Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/Pv4dH5HQLp83Hlqx2VUNKBrmgMY.roa
File: Pv4dH5HQLp83Hlqx2VUNKBrmgMY.roa (raw, json)
Hash identifier: pQ8ADkbK10/amsuPHmnZIF+63JUpz5TuIQATl3rGfxc=
Subject key identifier: 3E:FE:1D:1F:91:D0:2E:9F:37:1E:5A:B1:D9:55:0D:28:1A:E6:80:C6
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 05FF4688
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/Pv4dH5HQLp83Hlqx2VUNKBrmgMY.roa
Signing time: Fri 14 Jan 2022 11:23:04 +0000
ROA not before: Fri 14 Jan 2022 11:23:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 45.151.98.0/24 maxlen: 24
45.151.97.0/24 maxlen: 24
94.137.78.0/23 maxlen: 23
94.137.74.0/24 maxlen: 24
94.137.75.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
94.137.93.0/24 maxlen: 24
94.137.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100615816 (0x5ff4688)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Jan 14 11:23:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3efe1d1f91d02e9f371e5ab1d9550d281ae680c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:07:6c:c6:48:ee:26:53:41:75:c1:a0:12:57:
5b:60:b8:f6:7d:2b:bb:c0:8b:74:e1:ce:f9:27:bd:
85:f2:39:6b:21:ce:13:44:d5:a7:8c:d6:df:1c:1e:
08:10:c1:c5:bd:2b:68:76:7c:50:a1:ef:bc:1e:17:
e1:fc:65:7d:ee:86:f5:9c:f0:e0:12:20:78:d8:41:
3d:04:48:d0:c3:a1:41:c6:bd:09:1b:3b:bc:81:65:
8f:42:d0:96:7c:d2:4f:ea:83:ac:fb:e4:ca:d0:ca:
d2:f8:8b:80:a4:f6:f6:a0:6e:03:e0:16:69:f6:05:
1a:e8:bb:fb:9e:8e:67:61:5a:ad:28:b4:c8:be:dd:
a0:87:08:53:c9:73:56:a1:c7:ee:32:42:72:04:66:
de:29:85:74:b6:0e:77:87:fc:14:53:75:3f:e9:76:
d0:ab:e8:2a:5c:d9:2e:e4:2f:a8:20:95:24:a2:0b:
c9:2f:34:49:40:81:11:c4:63:c7:d4:23:b1:1d:c4:
57:52:3c:a8:5f:25:3e:1c:fe:5b:63:f3:31:a0:4d:
62:92:fe:2d:b6:18:11:08:cb:17:fb:da:cf:f7:bd:
b1:12:4a:92:ca:bc:48:72:a9:cf:52:c5:e3:c3:53:
d1:13:e6:64:63:df:47:88:f6:44:0f:66:a0:d5:8a:
eb:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FE:1D:1F:91:D0:2E:9F:37:1E:5A:B1:D9:55:0D:28:1A:E6:80:C6
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/Pv4dH5HQLp83Hlqx2VUNKBrmgMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.97.0-45.151.98.255
94.137.74.0/23
94.137.78.0/23
94.137.89.0-94.137.91.255
94.137.93.0-94.137.94.255
Signature Algorithm: sha256WithRSAEncryption
8c:be:c6:51:05:59:84:c4:cb:49:0c:9a:3d:ca:2c:c4:e2:1d:
0c:3b:f2:67:11:0d:bf:21:81:e5:36:0d:f9:d6:8e:f6:7a:35:
ec:74:be:79:1c:95:09:7b:55:99:3e:ae:46:68:60:40:78:a8:
be:5a:dc:f4:40:46:52:76:5a:f8:7b:1b:a0:1d:81:3e:fb:0d:
60:ab:1b:fa:01:51:2f:9f:e6:ba:97:65:9d:6a:db:97:5c:df:
31:e7:92:6e:da:b9:86:7a:73:68:7b:f0:c0:a5:50:fa:b4:a2:
d0:76:8c:9c:69:cb:dc:66:21:de:81:08:05:00:b4:22:b1:42:
b1:7b:ab:4b:0b:6e:93:33:cb:95:81:77:82:7a:7d:6a:3c:f6:
fc:03:31:16:21:b1:35:0a:53:b3:9a:cd:a0:d3:e5:9f:65:c3:
c5:04:3c:b9:b4:c2:85:08:a5:76:91:f8:fa:d9:c6:4c:2d:e2:
6b:4a:a3:ea:ba:26:a1:3d:6e:2a:5b:c0:ba:2a:29:14:63:7c:
0f:68:d4:31:71:6e:67:3b:dc:34:26:e6:bb:b3:f0:f9:33:f9:
55:63:0a:e8:66:46:23:6e:98:0e:f2:1e:21:c4:41:f3:8d:bf:
c0:7f:f1:db:7c:6c:b2:43:7d:eb:5c:8f:0a:3a:ce:d6:24:93:
98:90:7c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:11 2023 by rpki-client on console-fra.rpki-client.org