Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/OcQmkvWcp92HNDZmhGyZ0XK6ruE.roa
File: OcQmkvWcp92HNDZmhGyZ0XK6ruE.roa (raw, json)
Hash identifier: /IX4T3KR4smn0syGiJgqDNuexZAz/gHZA+PZEPt7U4Y=
Subject key identifier: 39:C4:26:92:F5:9C:A7:DD:87:34:36:66:84:6C:99:D1:72:BA:AE:E1
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0183B84968A99D5CFFEEACB79199D8386318
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/OcQmkvWcp92HNDZmhGyZ0XK6ruE.roa
Signing time: Sat 08 Oct 2022 15:49:22 +0000
ROA not before: Sat 08 Oct 2022 15:49:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 194.180.238.0/24 maxlen: 24
91.242.105.0/24 maxlen: 24
45.140.32.0/22 maxlen: 22
45.143.252.0/22 maxlen: 22
45.150.180.0/22 maxlen: 22
194.242.22.0/23 maxlen: 23
185.145.80.0/22 maxlen: 22
91.242.64.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:b8:49:68:a9:9d:5c:ff:ee:ac:b7:91:99:d8:38:63:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Oct 8 15:49:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39c42692f59ca7dd87343666846c99d172baaee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e3:65:ca:2e:c6:ba:20:bd:b9:60:b0:60:bd:
a7:33:76:8a:02:01:8b:5c:01:f1:cb:19:88:47:de:
9a:21:c0:d2:04:8e:f8:d9:bc:ba:86:72:3f:e4:c1:
c4:77:96:73:a9:54:6e:7f:a9:0a:93:40:a4:51:a3:
91:15:da:5e:b5:bc:41:82:85:66:a7:f4:dc:a6:86:
08:d6:cc:52:2c:21:4b:ce:a9:96:fa:39:7f:38:76:
97:c5:1f:18:0c:19:9d:69:2c:cb:12:37:0e:60:4e:
62:1a:89:b0:e8:2f:e0:e4:8f:b8:77:4f:97:31:f5:
28:71:0a:4d:79:5d:79:32:9f:ba:9c:64:70:b4:1d:
c5:fc:82:a4:03:55:eb:02:08:71:0e:0c:79:ed:56:
08:d8:b9:07:0b:11:65:69:25:b4:2f:0b:89:d0:cc:
31:e1:3b:7c:c4:dd:a9:fe:83:f3:3c:60:2c:5f:13:
38:51:58:4d:6e:86:fb:c0:5b:0c:6c:ff:72:be:0a:
80:19:76:18:ae:14:d2:1e:f4:1f:cd:2e:f7:d5:be:
5e:e0:b9:25:c4:48:00:bf:61:4d:23:aa:b6:7b:12:
6e:49:e9:1d:fe:0e:a1:ae:1a:01:a6:9f:99:9b:7b:
de:26:93:c6:6d:10:6c:4f:40:b5:6c:1c:4a:78:73:
bf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C4:26:92:F5:9C:A7:DD:87:34:36:66:84:6C:99:D1:72:BA:AE:E1
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/OcQmkvWcp92HNDZmhGyZ0XK6ruE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.32.0/22
45.143.252.0/22
45.150.180.0/22
91.242.64.0/22
91.242.105.0/24
185.145.80.0/22
194.180.238.0/24
194.242.22.0/23
Signature Algorithm: sha256WithRSAEncryption
62:b5:cd:8c:48:dd:2f:db:d7:24:41:e8:7a:3e:91:96:8d:ec:
ee:80:db:b2:27:23:a0:5d:5b:76:2a:2f:85:a3:e8:21:95:7e:
46:a8:e4:b9:9a:c7:9e:85:36:31:4c:ed:15:90:8a:86:a3:f4:
dc:1e:62:20:30:57:2c:64:98:06:a6:f7:c0:ee:5d:94:7f:87:
6f:af:2d:1e:42:bd:1a:4b:34:5d:5a:55:68:00:9c:9a:dc:a3:
18:f2:62:14:13:8e:fc:fa:1b:66:a9:63:fc:b9:7d:44:de:50:
9b:b3:47:d1:b3:6d:f5:89:1f:e6:e7:98:89:fd:03:8e:03:ac:
de:f3:bc:a6:ec:ca:79:37:09:1f:6e:95:10:31:b2:af:13:cf:
77:80:37:50:4e:b2:b6:67:97:8a:1b:90:38:c0:bf:02:24:93:
ef:6b:08:26:dc:12:96:f2:49:40:e3:d3:c8:13:33:b0:ca:d9:
0a:a1:8b:98:87:7e:fa:f7:4d:6c:52:b5:09:03:bd:3d:2c:97:
6c:d5:ef:05:6d:99:79:d8:99:d5:20:7d:d8:37:cc:a0:9c:78:
26:23:e7:b0:8e:63:b0:cb:fa:d5:96:da:18:d5:a0:45:a6:a3:
cc:47:37:7a:97:62:ce:39:79:12:90:0b:cd:70:9c:6b:98:b5:
77:67:6e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:36 2023 by rpki-client on console-ams.rpki-client.org