Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/oFdJZz7vcfCWwk-gNjXcdzgJUMs.roa
File: oFdJZz7vcfCWwk-gNjXcdzgJUMs.roa (raw, json)
Hash identifier: 7VA9LDXsDaCzs+3kgV/AUSKQVbIRSB0Q6nNnVxD7rNg=
Subject key identifier: A0:57:49:67:3E:EF:71:F0:96:C2:4F:A0:36:35:DC:77:38:09:50:CB
Certificate issuer: /CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Certificate serial: 018245489E6B40E26F7701514BC77EF8E5EC
Authority key identifier: DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/oFdJZz7vcfCWwk-gNjXcdzgJUMs.roa
Signing time: Thu 28 Jul 2022 14:49:23 +0000
ROA not before: Thu 28 Jul 2022 14:49:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206805
IP address blocks: 45.84.152.0/23 maxlen: 23
45.84.155.0/24 maxlen: 24
45.84.154.0/24 maxlen: 24
178.159.32.0/23 maxlen: 24
185.228.48.0/22 maxlen: 24
193.19.100.0/23 maxlen: 23
45.145.188.0/23 maxlen: 23
185.247.192.0/22 maxlen: 24
2a0c:ee00:100::/40 maxlen: 40
2a0c:ee00::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:45:48:9e:6b:40:e2:6f:77:01:51:4b:c7:7e:f8:e5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Validity
Not Before: Jul 28 14:49:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a05749673eef71f096c24fa03635dc77380950cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f7:f8:27:8f:88:5f:03:aa:4b:a3:46:1e:73:
ae:39:59:f7:a9:4c:aa:cf:a9:f0:cc:39:54:9d:a6:
0e:29:5e:81:bb:8f:50:88:7b:c9:55:e4:5e:a8:25:
10:aa:3d:df:90:0f:9d:63:ba:67:32:bd:c6:5c:04:
2e:2b:32:8a:d4:91:bf:c5:c4:7d:cf:b6:86:af:85:
9f:8d:97:ed:ba:d0:f7:45:2d:9b:bd:f3:4f:b3:72:
f9:cf:98:0c:4b:83:13:92:af:e6:d5:b6:1b:d7:8c:
7b:1d:3a:ba:3f:ff:cc:a1:01:e9:ba:fe:50:a3:f1:
d5:e5:c4:5d:54:e2:5b:92:e6:15:50:28:89:be:14:
75:59:25:1e:9c:88:3f:3a:f4:ad:c2:13:68:4e:11:
b0:d3:28:b6:fd:65:0f:4d:e1:d1:de:7c:08:a0:e5:
f3:4d:f0:81:ee:a4:2e:32:2e:4d:a1:74:50:2f:6c:
46:8a:47:8c:10:07:f1:f4:40:da:dc:08:42:58:11:
9e:65:a1:4a:b2:35:18:e4:34:ac:c9:da:25:b5:40:
09:ba:82:91:92:fe:53:bb:11:27:92:3e:74:1d:86:
50:72:15:66:ee:08:80:8d:b1:9b:df:c8:d3:5a:dc:
4a:dd:90:b4:60:6b:de:88:11:35:72:69:fc:de:71:
f2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:57:49:67:3E:EF:71:F0:96:C2:4F:A0:36:35:DC:77:38:09:50:CB
X509v3 Authority Key Identifier:
keyid:DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/oFdJZz7vcfCWwk-gNjXcdzgJUMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.152.0/22
45.145.188.0/23
178.159.32.0/23
185.228.48.0/22
185.247.192.0/22
193.19.100.0/23
IPv6:
2a0c:ee00::/39
Signature Algorithm: sha256WithRSAEncryption
0b:c2:f7:d1:ca:35:d3:b4:af:ea:6c:f4:07:d2:e4:ae:b5:d0:
a8:2b:fe:c2:cc:ad:30:d0:b5:5b:3b:6c:c2:c6:c7:8e:20:11:
69:47:bd:b6:25:60:36:4f:86:97:fe:cd:9d:1c:65:c8:93:c1:
3e:30:32:5b:b8:e6:23:66:09:18:b9:f7:b9:a7:2c:b8:88:bd:
1d:f2:f5:45:51:e5:aa:4a:5c:13:d1:a3:de:fd:02:5c:b1:a9:
68:e9:4b:64:ef:b6:6b:21:4d:8c:c8:b7:0c:56:99:49:73:f5:
48:fb:85:d0:68:ca:fe:13:3e:b2:6e:1c:68:e7:d7:f8:fc:7e:
1a:2b:6c:05:be:4b:09:de:0e:d8:62:9f:8b:ad:76:57:49:f9:
34:46:28:5b:73:de:8d:be:fc:71:73:0c:95:f9:bd:74:61:49:
e7:6a:f0:c0:08:a2:d9:b2:43:12:cc:f3:6a:05:84:e8:26:74:
d1:16:3e:88:31:f2:7d:ec:ef:d8:da:80:50:7b:5d:b8:b8:e7:
ae:6f:53:f7:a0:d1:99:b4:6e:63:52:70:63:00:ad:46:37:a9:
d0:f9:04:7e:aa:af:f2:ba:0d:93:40:77:9a:cb:94:d8:2d:15:
11:bf:40:b5:06:73:f8:80:89:a8:60:9d:c3:66:5c:e3:27:4b:
bf:72:6a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:28 2025 by rpki-client