Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/0GrQkMt0aYh_94Q2gX2i7BStvaU.roa
File: 0GrQkMt0aYh_94Q2gX2i7BStvaU.roa (raw, json)
Hash identifier: feHmjWgwliwzeyF2IC4/bfJE90r0L1oFUh/mKMWtHqY=
Subject key identifier: D0:6A:D0:90:CB:74:69:88:7F:F7:84:36:81:7D:A2:EC:14:AD:BD:A5
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 069CA906
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/0GrQkMt0aYh_94Q2gX2i7BStvaU.roa
Signing time: Wed 16 Mar 2022 20:28:52 +0000
ROA not before: Wed 16 Mar 2022 20:28:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 45.151.98.0/24 maxlen: 24
45.151.97.0/24 maxlen: 24
45.151.99.0/24 maxlen: 24
94.137.75.0/24 maxlen: 24
94.137.79.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
94.137.93.0/24 maxlen: 24
94.137.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110930182 (0x69ca906)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Mar 16 20:28:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d06ad090cb7469887ff78436817da2ec14adbda5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:93:4a:2d:c8:cc:8e:83:c3:6d:5c:43:4f:b3:
ea:9b:53:4f:dc:b6:22:b0:e9:9c:15:f2:91:35:68:
3f:35:08:86:27:0e:c7:db:22:4a:e3:b0:e4:8d:e1:
98:83:9a:84:5f:27:24:95:6c:77:10:29:8c:15:f9:
1d:be:c9:de:39:fc:69:ba:da:d5:88:78:e3:c7:80:
cd:d2:ec:4d:1a:5b:17:04:2b:7f:bd:af:f1:2b:6d:
7d:c8:6b:b1:aa:99:49:de:d1:f6:97:65:b2:0f:17:
64:c2:2e:d5:4d:c8:eb:b1:12:4d:6b:24:ed:7e:01:
3d:b8:d9:32:23:b2:4d:7a:99:57:09:10:5d:88:13:
64:c0:2e:b8:75:59:fc:ea:c1:4d:88:38:a7:26:a5:
9a:eb:c1:2e:37:32:c7:07:47:ef:f3:44:17:d2:d3:
9d:ef:c1:5c:2a:3d:e7:2b:5d:98:8a:95:77:aa:96:
8e:ce:2c:8b:03:22:49:75:da:c6:0a:82:81:1c:21:
16:75:d6:6a:38:f1:b3:c3:f5:26:3e:a8:dc:d7:69:
bb:b9:a7:74:3e:be:d9:57:5d:e6:22:f8:56:e9:a7:
93:bc:8f:87:69:60:9f:bf:f5:01:cd:a4:cb:07:41:
76:2f:66:d8:e1:7f:1d:a9:cf:99:e0:a7:a2:c4:3f:
4f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6A:D0:90:CB:74:69:88:7F:F7:84:36:81:7D:A2:EC:14:AD:BD:A5
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/0GrQkMt0aYh_94Q2gX2i7BStvaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.97.0-45.151.99.255
94.137.75.0/24
94.137.79.0/24
94.137.89.0-94.137.91.255
94.137.93.0-94.137.94.255
Signature Algorithm: sha256WithRSAEncryption
26:f9:e7:94:8f:1e:bc:aa:b7:f3:fb:84:e0:7b:f0:5b:e6:f2:
a6:44:b6:48:ca:ae:63:aa:fc:d5:af:46:dd:75:4b:f6:bf:c4:
e6:69:7f:c1:15:8a:a5:e9:ae:bd:07:60:a3:55:ef:81:22:d5:
43:47:ef:55:63:c4:09:27:22:5f:2c:39:da:71:cc:78:95:cb:
4a:79:6b:31:d2:63:11:62:78:8c:e7:98:a5:03:9a:ad:75:95:
5a:c1:ea:e2:75:73:f7:a7:5b:20:41:e0:4b:1e:41:96:29:1c:
3e:ad:98:1a:44:75:01:a6:51:f6:12:fb:17:9c:20:b5:cd:f6:
29:fa:cc:50:0f:a2:5e:38:cb:b4:b3:d7:e0:2b:5b:cd:d6:86:
e9:5a:ae:d1:90:04:de:3d:63:27:6e:b3:d3:d7:6a:59:44:c9:
09:6d:2c:7a:8d:4b:af:da:cc:2b:a1:8c:8b:69:6f:0d:dc:b2:
4a:10:47:9c:c7:ea:d3:81:4e:6b:16:e8:f9:de:59:32:a9:ab:
6b:3d:6a:a1:ef:3e:5c:76:b0:79:c3:a0:83:47:e2:29:9e:ed:
0c:27:4e:91:76:fe:be:93:66:66:d9:03:2d:0e:fe:72:40:59:
f3:21:08:61:00:63:01:74:40:d0:8d:f1:4a:fa:6f:bc:95:5c:
95:00:9d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:57 2023 by rpki-client on console-ams.rpki-client.org