Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SIadZuggQh0bcc3l-lC2C07HGiU.roa
File: SIadZuggQh0bcc3l-lC2C07HGiU.roa (raw, json)
Hash identifier: eEFVsqMLS6V7DObi2xUq/dFbMrUzglr63F5K9qNE/0g=
Subject key identifier: 48:86:9D:66:E8:20:42:1D:1B:71:CD:E5:FA:50:B6:0B:4E:C7:1A:25
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 155A6EEE
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SIadZuggQh0bcc3l-lC2C07HGiU.roa
Signing time: Tue 28 Jun 2022 22:51:03 +0000
ROA not before: Tue 28 Jun 2022 22:51:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58057
IP address blocks: 45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
194.50.94.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
194.50.111.0/24 maxlen: 24
45.12.68.0/22 maxlen: 24
139.28.96.0/22 maxlen: 24
2a0e:97c0:260::/44 maxlen: 44
2a0e:b107:1165::/48 maxlen: 48
2a0c:3b80::/29 maxlen: 48
2001:7f8:119::/48 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a0e:b107:9f2::/48 maxlen: 48
2a10:cc40:1c0::/44 maxlen: 44
2a0f:e404:102::/48 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0e:b107:1786::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 358248174 (0x155a6eee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 28 22:51:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48869d66e820421d1b71cde5fa50b60b4ec71a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d1:e4:7d:8d:fd:db:d4:47:f7:4d:2c:c1:c4:
e7:33:59:08:ca:fc:0a:0d:13:95:ac:1e:81:da:b2:
71:a9:0c:79:70:fc:ff:cb:39:c2:4e:fc:2b:03:f2:
9e:db:f9:96:94:f8:aa:e0:a1:73:ef:78:40:49:bb:
1c:91:1e:09:7f:b1:68:0a:59:25:a0:e8:16:12:b7:
28:c5:97:85:3f:74:a9:7d:c8:75:b5:43:5c:34:e5:
b2:8b:45:b8:0d:5a:7c:04:e0:a2:80:ab:02:b0:f8:
54:a5:15:dd:39:63:e7:94:f7:c7:f9:54:a0:af:58:
e3:ba:f0:eb:73:9d:3b:58:87:ba:99:90:82:6e:7f:
93:3e:45:5b:4b:b4:4c:77:98:b6:0b:38:15:77:04:
00:91:6c:32:48:21:10:a3:eb:ca:c0:c9:c4:00:7c:
24:b6:a9:68:e2:0f:c6:59:b9:29:b9:e8:57:6e:ea:
b1:9f:24:70:0d:db:1a:4b:b4:b7:ed:e6:be:fc:b6:
1e:27:80:02:73:ef:5d:57:71:47:73:5a:3c:ae:2c:
8f:71:82:44:34:4a:30:7b:70:8e:ae:00:71:0e:38:
e9:ee:7d:dc:f8:75:52:79:49:c0:76:3a:b3:81:49:
81:0f:95:69:74:be:a3:57:a7:45:7b:16:2b:7e:8e:
d1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:86:9D:66:E8:20:42:1D:1B:71:CD:E5:FA:50:B6:0B:4E:C7:1A:25
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/SIadZuggQh0bcc3l-lC2C07HGiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.68.0/22
45.136.136.0/22
85.202.203.0/24
94.177.122.0/24
139.28.96.0/22
194.50.92.0/24
194.50.94.0/24
194.50.111.0/24
IPv6:
2001:7f8:119::/48
2a09:4c0::/29
2a0c:3b80::/29
2a0e:97c0:170::/48
2a0e:97c0:260::/44
2a0e:b107:9f2::/48
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0f:e404:102::/48
2a10:cc40:1c0::/44
Signature Algorithm: sha256WithRSAEncryption
25:a4:60:c6:20:84:a3:0e:92:87:16:a5:ac:a5:7d:b5:47:ad:
27:dd:39:fe:f2:17:ee:8a:0e:3b:7c:66:02:30:6b:1c:ef:fe:
76:4b:f7:73:72:59:66:b9:27:50:9e:4b:60:5f:25:12:1b:46:
db:5c:3e:16:51:28:a0:34:76:3b:c3:77:a4:06:80:5d:8f:23:
b3:cd:ec:ae:92:2e:41:8a:9f:ee:78:4d:ab:86:95:dd:64:98:
f8:fb:d3:c9:b0:09:09:33:e7:98:9c:ce:65:6c:64:53:bb:50:
af:95:12:a6:65:79:c6:5d:12:6d:bb:70:3e:0f:37:56:d7:51:
03:83:c1:ce:bc:70:fc:86:d6:c0:17:53:f9:a5:b6:e0:96:29:
e0:2e:e8:1b:4e:fe:f8:35:b0:e8:da:78:88:e3:88:e7:08:55:
ab:40:60:ce:30:82:32:97:69:38:25:b4:8c:88:60:79:50:03:
f1:bd:5d:1d:c4:03:83:3f:27:b5:32:f2:9c:bd:b2:52:65:f9:
5c:1a:ee:3b:ae:86:d9:9b:b1:85:76:c7:4c:03:ba:d1:ec:30:
12:b4:f1:eb:2b:c5:9e:1c:a8:ad:fc:3d:59:52:c5:88:b3:c7:
2b:26:b4:04:17:9b:55:cb:ad:7e:a9:5c:ea:75:f2:0a:8e:d8:
ad:bc:12:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:16 2023 by rpki-client on console-fra.rpki-client.org