Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Bj8qkujPJeC7a6EVpR5bNgXArIM.roa
File: Bj8qkujPJeC7a6EVpR5bNgXArIM.roa (raw, json)
Hash identifier: REi8XykpGcCv1Uuh9OsB0xMyabM1LKjZSeIzaFMHwfs=
Subject key identifier: 06:3F:2A:92:E8:CF:25:E0:BB:6B:A1:15:A5:1E:5B:36:05:C0:AC:83
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018531B50D06DAE868C5A578C3B20A454CDB
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Bj8qkujPJeC7a6EVpR5bNgXArIM.roa
Signing time: Tue 20 Dec 2022 22:43:46 +0000
ROA not before: Tue 20 Dec 2022 22:43:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203790
IP address blocks: 45.148.116.0/24 maxlen: 24
45.148.119.0/24 maxlen: 24
194.50.111.0/24 maxlen: 24
2a0e:97c0:460::/44 maxlen: 48
2a0e:b107:12a0::/44 maxlen: 48
2a10:cc40:1d0::/44 maxlen: 48
2a0e:b101::/32 maxlen: 48
2a10:cc41:110::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:31:b5:0d:06:da:e8:68:c5:a5:78:c3:b2:0a:45:4c:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 20 22:43:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=063f2a92e8cf25e0bb6ba115a51e5b3605c0ac83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:81:ee:3f:2f:88:01:3b:44:8d:07:73:d5:b0:
ed:e1:92:88:be:28:01:8e:c7:38:45:a7:26:58:db:
c7:ec:28:be:a5:2a:26:e6:2d:01:26:92:f3:ac:d5:
6e:9f:1b:f5:1c:8e:c0:ea:ae:cb:17:08:27:30:63:
16:9f:7e:4a:6e:61:fc:c1:b9:9c:53:81:1b:c0:25:
17:57:28:a4:6f:5a:db:bc:5f:fa:06:1b:20:de:50:
8d:a3:57:13:ab:f9:bb:80:9a:28:af:b1:a6:44:d7:
d2:51:8d:37:07:9e:04:eb:e6:2a:02:2b:ee:d6:26:
c4:df:94:5e:c9:e4:03:b3:8a:60:7d:b2:21:fc:bf:
d3:e2:f6:09:04:ac:69:70:d9:05:b2:6f:6d:8d:7e:
04:3c:a4:dd:f8:a3:16:b9:ea:f7:30:fe:3f:13:ad:
2f:16:8f:03:f4:07:68:3b:8d:ab:b3:cc:28:02:8d:
bc:7c:dd:fe:f6:90:6a:1a:86:b6:5f:69:24:f5:0c:
32:2f:a3:2a:fc:50:24:4b:52:be:bf:b1:eb:64:93:
fa:2b:af:6a:3f:b9:5f:dd:4c:34:86:65:d9:d5:94:
48:d0:00:80:43:ff:7e:52:60:37:22:b3:67:00:64:
ce:d1:fb:2d:e2:c4:96:db:db:ac:86:32:eb:22:31:
fc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:3F:2A:92:E8:CF:25:E0:BB:6B:A1:15:A5:1E:5B:36:05:C0:AC:83
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Bj8qkujPJeC7a6EVpR5bNgXArIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.116.0/24
45.148.119.0/24
194.50.111.0/24
IPv6:
2a0e:97c0:460::/44
2a0e:b101::/32
2a0e:b107:12a0::/44
2a10:cc40:1d0::/44
2a10:cc41:110::/44
Signature Algorithm: sha256WithRSAEncryption
28:e8:e4:73:2d:59:21:fa:88:79:e0:9c:c8:32:47:d2:3d:4d:
6f:0a:87:ad:fa:45:f5:46:94:c5:41:fd:58:80:88:c5:ed:98:
d1:73:16:73:14:b6:1f:44:17:10:05:a8:b4:68:62:c0:48:26:
68:6d:9e:03:c7:60:33:23:0c:a1:aa:b1:a4:69:ef:5c:4c:db:
22:a4:7d:d4:5c:88:12:bd:c8:ce:76:88:79:85:d9:85:e5:0c:
85:23:f9:f9:9c:3b:87:5b:d7:1e:d3:65:e9:c5:44:71:ec:aa:
aa:2a:1e:95:a2:4c:8f:ac:f4:d7:45:6d:5e:5c:a1:49:3e:89:
b9:b2:55:18:52:82:91:43:9e:f2:53:57:79:61:3c:9f:ac:4f:
00:df:b2:9a:7d:86:1e:a9:b8:93:1d:28:a4:64:4c:e5:54:32:
d8:f4:2e:d2:56:96:bf:5c:60:97:0d:55:c5:3f:4e:a7:23:12:
98:32:df:bd:73:20:32:64:0d:a8:ab:ad:42:2e:b5:ce:87:63:
9e:41:24:fb:3e:fe:21:eb:46:63:54:bf:91:39:b7:f0:54:22:
01:43:c9:d5:64:2c:8e:b8:2e:b3:09:90:e6:52:d6:1d:77:db:
86:59:c9:b8:44:c8:93:f6:75:bc:0b:e2:a2:1f:30:b7:cc:00:
9d:52:ad:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:14 2023 by rpki-client on console-fra.rpki-client.org