Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bxziIfe5h--maMFSVmkNrQmECeI.roa
File: bxziIfe5h--maMFSVmkNrQmECeI.roa (raw, json)
Hash identifier: C/C2xL6+rEzeD++KD9Z8GjX+hUQyZNuPBjIquocHaYk=
Subject key identifier: 6F:1C:E2:21:F7:B9:87:EF:A6:68:C1:52:56:69:0D:AD:09:84:09:E2
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 122693AA
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bxziIfe5h--maMFSVmkNrQmECeI.roa
Signing time: Thu 17 Feb 2022 13:35:37 +0000
ROA not before: Thu 17 Feb 2022 13:35:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58057
IP address blocks: 45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
194.50.94.0/24 maxlen: 24
194.50.111.0/24 maxlen: 24
45.12.68.0/22 maxlen: 24
139.28.96.0/22 maxlen: 24
2a10:cc46:100::/44 maxlen: 48
2a0e:97c0:260::/44 maxlen: 44
2a0f:e404:10a::/48 maxlen: 48
2a0c:3b80::/29 maxlen: 48
2a0f:e404:100::/48 maxlen: 48
2001:7f8:119::/48 maxlen: 48
2a0f:e404:101::/48 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a0f:e404:107::/48 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a09:4c0::/29 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 304518058 (0x122693aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 17 13:35:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f1ce221f7b987efa668c15256690dad098409e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:d6:d0:35:e2:bf:7a:27:93:d5:38:8e:e2:2b:
dc:c2:59:cf:f6:cf:df:08:f2:06:db:81:a4:9d:bb:
a0:df:fa:29:d9:aa:cc:e6:9e:57:ff:06:f7:d9:67:
df:e4:f2:08:5d:20:c0:a3:e8:4a:5a:db:0d:d8:21:
e2:2a:0c:8e:53:bf:e9:79:a0:40:d9:fa:2d:ee:9d:
f1:c3:8e:95:45:08:2e:f0:d4:0e:12:9c:7e:52:be:
a0:cc:8c:ae:9b:81:73:e1:0a:f4:66:2c:4f:09:e9:
4e:0a:2a:e2:e4:45:76:ab:d8:7e:ac:0e:1c:e6:09:
ae:87:40:c2:fb:f7:09:ef:d3:e7:32:86:66:83:32:
00:7c:c7:b6:67:11:42:f8:ed:b2:5e:e5:d3:16:36:
c8:1b:20:95:f4:cd:54:ec:51:fe:15:fa:e3:4f:e0:
13:05:f4:aa:88:78:9d:3e:b6:87:2b:bd:4b:19:40:
31:da:89:8a:9f:d8:b7:70:e3:4c:fd:03:58:b5:68:
f4:3e:d4:e7:1e:67:66:f8:de:28:9f:73:96:38:0a:
13:71:a7:7e:98:eb:fa:2b:88:58:70:01:96:3e:15:
41:49:a4:0f:17:e4:77:99:6e:f6:ce:ab:65:ac:ba:
ef:cb:4e:7e:c5:24:b7:0a:11:03:e4:96:8a:7a:5a:
27:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1C:E2:21:F7:B9:87:EF:A6:68:C1:52:56:69:0D:AD:09:84:09:E2
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/bxziIfe5h--maMFSVmkNrQmECeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.68.0/22
45.136.136.0/22
94.177.122.0/24
139.28.96.0/22
194.50.92.0/24
194.50.94.0/24
194.50.111.0/24
IPv6:
2001:7f8:119::/48
2a09:4c0::/29
2a0c:3b80::/29
2a0e:97c0:170::/48
2a0e:97c0:260::/44
2a0f:e404:100::-2a0f:e404:102:ffff:ffff:ffff:ffff:ffff
2a0f:e404:107::/48
2a0f:e404:10a::/48
2a10:cc46:100::/44
Signature Algorithm: sha256WithRSAEncryption
9c:b8:bf:09:4f:e8:3d:db:24:f9:43:9f:64:bd:4d:12:83:a8:
bd:69:df:19:f5:46:bc:12:9b:aa:ff:f0:a6:a4:0d:97:0a:24:
46:f6:53:fc:e8:47:37:b0:71:ad:b3:f9:a1:99:ac:40:0e:16:
61:46:90:d1:6b:ac:77:39:15:e4:2a:bb:4e:62:52:c5:33:a9:
33:72:7f:d1:24:11:61:09:fa:c5:10:2d:2f:01:f2:1a:62:18:
b2:c9:7c:8b:db:c3:8a:b6:47:db:40:dd:1e:e3:ea:4c:b1:7a:
13:1b:76:08:cb:59:5b:ca:3c:ab:d8:96:d5:9d:d0:50:ff:41:
ac:3a:e8:4b:81:02:73:e5:89:87:f4:d3:a8:e7:98:9c:f6:4f:
bf:1c:f7:fb:3f:47:ad:66:dc:9b:d7:19:ec:70:81:e6:b7:c0:
f0:47:34:ee:13:dc:e1:72:da:53:93:b2:3a:68:5b:54:d0:74:
60:3d:d7:0f:97:b2:fe:27:38:79:3c:ab:29:06:e8:3a:ab:a7:
ea:b5:b3:46:cf:0a:f5:a6:07:73:bb:8a:7d:03:bb:58:02:a3:
ff:90:0d:04:c0:f9:e5:7d:52:82:e2:ee:32:15:7b:75:49:6d:
e7:4f:20:00:1b:46:a5:ed:31:ef:9a:a1:dc:fe:65:f5:50:15:
8c:ef:e5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:17 2023 by rpki-client on console-fra.rpki-client.org