71:7e:ab:
6a:4f:4f:22:e5:3d:9d:cf:98:99:93:28:c7:69:61:
84:fa:89:b8:41:ee:e1:c6:ec:97:91:69:5c:15:08:
fa:c4:29:df:8c:87:43:ee:3a:6f:c2:26:1c:17:2e:
ca:13:35:4e:b2:7d:18:83:16:a6:81:12:55:3e:1d:
ae:28:63:1f:e8:a6:05:40:69:88:bd:46:64:97:0c:
c0:6d:37:84:c6:27:b9:03:72:83:eb:f5:0b:06:32:
01:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CE:9A:5F:BD:81:95:F7:5B:74:8E:C2:15:24:85:A8:A0:3D:4D:5C
X509v3 Authority Key Identifier:
keyid:8A:C7:EA:E6:49:D9:54:7B:0A:D0:AB:00:7A:B4:E8:A4:8D:ED:4D:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isfq5knZVHsK0KsAerTopI3tTV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/ss6aX72BlfdbdI7CFSSFqKA9TVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67db0b-1d10-4c97-9af6-ac01f0c5662b/1/isfq5knZVHsK0KsAerTopI3tTV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.92.0/22
185.167.112.0/22
185.231.192.0/22
IPv6:
2a0b:1a07::/32
Signature Algorithm: sha256WithRSAEncryption
87:3b:ec:cb:5d:a5:8c:3b:5d:e4:a3:8c:ea:9a:38:6b:b1:ea:
54:5c:95:78:40:d8:1c:73:15:b8:73:69:33:bd:d3:54:e2:00:
c2:7c:e2:b5:09:da:18:1b:4b:1f:47:c7:47:a2:3f:ff:fb:5e:
48:ca:50:ad:52:0e:0c:3e:f4:10:00:c2:00:45:cb:3f:76:aa:
57:cc:28:0c:f2:61:5f:d3:cb:46:f3:89:7c:87:f4:a9:3f:a7:
08:67:60:9c:a4:f0:ea:93:f8:71:ca:9c:f3:fc:bb:95:0c:5a:
e6:08:1f:12:95:d8:66:19:87:25:54:ca:7a:e4:db:9c:2e:49:
46:e6:d5:76:78:22:1c:30:86:ae:44:c7:28:6c:2b:2e:a6:fa:
cc:e9:37:af:ce:d7:1c:87:58:0e:26:ca:f6:1d:02:5c:9f:48:
da:19:25:f6:63:da:b2:34:7e:fc:e0:dd:17:82:21:c2:98:02:
27:11:a5:5f:58:a7:cf:30:04:f9:27:7a:38:d0:54:24:82:14:
00:83:71:6d:d3:54:6e:49:61:96:78:40:9a:6e:06:b7:5b:0f:
cb:8a:51:2b:5b:8a:f6:1e:69:a7:86:18:88:c7:a9:13:17:dd:
38:df:6a:43:87:24:5b:8b:a2:07:41:87:f0:47:0d:08:00:3e:
1d:8c:58:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:13 2024 by rpki-client on console-ams.rpki-client.org