Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/PQ6PRTtds76muNSlmsrwB5lTEps.roa
File: PQ6PRTtds76muNSlmsrwB5lTEps.roa (raw, json)
Hash identifier: uhnsTooQpSVKjebXM5MRehvW4ZNZovWzWVatTQ7nlnk=
Subject key identifier: 3D:0E:8F:45:3B:5D:B3:BE:A6:B8:D4:A5:9A:CA:F0:07:99:53:12:9B
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 01835523C3BE384574CC89D6648DD34B00C5
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/PQ6PRTtds76muNSlmsrwB5lTEps.roa
Signing time: Mon 19 Sep 2022 09:45:50 +0000
ROA not before: Mon 19 Sep 2022 09:45:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39521
IP address blocks: 185.144.56.0/22 maxlen: 24
83.229.113.0/24 maxlen: 24
45.95.40.0/22 maxlen: 22
83.229.23.0/24 maxlen: 24
188.191.48.0/22 maxlen: 22
5.22.204.0/22 maxlen: 22
217.194.153.0/24 maxlen: 24
83.229.34.0/24 maxlen: 24
45.130.100.0/22 maxlen: 22
95.178.107.0/24 maxlen: 24
45.10.16.0/22 maxlen: 22
45.88.5.0/24 maxlen: 24
45.88.6.0/24 maxlen: 24
45.88.7.0/24 maxlen: 24
2a05:e4c0::/29 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:55:23:c3:be:38:45:74:cc:89:d6:64:8d:d3:4b:00:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Sep 19 09:45:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d0e8f453b5db3bea6b8d4a59acaf0079953129b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ef:7d:16:33:09:76:fb:2a:c4:2d:b5:eb:59:
aa:cb:b2:7b:a1:f5:0a:e0:d5:4b:2b:f7:90:c2:50:
a0:42:95:8e:a3:3f:b7:13:f4:06:47:69:2e:62:ed:
f8:d2:fa:98:76:74:f3:46:b0:36:a0:8a:ee:ab:f6:
b8:58:f0:38:4c:0a:71:fa:7c:83:0f:f9:b4:ef:31:
e4:04:bc:8e:5a:65:70:3d:c1:99:d3:22:9f:28:55:
a8:a4:a2:36:86:6c:3b:64:22:df:8c:bb:4a:c2:7e:
f8:c6:59:04:23:55:1d:9e:a1:a5:48:34:d9:30:e6:
21:2e:2a:bb:0e:ea:e8:41:22:2e:45:34:aa:d1:1b:
d7:78:fa:b6:89:9c:1b:df:ea:79:d1:cb:1d:38:aa:
92:67:2f:60:5b:08:43:37:7b:68:f0:ba:ea:4d:8a:
4f:20:1c:b0:4e:a5:d0:a4:3d:56:c7:e0:96:eb:42:
fe:b7:56:f2:65:df:bb:bc:08:b2:61:26:89:ff:ab:
d7:17:9a:21:3a:44:21:b6:03:cd:9c:85:23:73:3d:
40:20:1b:ff:a4:0c:d4:1b:12:54:d6:79:37:69:86:
fd:44:8b:b1:2a:04:3c:73:c5:05:c0:d4:5b:c8:a8:
af:0a:7a:fb:9d:7d:bc:70:f6:a1:cf:9d:3d:61:ff:
3c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0E:8F:45:3B:5D:B3:BE:A6:B8:D4:A5:9A:CA:F0:07:99:53:12:9B
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/PQ6PRTtds76muNSlmsrwB5lTEps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.204.0/22
45.10.16.0/22
45.88.5.0-45.88.7.255
45.95.40.0/22
45.130.100.0/22
83.229.23.0/24
83.229.34.0/24
83.229.113.0/24
95.178.107.0/24
185.144.56.0/22
188.191.48.0/22
217.194.153.0/24
IPv6:
2a05:e4c0::/29
Signature Algorithm: sha256WithRSAEncryption
70:e1:32:27:2a:90:96:75:42:ae:83:27:bd:fe:91:28:0d:c3:
79:ee:61:6d:83:c7:6d:b4:7e:01:69:65:52:38:4c:3f:8e:f0:
28:08:46:e4:d7:b8:b1:67:91:7d:4c:db:b0:e5:d0:39:30:36:
58:73:96:84:f3:55:53:0b:80:42:87:ac:45:ff:b0:28:ea:db:
37:45:95:22:fd:af:b7:70:3c:12:0d:70:95:68:01:67:b9:89:
8f:1f:43:38:aa:9b:ad:8f:60:fd:9d:5a:3e:a0:4d:ce:81:03:
3b:79:fe:f4:a9:b9:0b:35:22:54:60:06:e5:20:59:a8:ce:ae:
ca:76:f7:16:fc:0e:24:53:b0:a4:d7:07:2e:24:86:f5:e8:c1:
83:30:e5:21:15:a0:07:29:57:22:5e:0c:05:fb:fc:50:ef:21:
28:88:ef:28:11:7a:1d:1d:bc:23:3d:7f:6f:62:ac:09:4e:00:
f2:67:57:c4:17:eb:26:21:18:fb:73:2f:f6:1e:a6:44:e8:59:
99:79:20:69:9f:88:b4:09:bd:5f:72:c5:d8:bf:14:fb:da:be:
0c:aa:ae:dc:9d:b9:d0:ac:b9:ca:84:05:e4:9b:3e:10:9b:d6:
03:22:da:0f:84:10:04:0b:a0:8c:0d:3d:9c:d6:7c:56:4f:5e:
41:d4:24:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:26 2024 by rpki-client on console-ams.rpki-client.org