Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/e8245Gpm6SqD25OULIs7-bzzJs4.roa
File: e8245Gpm6SqD25OULIs7-bzzJs4.roa (raw, json)
Hash identifier: l/NslftN8c37DOlcVrpEsgAQBX0ogsG01HnKIJh1QOU=
Subject key identifier: 7B:CD:B8:E4:6A:66:E9:2A:83:DB:93:94:2C:8B:3B:F9:BC:F3:26:CE
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 06FAE198
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/e8245Gpm6SqD25OULIs7-bzzJs4.roa
Signing time: Wed 20 Apr 2022 07:42:24 +0000
ROA not before: Wed 20 Apr 2022 07:42:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 45.151.98.0/24 maxlen: 24
94.137.74.0/24 maxlen: 24
94.137.76.0/24 maxlen: 24
94.137.79.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
94.137.93.0/24 maxlen: 24
94.137.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117105048 (0x6fae198)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Apr 20 07:42:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7bcdb8e46a66e92a83db93942c8b3bf9bcf326ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:80:dd:58:ef:37:48:41:3c:78:6c:15:8a:87:
33:01:ef:77:4a:c4:f0:8b:ec:9c:cd:b3:62:c4:72:
fd:89:e3:42:86:4b:28:92:75:e7:72:a9:22:fe:6a:
00:9a:17:a1:42:50:01:2e:d8:ff:6d:2e:4b:1a:ee:
e9:fc:a3:ba:42:ac:94:99:82:48:21:fa:9c:fc:27:
bb:a2:60:bf:58:3b:55:5e:0d:21:12:0d:1d:f3:ec:
e7:56:f2:66:eb:6d:48:e2:20:50:44:c8:43:33:2b:
1d:d9:a6:88:62:44:39:5b:4b:d8:f0:00:42:7a:c1:
c1:86:fa:b4:35:0e:bb:c9:b8:87:4a:eb:64:33:4f:
59:4a:a3:f2:59:75:b5:2b:ad:a3:a5:a7:3f:a9:6e:
93:5f:2a:82:3f:6e:c4:ca:b4:40:77:65:3a:36:64:
3e:64:57:44:76:db:71:f2:4d:25:fe:f7:a0:03:33:
39:fe:70:e3:46:99:67:98:47:78:5b:5d:49:ab:7b:
d5:9b:03:21:5f:41:77:96:ae:ae:78:70:13:8a:9b:
d8:1a:db:34:57:85:9a:94:e5:01:c4:93:e5:2a:76:
5e:07:ed:8f:73:9f:4b:fb:04:47:c0:03:43:7b:18:
ed:7c:78:f5:4b:cc:2d:f3:65:38:59:3e:12:54:ce:
f1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CD:B8:E4:6A:66:E9:2A:83:DB:93:94:2C:8B:3B:F9:BC:F3:26:CE
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/e8245Gpm6SqD25OULIs7-bzzJs4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.98.0/24
94.137.74.0/24
94.137.76.0/24
94.137.79.0/24
94.137.89.0-94.137.91.255
94.137.93.0-94.137.94.255
Signature Algorithm: sha256WithRSAEncryption
2d:2f:29:8f:9f:0a:60:02:a3:48:bb:a4:a4:a7:5b:bf:7a:40:
c5:be:ad:d9:80:b0:90:78:1a:4a:af:02:69:cb:de:96:38:28:
85:88:a6:55:af:ee:a0:96:fe:e9:72:34:1b:8e:a9:07:b3:c1:
62:bf:c3:37:11:19:37:5c:5b:42:2f:f2:35:9a:1d:06:78:94:
3c:f1:42:ec:f0:20:20:cc:f8:4b:17:59:43:62:a8:bf:f6:c2:
a0:9e:10:8f:77:90:32:61:b5:ae:d1:ca:f7:73:f3:4d:1f:79:
71:1d:fa:b2:a3:07:ae:c0:40:ff:90:85:2b:08:26:ff:57:78:
1a:9c:45:53:82:f0:05:1f:a6:9b:8b:39:a6:0f:b2:e6:79:db:
34:23:34:b5:28:b2:92:9e:ae:39:18:d2:90:62:22:cc:3b:09:
b4:ac:de:fb:b9:11:3c:95:ec:72:4e:f9:2a:94:c6:08:b7:1e:
f8:b8:34:d9:8a:16:cc:84:64:d0:54:1a:11:e9:8c:de:2e:30:
1a:90:f9:82:10:81:37:5a:8c:7c:56:23:fe:64:39:82:99:f3:
1c:3a:f7:ad:a5:72:b0:42:a3:7f:b5:e8:fc:d3:65:29:7d:bd:
54:49:b4:1b:94:ef:d1:a6:95:13:5c:9a:67:f5:97:ac:3f:3c:
01:40:88:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:57 2023 by rpki-client on console-ams.rpki-client.org