Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/LshAIofB9BBtRlLQeo9SEyssG_U.roa
File: LshAIofB9BBtRlLQeo9SEyssG_U.roa (raw, json)
Hash identifier: Q7Xe7LhDfWrVBm93IeSrtOdk4eO8LXJuRbAqW8GNnEk=
Subject key identifier: 2E:C8:40:22:87:C1:F4:10:6D:46:52:D0:7A:8F:52:13:2B:2C:1B:F5
Certificate issuer: /CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Certificate serial: 01827CFA59CD443D3349AD5A079FA90D2A68
Authority key identifier: F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/LshAIofB9BBtRlLQeo9SEyssG_U.roa
Signing time: Mon 08 Aug 2022 10:22:37 +0000
ROA not before: Mon 08 Aug 2022 10:22:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43624
IP address blocks: 193.202.80.0/23 maxlen: 23
193.202.82.0/23 maxlen: 23
45.145.130.0/23 maxlen: 23
83.142.52.0/23 maxlen: 23
83.142.54.0/23 maxlen: 23
45.80.104.0/23 maxlen: 23
212.119.44.0/23 maxlen: 23
212.119.46.0/23 maxlen: 23
45.140.206.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:7c:fa:59:cd:44:3d:33:49:ad:5a:07:9f:a9:0d:2a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8651b1194f12e98e70d3da78efe4dd2467cd423
Validity
Not Before: Aug 8 10:22:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2ec8402287c1f4106d4652d07a8f52132b2c1bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2d:92:a2:49:8c:a4:f7:04:0b:c7:a4:b2:7e:
2e:12:bf:04:ab:ee:6c:c7:77:96:f0:32:3f:1f:70:
67:44:c8:07:bd:73:46:94:02:4d:f9:11:58:da:88:
19:1d:9a:0f:9a:30:b3:c9:72:ad:49:84:7a:59:a3:
ec:4a:f4:5e:f9:d1:8c:77:af:54:c7:3d:b0:a8:2e:
e4:bc:0a:ea:f6:e5:90:ef:ab:bf:91:fc:20:35:4d:
01:10:fc:b1:73:47:9e:99:1d:62:08:f4:83:f6:f2:
5a:07:40:55:56:d1:f6:67:6d:96:96:d9:3e:d7:15:
d9:2e:55:1f:cd:88:43:7d:b9:df:29:60:e2:e4:be:
82:02:56:77:14:2e:37:f7:90:d7:01:84:0d:10:45:
92:c4:cb:23:e0:13:1c:ec:05:d3:76:52:b9:83:98:
e7:fb:32:d3:7e:4b:51:ba:1d:6d:5a:4d:6f:86:d5:
22:e7:4d:1a:c2:76:cd:03:7b:08:77:48:55:4f:5d:
db:0e:87:a7:46:4a:1c:2b:cd:bd:5a:41:32:3c:77:
85:0a:f0:84:e4:f4:72:86:a1:7f:23:a4:ac:98:c3:
f2:83:75:c8:f8:ef:e0:ca:66:e1:2c:99:6d:84:0c:
0c:1c:6d:a5:1f:cf:75:7a:31:1e:02:8a:c9:37:ab:
68:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C8:40:22:87:C1:F4:10:6D:46:52:D0:7A:8F:52:13:2B:2C:1B:F5
X509v3 Authority Key Identifier:
keyid:F8:65:1B:11:94:F1:2E:98:E7:0D:3D:A7:8E:FE:4D:D2:46:7C:D4:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-GUbEZTxLpjnDT2njv5N0kZ81CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/LshAIofB9BBtRlLQeo9SEyssG_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/822400-3248-4702-b29b-a1b7ceefa16c/1/1-GUbEZTxLpjnDT2njv5N0kZ81CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.104.0/23
45.140.206.0/23
45.145.130.0/23
83.142.52.0/22
193.202.80.0/22
212.119.44.0/22
Signature Algorithm: sha256WithRSAEncryption
49:51:00:0b:f1:04:d5:d2:bc:cc:4c:b2:bf:42:c9:02:5f:a2:
54:5c:7c:45:a1:c3:4d:86:4c:b1:5b:3e:21:de:8d:bf:c2:14:
d9:ac:ed:6e:3d:13:72:aa:9c:02:01:91:90:78:1a:c9:07:31:
11:6d:d1:17:fb:e1:87:95:5a:c7:15:14:90:ad:78:89:25:b6:
50:60:af:87:93:7a:c1:f8:48:4a:5b:71:00:cc:49:10:fa:7d:
2a:09:7f:de:18:69:e0:64:b9:ad:ad:4d:a9:7b:15:2b:70:cc:
f9:c1:bf:ff:0c:77:62:fa:f0:f7:56:43:49:af:86:30:c1:4f:
95:cc:37:1b:94:f8:81:a2:42:cb:26:f0:87:61:94:2f:0f:ae:
0e:fe:29:bf:ba:05:69:77:2d:8e:7b:c0:0d:40:22:b7:dc:98:
e9:9c:9d:c5:28:84:93:5e:69:3a:89:a1:b1:00:e4:b7:bf:58:
05:da:96:f1:00:49:59:67:b6:c0:d0:fa:44:c3:88:f7:7c:74:
eb:80:ca:58:9f:bf:75:92:18:06:6c:c6:e5:76:e5:48:27:99:
eb:ed:55:ad:3d:3d:50:5b:68:3a:c0:77:bd:83:00:f4:8e:af:
00:d9:0c:4d:3f:77:96:9a:2c:a1:3a:db:bd:fc:4f:ac:55:a7:
ff:08:52:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:59 2023 by rpki-client on console-fra.rpki-client.org