Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/svC5zccYSWcxdpnb5MV0eZBdUkQ.roa
File: svC5zccYSWcxdpnb5MV0eZBdUkQ.roa (raw, json)
Hash identifier: hl5EBPO531zK4sDZuQHjh9PaWtMPowYfiumg69BbTzw=
Subject key identifier: B2:F0:B9:CD:C7:18:49:67:31:76:99:DB:E4:C5:74:79:90:5D:52:44
Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Certificate serial: 06E0D09C
Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/svC5zccYSWcxdpnb5MV0eZBdUkQ.roa
Signing time: Mon 11 Apr 2022 13:13:55 +0000
ROA not before: Mon 11 Apr 2022 13:13:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 45.151.98.0/24 maxlen: 24
94.137.78.0/24 maxlen: 24
94.137.74.0/24 maxlen: 24
94.137.79.0/24 maxlen: 24
94.137.91.0/24 maxlen: 24
94.137.90.0/24 maxlen: 24
94.137.89.0/24 maxlen: 24
94.137.93.0/24 maxlen: 24
94.137.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115396764 (0x6e0d09c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697
Validity
Not Before: Apr 11 13:13:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2f0b9cdc7184967317699dbe4c57479905d5244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:67:08:ef:06:24:90:bf:d2:32:f7:9e:8f:d5:
19:7a:30:8f:02:f0:15:ca:17:c5:1a:99:00:02:f3:
57:b7:ac:d1:cd:22:b8:85:0e:70:fa:77:84:62:8c:
08:b8:83:b8:04:ff:80:fb:9c:64:3d:e3:96:10:03:
41:56:cc:e9:01:65:43:2a:53:13:52:73:3f:84:45:
17:47:47:3b:91:14:cb:83:84:4e:ae:ea:be:db:59:
b0:02:4c:6e:e9:32:00:03:8c:15:e0:ab:55:4f:4e:
f7:24:26:c2:cb:df:c3:cc:1b:85:cd:d3:7b:b4:db:
e6:ea:31:ba:07:5d:10:c4:11:78:2e:a7:7e:de:6d:
bb:84:e0:23:35:c2:58:c8:75:fd:e9:3c:81:46:11:
4b:12:27:92:3d:3a:08:0a:95:ac:09:84:92:6b:04:
3b:b1:b8:d8:c7:2a:22:2f:b4:fd:b8:d3:3f:f8:a8:
d3:ef:80:ac:27:00:64:6b:ea:c5:23:3b:bc:5b:71:
76:5f:ce:fe:60:b2:77:d9:5f:2c:7c:ed:49:e6:70:
0a:be:17:93:13:27:69:57:7f:6a:ae:55:c2:69:68:
0b:d9:3c:7d:75:7e:76:c4:c2:04:16:23:fa:61:df:
00:e3:bf:1b:01:49:d1:64:36:b5:94:f8:68:f9:bb:
e0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F0:B9:CD:C7:18:49:67:31:76:99:DB:E4:C5:74:79:90:5D:52:44
X509v3 Authority Key Identifier:
keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/svC5zccYSWcxdpnb5MV0eZBdUkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.98.0/24
94.137.74.0/24
94.137.78.0/23
94.137.89.0-94.137.91.255
94.137.93.0-94.137.94.255
Signature Algorithm: sha256WithRSAEncryption
4c:4d:4b:48:26:c7:a2:63:c7:13:27:48:e4:cb:9b:3f:71:d6:
42:54:9d:6f:8d:21:96:a2:e9:78:5e:34:f4:ef:dc:8f:e1:e2:
89:4e:d8:53:9a:3d:19:0b:a7:e0:5d:75:d7:21:bd:11:1e:17:
49:0b:c4:b9:70:48:b6:e8:bf:6f:0c:aa:3c:d1:a3:fb:f7:99:
64:18:eb:cc:0b:dc:88:77:5e:40:d7:37:72:c5:a8:dc:34:64:
74:43:3c:88:0b:ab:19:66:93:ad:cd:cd:ba:5a:ca:2d:73:85:
7b:a7:45:d2:87:47:e1:32:43:b2:ca:2b:0c:75:75:59:79:ed:
41:70:7d:0a:36:df:2c:89:35:a9:0f:25:9d:f3:0c:67:d7:b8:
e9:3c:24:39:ef:a7:b0:3d:63:79:5d:34:b1:ab:d3:cc:e4:37:
47:d2:83:78:3b:a6:75:e4:84:84:b1:36:73:da:71:65:f5:6f:
b2:46:82:66:3c:fb:42:22:ac:00:e3:3e:9d:99:3c:08:ed:5e:
e0:2b:e1:01:8c:ab:f1:aa:1c:52:17:5c:17:d7:22:31:d8:7c:
ce:0c:a5:6f:70:29:27:60:a1:b9:0c:aa:07:0c:60:6f:30:4f:
49:18:fc:07:32:e8:ef:20:cc:46:55:64:72:29:3a:d0:29:ac:
a6:28:c3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:11 2023 by rpki-client on console-fra.rpki-client.org