Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/o_F0K33Gfi2BQTMFdFZhj6kByRA.roa
File: o_F0K33Gfi2BQTMFdFZhj6kByRA.roa (raw, json)
Hash identifier: 8nXwmcfPfyJXIyWqVZE/DkeEYPXJkWTxrGDC9sulmVc=
Subject key identifier: A3:F1:74:2B:7D:C6:7E:2D:81:41:33:05:74:56:61:8F:A9:01:C9:10
Certificate issuer: /CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Certificate serial: 0225D8FD
Authority key identifier: DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/o_F0K33Gfi2BQTMFdFZhj6kByRA.roa
Signing time: Tue 29 Mar 2022 10:38:40 +0000
ROA not before: Tue 29 Mar 2022 10:38:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206805
IP address blocks: 45.84.152.0/23 maxlen: 23
45.84.155.0/24 maxlen: 24
45.84.154.0/24 maxlen: 24
178.159.32.0/23 maxlen: 24
185.228.48.0/22 maxlen: 24
193.19.100.0/23 maxlen: 23
185.247.192.0/22 maxlen: 24
2a0c:ee00::/40 maxlen: 40
2a0c:ee00:100::/40 maxlen: 40
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36034813 (0x225d8fd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3d4011175e5df7a3f57d38e78150a2c05fdd1d
Validity
Not Before: Mar 29 10:38:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a3f1742b7dc67e2d814133057456618fa901c910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:af:b3:90:3d:c2:8d:a3:a9:02:f0:77:2a:c1:
b6:8f:ea:c1:c4:0f:1d:e4:7a:6f:b6:76:07:7f:6b:
ae:52:f9:f5:a1:35:5f:46:6b:92:01:1d:d4:19:72:
34:fc:ca:75:c4:57:75:5f:e3:3a:b2:de:06:80:2e:
99:97:09:e6:7b:25:a7:9f:80:d6:9e:ee:0a:bb:ae:
7d:ab:03:d1:c8:33:82:be:58:4c:72:9a:1a:4b:b4:
63:c4:95:9d:89:96:e8:40:d0:3d:79:22:2c:13:e0:
dc:95:56:6d:ef:44:47:fe:c8:5e:b3:9b:5b:00:6b:
15:fd:ae:52:9e:d8:13:92:ac:a1:ea:5c:dc:44:a6:
61:ff:31:6b:d8:d5:14:ea:68:d8:8d:ba:64:73:f4:
e3:47:4c:1e:13:5c:1b:e9:a2:f8:06:32:77:f9:80:
f5:0a:b6:65:77:30:72:43:0e:e3:f7:b3:62:87:5c:
6b:a4:6f:a9:be:18:bd:e1:cc:03:b7:70:67:72:f6:
3a:60:7a:17:54:e4:c2:f8:1a:8e:7e:80:f2:bb:e4:
f1:14:7f:89:f4:b2:c9:ce:f6:91:c2:59:9f:c3:39:
73:49:e4:6a:92:67:6e:e2:de:22:ff:67:95:22:09:
db:c5:d9:25:94:6d:9a:d6:c6:4f:62:dd:1a:ad:f5:
21:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F1:74:2B:7D:C6:7E:2D:81:41:33:05:74:56:61:8F:A9:01:C9:10
X509v3 Authority Key Identifier:
keyid:DD:3D:40:11:17:5E:5D:F7:A3:F5:7D:38:E7:81:50:A2:C0:5F:DD:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3T1AERdeXfej9X0454FQosBf3R0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/o_F0K33Gfi2BQTMFdFZhj6kByRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/308589-92fe-4593-93e4-2d0a78be892d/1/3T1AERdeXfej9X0454FQosBf3R0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.152.0/22
178.159.32.0/23
185.228.48.0/22
185.247.192.0/22
193.19.100.0/23
IPv6:
2a0c:ee00::/39
Signature Algorithm: sha256WithRSAEncryption
9a:8b:5f:45:5a:9b:24:27:e8:f8:21:60:ae:91:23:5e:19:2c:
7b:99:5f:56:6b:58:f1:e9:ee:81:0e:a1:52:07:2f:ce:fd:25:
6a:a9:fb:2a:fd:7f:62:42:a5:9f:c1:05:a2:02:fd:80:0a:87:
4a:9d:ba:89:68:c8:d7:89:6d:00:d7:e6:a1:b6:44:73:ff:ac:
c0:26:31:0d:19:ee:2a:e8:fc:51:7d:61:a2:5a:8a:b6:b1:14:
fa:e2:80:83:5f:0f:b4:2d:c8:6c:15:4b:a1:de:4e:ee:95:e1:
83:2e:a8:e5:80:e2:27:c6:cb:e4:10:af:76:f4:a1:b1:88:87:
3a:37:04:70:56:4e:75:b7:f2:24:1f:b9:da:f0:79:3d:b5:87:
f5:68:84:db:51:9f:6b:20:24:33:e0:4f:56:61:a9:8c:d0:0f:
64:7e:98:7f:1d:09:05:29:64:cf:47:8a:57:55:fd:ed:15:38:
e6:ef:23:20:ef:63:04:43:a6:ee:fb:26:15:81:f7:cf:9e:c6:
1e:f7:11:df:66:33:92:d5:5e:eb:54:e2:08:98:e1:78:71:25:
5e:f6:ac:dc:12:fc:52:36:49:b7:2a:16:a7:b8:6f:ee:c6:08:
83:19:dc:4b:6c:b6:bd:10:86:73:37:a0:ba:5c:01:25:d2:ad:
33:17:40:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:56 2023 by rpki-client on console-fra.rpki-client.org