Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Q6P6b04RAC6rwlQQ0zRUGVH1oks.roa
File: Q6P6b04RAC6rwlQQ0zRUGVH1oks.roa (raw, json)
Hash identifier: QJIfnYx7itijkwSbr8bTl77e2z/2VFKFY3pHyArkmjA=
Subject key identifier: 43:A3:FA:6F:4E:11:00:2E:AB:C2:54:10:D3:34:54:19:51:F5:A2:4B
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0183F47A32C4259D20E870265E6F8DEC3EBA
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Q6P6b04RAC6rwlQQ0zRUGVH1oks.roa
Signing time: Thu 20 Oct 2022 08:19:52 +0000
ROA not before: Thu 20 Oct 2022 08:19:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7018
IP address blocks: 91.242.81.0/24 maxlen: 24
5.182.28.0/22 maxlen: 22
185.212.11.0/24 maxlen: 24
91.242.107.0/24 maxlen: 24
45.140.32.0/22 maxlen: 22
45.150.180.0/22 maxlen: 22
194.242.28.0/23 maxlen: 24
45.88.124.0/22 maxlen: 22
185.173.247.0/24 maxlen: 24
193.46.211.0/24 maxlen: 24
194.56.152.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f4:7a:32:c4:25:9d:20:e8:70:26:5e:6f:8d:ec:3e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Oct 20 08:19:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43a3fa6f4e11002eabc25410d334541951f5a24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c5:5a:ae:ce:03:fb:25:7f:1d:d0:4b:50:67:
b7:37:37:ff:b5:e1:5a:77:57:d9:b6:b0:ae:f5:aa:
c5:bd:cb:de:fe:dc:c8:b9:be:07:ed:a8:1f:af:18:
34:d5:f7:2b:08:c3:29:2f:56:8c:37:d6:10:1d:d2:
14:c8:92:5f:02:42:23:0b:52:3f:ba:ab:de:aa:a2:
1a:db:91:48:bc:f6:be:d7:b9:72:68:95:03:4c:a7:
b9:6a:d1:82:e5:84:a4:21:b4:85:a2:46:89:bc:d7:
5f:7e:41:d3:ca:2a:76:a4:b7:27:90:d6:c4:b9:d1:
8f:47:90:b8:fc:47:02:fc:35:13:cf:a9:84:aa:84:
75:bf:f5:b1:48:d9:ae:37:77:be:db:18:6c:ba:b1:
f2:06:bf:38:9b:c5:10:79:00:c0:45:b5:bb:a5:a6:
b2:c4:76:d2:eb:18:8c:54:f6:78:d6:0e:ee:74:6a:
df:0b:16:06:e9:b4:9c:bf:09:35:0f:b3:03:28:2b:
f7:f7:bc:f3:f5:f4:14:f5:c6:58:ed:13:af:30:e6:
a5:6b:b9:8f:3c:19:a9:77:23:eb:bc:21:b0:dd:18:
a6:7b:67:8f:ae:06:1b:73:15:d7:fc:33:54:aa:57:
f3:79:9c:74:84:63:f8:d5:22:03:24:2e:35:76:86:
ac:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A3:FA:6F:4E:11:00:2E:AB:C2:54:10:D3:34:54:19:51:F5:A2:4B
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/Q6P6b04RAC6rwlQQ0zRUGVH1oks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.28.0/22
45.88.124.0/22
45.140.32.0/22
45.150.180.0/22
91.242.81.0/24
91.242.107.0/24
185.173.247.0/24
185.212.11.0/24
193.46.211.0/24
194.56.152.0/23
194.242.28.0/23
Signature Algorithm: sha256WithRSAEncryption
85:24:45:a5:e0:2c:e0:bc:e2:f4:81:3a:5f:08:17:de:4d:59:
0f:da:99:9b:12:78:8c:5c:18:46:e9:0d:4b:68:9c:99:58:79:
ae:c5:81:27:35:2b:d1:3a:0f:aa:d9:ba:bc:4d:3f:28:b6:38:
cf:b7:81:80:91:21:5e:d6:a7:e7:70:df:b7:eb:b0:19:be:de:
b3:96:81:7b:f0:c7:6d:ed:7d:4a:8d:79:ef:d6:61:a5:7f:a7:
ce:07:39:89:08:71:b3:68:b4:bf:20:61:9b:61:24:91:ff:dc:
57:51:d0:4f:47:cf:34:e1:19:9e:19:8a:4e:e1:47:b8:f2:23:
51:35:c7:56:b2:b3:78:04:35:de:44:b4:b5:3c:6d:3a:c9:f3:
8b:00:58:08:66:cc:74:a6:7f:ec:05:f4:73:51:43:d6:6b:26:
e0:8d:47:d1:0c:00:f5:36:4c:ef:da:40:0c:4f:1f:ab:02:be:
93:9d:84:7e:cc:89:c6:fa:26:40:1a:37:fa:60:bd:26:0b:b0:
96:f0:ba:94:e2:63:08:95:d2:01:c6:d6:4a:8d:02:bc:3a:9b:
22:f2:c2:04:0e:83:9e:1b:b3:43:cc:25:87:91:88:2b:bf:30:
53:5e:2e:ac:e4:7a:8a:cd:d3:3d:db:de:53:00:33:07:53:50:
5e:ee:75:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:36 2023 by rpki-client on console-ams.rpki-client.org