Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/C4DJzmZ8w3M-_BG2wGPAqFWgv_0.roa
File: C4DJzmZ8w3M-_BG2wGPAqFWgv_0.roa (raw, json)
Hash identifier: PkafjrepDp5SivTealVYA+2/EhVNnyUxRJvXnP/jwws=
Subject key identifier: 0B:80:C9:CE:66:7C:C3:73:3E:FC:11:B6:C0:63:C0:A8:55:A0:BF:FD
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 0183086B726563DA02B30BF6464794F8B546
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/C4DJzmZ8w3M-_BG2wGPAqFWgv_0.roa
Signing time: Sun 04 Sep 2022 12:13:22 +0000
ROA not before: Sun 04 Sep 2022 12:13:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6134
IP address blocks: 45.131.179.0/24 maxlen: 24
91.217.160.0/24 maxlen: 24
193.227.103.0/24 maxlen: 24
193.227.109.0/24 maxlen: 24
193.227.114.0/24 maxlen: 24
193.200.149.0/24 maxlen: 24
193.200.152.0/24 maxlen: 24
45.132.238.0/24 maxlen: 24
45.132.239.0/24 maxlen: 24
91.238.207.0/24 maxlen: 24
45.128.146.0/24 maxlen: 24
45.128.147.0/24 maxlen: 24
45.137.11.0/24 maxlen: 24
45.137.10.0/24 maxlen: 24
2a12:a380::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:08:6b:72:65:63:da:02:b3:0b:f6:46:47:94:f8:b5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Sep 4 12:13:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b80c9ce667cc3733efc11b6c063c0a855a0bffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3c:57:58:f2:7c:bd:a2:44:ee:4d:88:50:ad:
6c:d6:c9:80:fd:3c:94:fd:37:a3:5f:a2:a5:6b:9b:
2d:ea:1e:99:11:98:5f:5b:ec:3c:f2:cd:62:b5:44:
dc:b6:cc:e7:f5:19:91:2f:97:7b:18:d7:2f:29:c9:
6e:8f:e1:dc:14:e6:a3:96:1e:ca:67:63:7c:4c:40:
2a:d7:c2:ab:dd:71:2f:de:40:4b:a7:db:3d:05:b9:
90:06:3d:fc:30:6b:33:0c:30:b5:c4:e2:c7:19:d7:
1d:4d:6e:4d:a5:c7:44:10:0f:81:1e:6d:2f:96:2b:
3d:ea:57:ae:33:8d:88:39:e1:e3:35:b9:2d:3e:85:
a5:08:0f:98:80:ae:db:2e:97:81:8c:62:7c:a8:cb:
cb:6b:c1:97:50:f4:e7:bc:1a:a4:e6:4a:1e:3e:d6:
82:e5:e7:7b:ff:2c:30:5f:ec:31:31:c2:7a:2b:0e:
c0:0e:ed:ea:a4:c9:e7:da:0e:6a:83:04:fc:b9:d0:
18:5d:d5:86:79:cc:8b:6a:4a:23:a8:39:da:6b:1d:
ec:31:b6:98:12:98:71:8b:2e:50:1f:a8:c0:2f:aa:
b6:f7:19:5a:26:e5:c2:7b:7b:7a:ca:2b:61:c0:17:
7a:bf:a2:64:30:eb:c4:66:56:96:86:54:5e:74:dd:
06:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:80:C9:CE:66:7C:C3:73:3E:FC:11:B6:C0:63:C0:A8:55:A0:BF:FD
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/C4DJzmZ8w3M-_BG2wGPAqFWgv_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.128.146.0/23
45.131.179.0/24
45.132.238.0/23
45.137.10.0/23
91.217.160.0/24
91.238.207.0/24
193.200.149.0/24
193.200.152.0/24
193.227.103.0/24
193.227.109.0/24
193.227.114.0/24
IPv6:
2a12:a380::/29
Signature Algorithm: sha256WithRSAEncryption
40:c1:43:b2:75:99:a9:3a:ed:07:f6:19:18:da:0a:16:e8:70:
17:1a:96:f4:70:72:0e:f4:88:e3:9b:77:3c:03:78:75:e4:a5:
a2:8d:b7:13:75:57:a7:c4:50:db:15:7e:5c:87:b8:77:13:dc:
bc:f2:5e:42:de:cf:6f:cb:ff:ff:12:63:78:8e:e9:54:bb:4d:
d7:7a:05:5e:33:b2:91:78:d9:8f:7c:63:0d:09:90:21:ad:3f:
64:1b:36:ef:f8:b5:dd:21:e4:13:82:2e:e7:cb:0a:23:5f:f2:
21:a1:6e:d1:5e:9f:be:6f:41:05:fc:2c:8f:a4:9b:2e:ae:10:
03:57:46:0d:c3:8e:bf:d0:c7:db:d4:42:ef:e3:5a:c4:c6:86:
59:82:7d:5c:a9:0e:af:84:81:cf:09:5d:19:40:6b:dd:5d:6c:
f4:a4:1e:84:1a:b7:35:78:49:a5:87:84:96:d1:34:82:ea:3e:
6d:2e:96:9e:94:e3:9b:3e:60:9c:18:43:82:4d:ee:0d:b4:45:
3e:8f:cf:53:5d:3c:64:26:7b:f5:34:75:72:25:91:3b:d4:4a:
e4:d9:a0:b2:af:51:4d:1c:e4:55:1c:83:92:b6:30:55:41:de:
a3:72:02:ba:18:fd:0b:51:70:de:59:0c:02:d5:94:7a:83:dc:
8e:a7:5f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:19 2023 by rpki-client on console-ams.rpki-client.org