Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/bFRnvZgzRum9itBrG8v4RVP4lyA.roa
File: bFRnvZgzRum9itBrG8v4RVP4lyA.roa (raw, json)
Hash identifier: Rho0ahueJ7LIMWz4J85Fo/20wiHyjSQlgFzYkrtAKSU=
Subject key identifier: 6C:54:67:BD:98:33:46:E9:BD:8A:D0:6B:1B:CB:F8:45:53:F8:97:20
Certificate issuer: /CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Certificate serial: 01856DE64897491FDD2A1FBF0DD48DC280DA
Authority key identifier: 8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/bFRnvZgzRum9itBrG8v4RVP4lyA.roa
Signing time: Sun 01 Jan 2023 15:14:46 +0000
ROA not before: Sun 01 Jan 2023 15:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41155
IP address blocks: 45.158.139.0/24 maxlen: 24
45.158.136.0/24 maxlen: 24
45.158.137.0/24 maxlen: 24
45.158.138.0/24 maxlen: 24
194.0.193.0/24 maxlen: 24
194.0.221.0/24 maxlen: 24
194.0.223.0/24 maxlen: 24
45.156.74.0/24 maxlen: 24
45.156.75.0/24 maxlen: 24
45.156.72.0/24 maxlen: 24
45.156.73.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:48:97:49:1f:dd:2a:1f:bf:0d:d4:8d:c2:80:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Validity
Not Before: Jan 1 15:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c5467bd983346e9bd8ad06b1bcbf84553f89720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:0e:d9:2e:1b:63:8b:ae:f7:49:9e:b0:c1:14:
e3:1e:37:49:23:03:29:54:df:ec:5a:ce:68:bf:b8:
c3:87:f6:4d:4b:52:d5:2f:66:c7:6d:0c:fd:d8:3a:
c6:4f:ed:0f:a4:46:12:84:29:5d:11:22:d0:31:e6:
75:84:13:79:2e:4f:a4:0f:08:7f:75:c4:e4:fd:0a:
95:a7:0c:a8:64:04:f7:89:d6:f0:18:68:51:cf:95:
69:d6:f8:7b:a2:8f:31:c2:40:f5:7a:c9:36:53:01:
0a:b4:39:bd:8e:5f:62:1a:de:b6:28:cc:44:73:10:
47:0e:7d:62:4a:4c:7c:ad:7b:89:b9:9b:25:22:33:
57:2b:58:38:23:37:42:6a:e4:2f:73:b7:05:37:f6:
64:2c:97:0f:7f:e3:70:09:4d:aa:09:15:1e:a4:b7:
17:50:ba:7b:fb:03:31:3f:cd:81:c2:b8:fd:8a:23:
cc:09:81:5e:2d:43:0a:0a:33:bd:38:a7:89:f6:b6:
32:9f:4e:eb:b1:11:c7:13:d3:ad:17:f9:3c:40:3a:
54:82:da:96:9c:5b:a7:69:0b:83:3a:08:04:77:8b:
ac:bb:ae:07:d5:82:7b:8b:8f:ee:6a:3e:d5:fb:37:
ef:26:8c:a5:3c:88:1e:38:51:dd:b3:1e:62:14:94:
dc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:54:67:BD:98:33:46:E9:BD:8A:D0:6B:1B:CB:F8:45:53:F8:97:20
X509v3 Authority Key Identifier:
keyid:8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/bFRnvZgzRum9itBrG8v4RVP4lyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.72.0/22
45.158.136.0/22
194.0.193.0/24
194.0.221.0/24
194.0.223.0/24
Signature Algorithm: sha256WithRSAEncryption
36:a5:ba:c8:dc:58:5b:8f:a1:b1:7a:b3:81:26:08:a5:06:0a:
81:91:de:78:5c:07:bb:8a:6d:19:8c:ce:a9:47:82:4f:ae:f6:
d5:fd:65:c5:d4:69:5e:93:03:97:6d:5a:f6:2f:3b:d7:7f:1e:
2d:3f:7e:78:44:80:0b:66:ae:95:6b:35:d7:93:f7:44:2b:37:
28:d3:a9:24:df:3b:7b:fe:28:7a:67:9a:cb:84:dc:15:9b:38:
d6:a6:b7:6a:2d:b9:57:cb:d3:18:6e:29:ad:84:e7:b2:c0:a8:
59:f6:a6:f5:93:d9:05:50:7a:e9:f4:dd:0a:f7:0a:d4:14:a6:
8c:74:16:72:51:82:ad:51:5a:f3:07:3c:14:3a:84:70:a2:ac:
69:13:4b:13:e2:5a:ac:38:ca:56:39:1e:a1:a5:4d:7f:54:99:
4a:31:32:88:c6:a8:be:ad:39:9e:3f:a4:92:49:0a:07:22:27:
a1:31:41:ba:fa:44:0a:7c:11:4f:be:4a:f3:3f:5f:1a:fa:f4:
84:37:e0:ce:8e:7d:75:54:4e:b1:87:ad:ee:e2:a2:7b:05:23:
74:f6:08:19:62:e1:05:f7:4d:0f:8c:1c:9c:28:c2:d7:db:e7:
64:59:87:82:3a:8f:c8:b0:ba:b7:50:c1:e2:71:9d:ff:eb:db:
67:7c:83:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:25 2025 by rpki-client