Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/5YmZ9NCTWbJgOx6ZonR02s3nGKQ.roa
File: 5YmZ9NCTWbJgOx6ZonR02s3nGKQ.roa (raw, json)
Hash identifier: IzFWOVr3p9R0mOR8/HLQyVYwaTHols1bjcAZ84P9wOQ=
Subject key identifier: E5:89:99:F4:D0:93:59:B2:60:3B:1E:99:A2:74:74:DA:CD:E7:18:A4
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0183B841B22DE12A1C0C864CDE55924A155C
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/5YmZ9NCTWbJgOx6ZonR02s3nGKQ.roa
Signing time: Sat 08 Oct 2022 15:40:56 +0000
ROA not before: Sat 08 Oct 2022 15:40:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207177
IP address blocks: 91.242.81.0/24 maxlen: 24
185.212.11.0/24 maxlen: 24
171.22.52.0/22 maxlen: 22
45.86.17.0/24 maxlen: 24
45.86.16.0/24 maxlen: 24
45.86.16.0/22 maxlen: 22
45.86.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b8:41:b2:2d:e1:2a:1c:0c:86:4c:de:55:92:4a:15:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Oct 8 15:40:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e58999f4d09359b2603b1e99a27474dacde718a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:aa:be:6b:50:04:54:3b:5f:4b:01:51:3b:ee:
3e:b7:88:c2:50:69:53:7d:a1:aa:43:1f:f0:35:46:
42:ff:9e:5d:35:1a:0e:c7:42:32:f9:da:e7:d1:ae:
bd:20:b8:d1:b8:b8:b2:20:aa:fc:bb:7a:ba:a4:dd:
84:4d:f4:36:64:a8:c7:ec:77:a0:49:84:09:ab:96:
e2:d8:b8:5d:b0:31:9f:71:d5:bb:bf:68:79:2d:03:
3e:28:ed:e6:f7:9b:18:ea:98:f5:97:1e:47:82:20:
c7:a7:81:d9:ae:f4:a0:a8:46:0c:7e:48:ac:26:ab:
de:53:50:70:3c:36:3e:aa:b8:02:7b:de:dd:c4:e8:
c4:bc:32:d0:04:e5:0b:f3:65:45:a1:34:0c:59:09:
a4:8f:b3:f3:04:50:be:21:8a:2f:d1:17:25:88:c8:
64:04:e4:68:21:ca:c0:c2:9b:ee:e1:b8:34:85:b0:
79:68:4f:06:2c:e3:c3:95:c8:e6:90:d6:4a:76:75:
d5:eb:f6:99:85:74:2e:70:dc:1a:95:48:4c:a1:45:
e4:d3:05:2b:27:00:1a:62:9a:4b:5e:53:3b:80:62:
72:3e:c5:e3:9f:28:c6:c7:0a:76:e9:ba:a7:98:24:
98:cc:65:45:1f:65:89:7d:64:b9:c0:65:37:69:26:
83:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:89:99:F4:D0:93:59:B2:60:3B:1E:99:A2:74:74:DA:CD:E7:18:A4
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/5YmZ9NCTWbJgOx6ZonR02s3nGKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.16.0/22
91.242.81.0/24
171.22.52.0/22
185.212.11.0/24
Signature Algorithm: sha256WithRSAEncryption
73:be:88:b8:8c:77:21:50:9c:62:a3:ff:44:62:bb:cb:d9:07:
7c:99:a3:3f:0f:0d:fd:c0:b9:0f:c4:cc:a5:56:3a:1e:70:d3:
42:3a:bd:82:4f:ab:42:e8:a2:25:d8:c1:aa:04:2a:50:95:c8:
91:fa:0e:10:f7:da:dc:27:7e:06:96:f2:a4:cf:98:5f:6a:a0:
94:54:e3:e5:67:62:66:4b:23:d0:77:86:c0:73:9e:88:3a:8e:
0c:33:d0:ea:53:48:00:b3:4e:83:e8:2a:b5:14:74:d8:5b:78:
7c:0e:e7:38:0d:52:37:58:5a:d2:8c:e6:23:34:68:96:6c:be:
68:d7:9d:6d:b8:2e:4a:76:27:61:6b:74:6d:3c:be:26:07:ee:
fc:fa:93:fe:05:a3:ec:87:f2:be:d4:9e:7d:9b:f3:e7:2e:e0:
1c:3f:a4:8e:1d:a0:ab:1d:e7:d3:02:68:05:bc:43:7b:0a:5d:
bd:0c:f1:4d:f6:bc:99:f7:40:79:e7:91:8f:b1:e3:be:fd:ad:
89:f8:57:a9:06:61:ab:8e:7a:da:63:6f:64:18:12:3c:7a:73:
f6:29:e6:71:ae:fd:35:84:a3:ce:dc:0c:76:10:8d:b5:95:dd:
74:3f:8c:9b:9d:e4:2a:6f:b0:69:72:2c:3e:af:8c:b0:8a:ff:
6e:17:ce:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:36 2023 by rpki-client on console-ams.rpki-client.org