Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/CoBJwpQ8S87AqxMvWTVmIXWlvuA.roa
File: CoBJwpQ8S87AqxMvWTVmIXWlvuA.roa (raw, json)
Hash identifier: IRuvNVTCF4Pc9EOh05VHnihlNe/yL2iKSTdjmCFxKv4=
Subject key identifier: 0A:80:49:C2:94:3C:4B:CE:C0:AB:13:2F:59:35:66:21:75:A5:BE:E0
Certificate issuer: /CN=b0f8a885f7776d2ab99bb4f20e84d306e0394aa3
Certificate serial: 03FFB4B1
Authority key identifier: B0:F8:A8:85:F7:77:6D:2A:B9:9B:B4:F2:0E:84:D3:06:E0:39:4A:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/CoBJwpQ8S87AqxMvWTVmIXWlvuA.roa
Signing time: Sat 01 Jan 2022 12:58:14 +0000
ROA not before: Sat 01 Jan 2022 12:58:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48305
IP address blocks: 45.148.0.0/22 maxlen: 22
185.86.184.0/22 maxlen: 22
91.242.132.0/22 maxlen: 22
91.242.128.0/22 maxlen: 22
2a03:77e0:3301::/48 maxlen: 48
2a03:77e0:4401::/48 maxlen: 48
2a03:77e0:5301::/48 maxlen: 48
2a0f:4400::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 67089585 (0x3ffb4b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0f8a885f7776d2ab99bb4f20e84d306e0394aa3
Validity
Not Before: Jan 1 12:58:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0a8049c2943c4bcec0ab132f5935662175a5bee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:5c:1f:7d:ca:b5:a6:01:f9:71:e7:48:47:
04:c7:0a:88:10:cb:91:cd:be:58:45:dc:74:50:0f:
ee:24:e7:97:be:11:c6:cd:e0:1e:a0:01:92:53:64:
fa:b0:d2:20:18:cc:c3:26:17:64:ae:ae:84:ff:a1:
0b:ee:c4:87:e1:8a:8a:57:f7:c2:e6:0d:89:cc:45:
43:7a:dc:25:02:76:94:56:ba:87:b4:9d:a6:31:68:
3b:f2:ac:f7:76:65:68:e7:38:f8:90:27:44:51:8c:
3c:53:4c:13:d0:61:bd:03:e9:10:f0:ab:66:d6:79:
5a:13:1f:4e:9f:36:f9:ce:a9:46:d6:c3:ae:a0:93:
9d:61:bf:bd:a2:3b:4b:9c:7c:48:7e:41:7e:68:6d:
49:af:1f:f9:9b:cc:fa:7f:45:49:41:21:c2:24:10:
f1:36:ec:50:ff:35:37:8a:99:a7:22:72:7f:6c:36:
ce:1b:e0:b4:92:37:89:69:33:7b:5c:64:9f:36:5a:
46:a6:13:8b:31:19:ed:5e:bd:86:46:e7:56:11:f8:
4b:73:68:b9:03:44:22:f8:ee:45:7b:81:3b:07:c5:
8d:a3:25:cb:ad:5f:23:36:c1:31:1d:a0:f1:53:49:
d5:d0:5e:03:e8:d6:61:e2:cf:ff:14:96:be:ce:52:
a5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:80:49:C2:94:3C:4B:CE:C0:AB:13:2F:59:35:66:21:75:A5:BE:E0
X509v3 Authority Key Identifier:
keyid:B0:F8:A8:85:F7:77:6D:2A:B9:9B:B4:F2:0E:84:D3:06:E0:39:4A:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPiohfd3bSq5m7TyDoTTBuA5SqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/CoBJwpQ8S87AqxMvWTVmIXWlvuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/b1282f-71c5-47e7-aea1-4d05498aa97d/1/sPiohfd3bSq5m7TyDoTTBuA5SqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.0.0/22
91.242.128.0/21
185.86.184.0/22
IPv6:
2a03:77e0:3301::/48
2a03:77e0:4401::/48
2a03:77e0:5301::/48
2a0f:4400::/29
Signature Algorithm: sha256WithRSAEncryption
25:49:e6:5f:b9:df:c3:47:03:1f:e9:6d:c6:a0:a9:4d:eb:13:
84:f3:e7:16:be:e4:2d:97:d4:df:75:43:53:06:7e:16:98:92:
e6:f5:56:65:f1:c9:67:66:cc:bc:bb:cf:26:48:8f:3a:6a:b3:
64:8e:cf:2b:e9:06:4f:b6:99:41:04:38:8b:ec:50:77:80:ca:
69:49:94:be:df:df:ab:9c:a7:1d:6e:bb:9a:7b:35:a4:12:10:
92:e9:a9:b7:ef:42:b3:bc:8e:4a:81:95:c2:03:91:ac:89:79:
45:12:56:17:86:ef:9f:fe:11:0e:71:64:5c:43:b9:eb:e2:1f:
db:15:59:10:93:70:0c:13:37:66:f9:d6:24:c0:c6:b3:33:82:
87:e9:d2:bc:cb:47:7a:ea:a0:d6:c1:99:aa:08:0f:1c:a1:68:
7a:b0:24:50:01:e7:af:68:c3:cd:06:96:61:ce:ae:de:82:6d:
3f:ac:6f:8e:d2:fe:ff:b4:28:26:38:7c:c4:68:36:33:1c:44:
09:c7:c6:ba:74:60:69:08:87:27:46:de:b4:85:9a:21:4d:aa:
a2:6a:84:bf:ff:75:1a:53:db:1f:60:c9:43:f2:6c:03:48:d1:
0c:35:ec:11:cb:22:4c:d8:59:81:d3:ed:39:32:6c:0b:8f:c6:
44:e2:10:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:04:32 2024 by rpki-client on console-ams.rpki-client.org