Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/8fam81peoLvNYP6HcQ2LzpmLa9Q.roa
File: 8fam81peoLvNYP6HcQ2LzpmLa9Q.roa (raw, json)
Hash identifier: ir0RJ7+yEEOXOm2eQvjcOMgYcQthBeggt1SOPM9gUSE=
Subject key identifier: F1:F6:A6:F3:5A:5E:A0:BB:CD:60:FE:87:71:0D:8B:CE:99:8B:6B:D4
Certificate issuer: /CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Certificate serial: AE1DA1
Authority key identifier: 2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/8fam81peoLvNYP6HcQ2LzpmLa9Q.roa
Signing time: Fri 06 May 2022 06:11:08 +0000
ROA not before: Fri 06 May 2022 06:11:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 834
IP address blocks: 185.244.106.0/23 maxlen: 23
212.46.37.0/24 maxlen: 24
45.155.64.0/23 maxlen: 24
45.155.66.0/23 maxlen: 24
160.19.94.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11410849 (0xae1da1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b145a8bdf2bca150f25ed54a277b8f653efdb3e
Validity
Not Before: May 6 06:11:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1f6a6f35a5ea0bbcd60fe87710d8bce998b6bd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:10:24:84:f3:44:f8:b8:ba:86:18:84:e0:03:
66:30:a6:49:f6:a2:a3:f1:46:08:31:d0:67:35:71:
8e:72:b7:10:6c:e5:21:cd:16:63:b2:80:8b:31:2b:
a5:a8:6f:9c:22:ef:4c:1d:eb:69:45:bb:05:c7:c3:
83:8f:33:18:41:d7:e0:8f:7c:12:f7:db:5d:6d:15:
7a:22:db:e6:d2:75:f0:43:f5:5d:28:1c:27:ac:fa:
1b:f8:0b:4f:4c:ae:cf:96:ff:27:5f:26:39:c5:2c:
fe:7d:c2:88:0e:02:43:02:d2:7a:0b:9f:71:28:fa:
a8:f9:5a:8f:23:88:2b:94:f7:00:3b:8b:14:dd:84:
7f:58:dc:ce:da:db:fd:1e:cc:4f:72:f0:e2:52:9b:
d0:28:9d:e8:76:74:ce:b3:a6:2e:59:19:e9:fd:97:
74:47:b2:c8:c1:5b:0a:23:9d:78:09:61:f0:2d:2e:
bd:0a:35:20:db:2d:60:c0:57:01:26:55:7c:18:07:
2a:ad:ed:68:50:4c:10:a7:bd:8f:dd:9b:6a:57:ad:
97:66:35:3c:40:16:c9:db:d1:50:e4:41:55:ff:19:
fe:19:45:fb:74:c2:06:ef:eb:2e:be:e4:60:49:2c:
0d:7b:a9:c2:2e:4e:45:bf:d2:b0:4c:d5:a3:34:bb:
86:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F6:A6:F3:5A:5E:A0:BB:CD:60:FE:87:71:0D:8B:CE:99:8B:6B:D4
X509v3 Authority Key Identifier:
keyid:2B:14:5A:8B:DF:2B:CA:15:0F:25:ED:54:A2:77:B8:F6:53:EF:DB:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxRai98ryhUPJe1Uone49lPv2z4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/8fam81peoLvNYP6HcQ2LzpmLa9Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0d8c8f-ff2c-4da8-b443-3040bed3cccd/1/KxRai98ryhUPJe1Uone49lPv2z4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.64.0/22
160.19.94.0/23
185.244.106.0/23
212.46.37.0/24
Signature Algorithm: sha256WithRSAEncryption
51:6e:c6:3f:ad:84:f7:bd:9a:e7:b3:6d:6e:e7:a6:48:64:ec:
9c:cc:65:9b:d2:6a:bd:69:55:12:73:ed:15:ff:42:48:2c:57:
37:c8:99:ee:1d:fd:08:b4:75:49:1a:a5:ac:bb:09:33:dc:2b:
5d:56:a4:86:83:dd:d9:1b:82:39:7c:1b:94:1e:7e:b8:18:6a:
b1:e2:db:a7:9f:5d:2e:60:b5:51:1c:b5:f8:97:4e:80:f2:00:
fb:f9:7a:99:c6:21:13:a6:54:bf:52:fe:b3:97:0f:68:e9:02:
41:2b:e0:e5:73:d7:97:73:16:46:20:3a:cf:dd:5d:c2:15:37:
c0:ac:2b:3a:98:65:dd:d1:72:2a:b0:9f:c5:c2:8b:39:09:c2:
69:d1:a5:ea:17:f2:03:48:77:9b:36:4f:8a:b1:94:7e:7b:cf:
cd:1c:d1:6b:7b:04:3e:43:a4:6e:68:b9:16:ad:a9:c0:55:d7:
a4:71:08:c7:95:53:cd:da:ef:b6:7f:7b:81:64:07:03:a6:01:
1f:9b:08:9e:f1:b3:e5:b4:62:94:35:74:c5:29:95:58:1f:87:
e6:d1:68:a0:a5:85:97:e2:66:b0:bf:52:0d:76:d4:25:7b:fe:
e1:f1:6d:07:5e:de:e9:c5:d4:9e:41:3a:92:55:4c:33:cd:37:
df:c6:17:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:57 2023 by rpki-client on console-ams.rpki-client.org