Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/ikh2PCYLTWKfAXS0ITQaQHCxzNA.roa
File: ikh2PCYLTWKfAXS0ITQaQHCxzNA.roa (raw, json)
Hash identifier: 3EiJSt3GLrGLeQVfu/BOg31j9j69ykaIYiUkhWX6TnM=
Subject key identifier: 8A:48:76:3C:26:0B:4D:62:9F:01:74:B4:21:34:1A:40:70:B1:CC:D0
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 01830E9787676DBDFB0752BDD2C8C1404FC9
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/ikh2PCYLTWKfAXS0ITQaQHCxzNA.roa
Signing time: Mon 05 Sep 2022 16:59:15 +0000
ROA not before: Mon 05 Sep 2022 16:59:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.239.236.0/23 maxlen: 24
45.150.174.0/24 maxlen: 24
45.139.196.0/22 maxlen: 24
193.239.196.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:0e:97:87:67:6d:bd:fb:07:52:bd:d2:c8:c1:40:4f:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Sep 5 16:59:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a48763c260b4d629f0174b421341a4070b1ccd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a2:ee:e0:f0:4d:af:9d:39:6c:76:d3:8b:f2:
7e:1f:53:a9:43:31:5c:fb:5b:c7:1a:3a:fb:31:67:
cd:50:c5:d7:67:cc:93:d4:8f:c3:14:e7:9d:e7:e6:
b6:46:2a:fc:3a:3e:9a:f4:15:17:37:cf:ce:a9:49:
76:01:3b:41:9f:a7:35:68:cc:08:98:c7:f3:5f:19:
96:d1:6c:54:99:c7:df:ba:c7:2e:60:f7:77:3a:41:
06:16:99:cf:5e:7a:ff:e1:b6:68:f7:ce:d5:f2:fa:
54:4f:4a:20:a9:4d:45:62:b3:dc:dd:3e:3e:3c:7d:
2c:ee:90:fb:f9:cc:5f:25:1f:03:24:6c:68:ee:1b:
64:18:63:1d:d8:99:69:33:00:89:26:e7:00:e2:b4:
be:f2:be:4e:b7:79:20:e2:6c:18:3f:66:c8:50:04:
1b:c7:55:34:b0:e1:a4:2f:b2:b6:42:7f:1e:55:bb:
ac:a6:c0:fb:33:8c:1c:e6:30:fa:84:33:dd:1c:b9:
ca:25:96:60:fd:00:11:e9:ba:f5:51:8f:5a:50:c2:
d9:53:1a:c0:ac:d2:a3:2a:e7:2d:56:d4:81:d9:69:
e0:ae:0b:af:e3:cb:3b:58:3a:50:8f:0b:87:86:51:
d6:a9:02:36:2c:4d:4e:a2:b9:91:57:4b:66:af:19:
a0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:48:76:3C:26:0B:4D:62:9F:01:74:B4:21:34:1A:40:70:B1:CC:D0
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/ikh2PCYLTWKfAXS0ITQaQHCxzNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.196.0/22
45.150.174.0/24
193.239.196.0/23
193.239.236.0/23
Signature Algorithm: sha256WithRSAEncryption
72:9d:98:fa:b0:b2:96:92:e2:74:8b:54:10:95:f1:6b:3d:5e:
f6:9c:ef:53:1a:9b:84:95:0a:95:57:45:44:a1:f8:0b:c2:74:
90:ec:3b:3d:0c:21:40:a9:b4:c7:08:56:33:ae:d7:74:94:c8:
90:26:39:a6:02:2c:be:ba:d4:11:5d:f9:d5:e0:a5:38:a8:5d:
b2:77:33:e2:8f:33:0f:94:34:62:cf:11:1e:55:5e:c7:93:d0:
7c:2e:28:b9:57:64:76:01:9c:e7:8a:49:f3:86:0b:b7:58:ad:
1c:7a:3d:52:e8:83:fc:9a:90:1b:30:2b:45:36:2e:b8:5b:b0:
70:d9:af:1a:c1:9c:83:9f:ff:9f:f8:9d:f1:8d:b4:e7:08:23:
e9:f0:01:c4:cc:26:ba:40:18:ee:c4:d7:10:bc:6c:67:7a:ed:
34:82:09:3c:d4:01:ce:4a:16:98:fb:d6:05:52:f5:b6:d8:8e:
5a:78:06:95:7b:74:a6:1a:30:a0:5b:38:8c:51:08:1a:5d:a8:
94:4d:af:4d:b7:51:cb:bc:0e:df:4c:18:6a:77:54:05:67:96:
e5:32:c8:0c:4a:d2:f4:f2:f7:93:b2:43:e7:e9:c2:b3:95:8a:
10:e0:28:ef:2c:25:2e:5d:27:7e:bc:e9:79:2e:3e:1e:5c:ee:
df:86:8a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:15 2023 by rpki-client on console-ams.rpki-client.org