Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/zXxSj7vUh9RJWlhNRHImjbHe9bM.roa
File: zXxSj7vUh9RJWlhNRHImjbHe9bM.roa (raw, json)
Hash identifier: CsZBBtmeytKWS/DSso/qLbNLuE2XLZZuV/PCCerglFY=
Subject key identifier: CD:7C:52:8F:BB:D4:87:D4:49:5A:58:4D:44:72:26:8D:B1:DE:F5:B3
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 01847EF740DE70445F454BB40F1A77B69540
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/zXxSj7vUh9RJWlhNRHImjbHe9bM.roa
Signing time: Wed 16 Nov 2022 05:44:04 +0000
ROA not before: Wed 16 Nov 2022 05:44:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3215
IP address blocks: 45.135.10.0/24 maxlen: 24
45.135.8.0/24 maxlen: 24
45.136.218.0/24 maxlen: 24
45.136.216.0/24 maxlen: 24
45.139.34.0/24 maxlen: 24
45.139.32.0/24 maxlen: 24
45.138.76.0/24 maxlen: 24
45.138.78.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7e:f7:40:de:70:44:5f:45:4b:b4:0f:1a:77:b6:95:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Nov 16 05:44:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd7c528fbbd487d4495a584d4472268db1def5b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:c2:28:49:ae:7a:7d:96:99:6d:71:4d:88:
6a:8f:88:37:af:bb:3d:b8:19:5b:5c:b7:8d:30:c2:
5d:f0:03:64:6a:22:be:58:05:63:0a:06:1a:7d:8f:
0c:42:bf:33:0c:3a:ec:72:dd:b8:f1:e7:71:5e:4d:
4b:74:95:4b:2c:ed:ed:4a:b4:e5:6e:55:1f:4b:e8:
ab:b8:57:18:be:52:41:b3:9a:35:9f:d8:77:97:7f:
80:94:9b:2f:59:70:ab:8b:22:2c:0b:0d:c7:2e:9f:
ac:bf:c6:73:81:d2:a4:da:33:2c:7c:c6:ab:53:73:
93:68:80:45:b5:71:42:4c:a9:bd:fd:88:e0:a3:0e:
a0:a8:4c:6a:40:08:ce:cb:57:2d:82:fd:9c:0c:22:
47:90:1a:77:34:51:c4:14:3b:72:77:eb:92:5f:93:
e6:a5:c4:eb:b5:e3:c2:6f:38:24:33:53:4f:26:4c:
1c:bb:90:53:54:c4:c3:d8:fe:e0:ed:dc:2f:49:4c:
25:e8:21:08:21:a6:69:d2:a4:3f:8a:97:be:ee:87:
4d:7d:fb:dc:78:23:e7:17:c5:8c:54:56:42:1f:6a:
f1:55:cf:d1:52:09:87:0b:a0:14:62:f6:04:bc:38:
bf:2d:7f:2a:4f:f2:fb:83:a5:6b:fa:c4:6c:6e:47:
51:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7C:52:8F:BB:D4:87:D4:49:5A:58:4D:44:72:26:8D:B1:DE:F5:B3
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/zXxSj7vUh9RJWlhNRHImjbHe9bM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.8.0/24
45.135.10.0/24
45.136.216.0/24
45.136.218.0/24
45.138.76.0/24
45.138.78.0/24
45.139.32.0/24
45.139.34.0/24
Signature Algorithm: sha256WithRSAEncryption
26:9a:aa:a1:2b:18:d4:0a:5b:97:b7:78:94:e9:a9:6d:9b:f0:
50:9f:4e:5a:5a:93:f4:cf:36:cb:5a:4e:46:d0:6e:79:4b:43:
3c:8d:08:f9:0f:21:a3:c1:57:e4:10:0f:9a:55:c2:42:f0:59:
ff:5c:13:4c:19:fd:bd:da:7c:3b:ea:42:e0:be:c1:7b:36:47:
b3:d6:6a:51:c4:e1:49:93:94:64:e9:8b:53:77:fc:4d:86:ab:
4f:55:82:4f:0c:2f:7e:c1:c6:ee:4e:16:b0:07:96:4c:0b:4c:
fd:34:d5:30:37:ec:7e:f4:71:08:3f:47:79:0a:e5:77:a7:81:
a3:0e:54:0a:fc:47:75:52:6e:bd:24:ae:a2:7c:93:57:07:2a:
18:60:38:f9:04:7b:1d:f4:bb:d3:10:4b:8e:0e:e3:fb:f5:fa:
e8:f3:93:2e:96:c3:8a:7d:ec:07:1d:28:81:9a:9c:52:9d:07:
60:c0:51:b7:81:14:11:f9:4a:c4:f1:67:51:66:47:c6:5e:16:
7b:d6:7a:90:db:57:36:1e:95:18:e7:e5:b9:02:04:31:3f:f0:
95:c5:cb:fc:b3:59:6b:32:4e:3d:fe:10:bb:d6:14:23:4f:c9:
af:f7:2b:94:eb:ef:1d:ab:b5:85:d2:2d:44:82:60:de:8f:4c:
1c:da:84:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:06 2023 by rpki-client on console-fra.rpki-client.org