Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c-dlhWqwRkgu5Sx1pSd7_IvcIr4.roa
File: c-dlhWqwRkgu5Sx1pSd7_IvcIr4.roa (raw, json)
Hash identifier: wQNhEfy8lNHC4J0gZEOrcxkcgJdqN+V4ygtCLlzv7VU=
Subject key identifier: 73:E7:65:85:6A:B0:46:48:2E:E5:2C:75:A5:27:7B:FC:8B:DC:22:BE
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018553F99050C4FB0132CE8458263DDB7755
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c-dlhWqwRkgu5Sx1pSd7_IvcIr4.roa
Signing time: Tue 27 Dec 2022 14:25:42 +0000
ROA not before: Tue 27 Dec 2022 14:25:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203790
IP address blocks: 45.148.116.0/24 maxlen: 24
45.148.119.0/24 maxlen: 24
194.50.111.0/24 maxlen: 24
2a0e:97c0:460::/44 maxlen: 48
2a0e:b107:12a0::/44 maxlen: 48
2a10:cc40:1d0::/44 maxlen: 48
2a0e:b101::/32 maxlen: 48
2a10:cc41:110::/44 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:53:f9:90:50:c4:fb:01:32:ce:84:58:26:3d:db:77:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 27 14:25:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=73e765856ab046482ee52c75a5277bfc8bdc22be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:40:4c:1b:95:7c:c0:23:87:f1:e8:c0:64:2e:
c8:6e:e5:08:0d:04:f1:ce:27:86:27:ac:cd:58:0f:
d6:ef:b8:e0:56:34:72:f6:8f:a0:88:d5:a2:63:02:
9d:17:90:77:fe:54:1a:78:29:73:79:a7:25:54:74:
ac:51:6e:a0:7f:35:5e:e3:00:89:23:7b:8f:6f:fc:
98:9d:28:49:51:ee:0b:79:44:40:2f:c7:2d:73:cd:
84:3f:43:84:3e:73:ce:3a:dd:a6:cf:f8:04:7e:52:
23:0c:3c:bb:d3:c4:83:96:52:5b:38:6a:bd:77:e4:
db:1b:aa:98:c6:60:85:46:e9:31:9d:0a:21:a0:a2:
cb:0c:38:95:7a:88:30:8c:9b:02:bd:ee:6d:64:dc:
13:85:f0:05:61:6c:bf:43:ae:80:e0:63:13:aa:ff:
5f:63:26:cd:5b:bb:c6:eb:28:2d:be:19:ca:99:87:
93:78:0e:9a:8e:bf:77:ea:ea:f9:33:85:4d:48:04:
e6:8a:76:0d:d9:9d:6c:65:76:8f:b1:d4:e4:b9:4f:
2b:a1:c2:a3:00:e6:69:b3:d8:f9:c6:4e:b6:2e:4a:
17:ea:4f:2f:95:a7:74:94:a7:75:d6:52:29:3e:35:
4f:b7:c8:a3:9c:68:22:56:a1:a0:c8:f5:9c:82:93:
ed:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E7:65:85:6A:B0:46:48:2E:E5:2C:75:A5:27:7B:FC:8B:DC:22:BE
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/c-dlhWqwRkgu5Sx1pSd7_IvcIr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.116.0/24
45.148.119.0/24
194.50.111.0/24
IPv6:
2a0e:97c0:460::/44
2a0e:b101::/32
2a0e:b107:12a0::/44
2a10:cc40:1d0::/44
2a10:cc41:110::/44
Signature Algorithm: sha256WithRSAEncryption
4b:7b:91:cd:15:20:02:bc:0f:64:c8:41:92:23:b0:44:3e:4a:
2c:1d:8d:3c:9b:24:9e:8f:c7:83:84:83:0d:76:83:d3:62:f9:
e4:3f:38:06:ff:a4:74:03:31:fb:66:bb:cc:f2:ae:bc:d5:b4:
41:17:be:10:73:ee:4c:b8:c2:73:79:0b:76:c4:fd:e2:04:e1:
e3:5d:f4:6c:db:04:c9:81:8a:b6:92:a4:16:b6:f8:03:68:74:
9c:76:aa:4b:db:a5:40:da:ba:73:25:e5:f1:4b:7c:b7:6e:7b:
6f:15:e8:fe:d1:03:b5:7f:e3:e6:1b:50:06:db:5a:72:65:f0:
04:c8:3c:91:73:8b:fa:5e:df:5f:a3:e7:83:7f:23:91:d0:d2:
57:19:ca:7b:30:3f:41:e9:d3:92:93:de:83:7a:ca:bd:bf:66:
bc:af:50:7f:43:cb:03:f7:d2:c8:46:c0:74:55:45:13:5d:12:
a6:63:67:91:63:1c:60:0c:44:8b:a5:c7:93:d2:b8:3a:7a:3c:
e1:54:90:ec:09:09:3b:5a:a2:9e:4c:46:b2:32:a8:2e:42:a2:
0a:08:08:11:b1:c0:b1:60:d9:61:95:ff:cf:dd:a9:c8:1b:f5:
33:df:f9:cd:de:75:14:ce:1e:0a:af:87:f2:d4:cf:41:74:cc:
ee:15:74:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:09:07 2024 by rpki-client on console-ams.rpki-client.org