Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cHvDMC1wq4QtraECK-T7m8fFYNU.roa
File: cHvDMC1wq4QtraECK-T7m8fFYNU.roa (raw, json)
Hash identifier: WaqVsfvs8OwyhxLwzFQlHeQw6ViauK6zTYzfFrDOGrE=
Subject key identifier: 70:7B:C3:30:2D:70:AB:84:2D:AD:A1:02:2B:E4:FB:9B:C7:C5:60:D5
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 149AA35F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cHvDMC1wq4QtraECK-T7m8fFYNU.roa
Signing time: Fri 13 May 2022 11:23:45 +0000
ROA not before: Fri 13 May 2022 11:23:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58057
IP address blocks: 45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
194.50.94.0/24 maxlen: 24
85.202.203.0/24 maxlen: 24
194.50.111.0/24 maxlen: 24
45.12.68.0/22 maxlen: 24
139.28.96.0/22 maxlen: 24
2a10:cc46:100::/44 maxlen: 48
2a0e:97c0:260::/44 maxlen: 44
2a0e:b107:1165::/48 maxlen: 48
2a0c:3b80::/29 maxlen: 48
2a0f:e404:100::/48 maxlen: 48
2001:7f8:119::/48 maxlen: 48
2a0f:e404:101::/48 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a09:4c0::/29 maxlen: 64
2a0e:b107:1786::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 345678687 (0x149aa35f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: May 13 11:23:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=707bc3302d70ab842dada1022be4fb9bc7c560d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:85:b0:59:75:3e:b7:ae:76:23:f5:f9:ad:18:
bb:1b:dd:9d:26:c3:ac:88:fb:d8:59:30:e4:43:cd:
85:4f:08:84:36:5c:ae:7f:33:63:c4:b2:7b:c5:b0:
bd:e1:1e:d9:22:8e:54:a7:80:8a:a6:af:b3:03:61:
08:4e:05:c8:e8:2d:92:18:ee:ce:12:89:bd:71:19:
af:4d:c7:86:26:b1:bc:0d:a2:0b:46:af:38:c1:2e:
b4:de:c5:61:31:8d:95:44:08:70:c2:00:ad:ce:23:
00:af:a9:ee:94:77:4e:88:27:f6:bb:5b:c0:dd:6b:
7f:4e:e3:25:dd:60:a8:36:28:4b:fe:0d:74:10:57:
44:f6:fd:c2:57:da:91:37:ed:ea:74:18:c6:9f:2d:
c4:3e:12:55:46:13:c7:4a:c5:c4:83:fa:d2:10:34:
64:f4:ab:9b:fb:a9:3a:e7:c2:f1:cc:74:35:3b:9a:
ea:14:d6:32:37:eb:e5:93:c1:94:32:d2:a8:5f:d4:
51:86:c1:e3:72:5a:ba:6a:0c:32:b3:1f:e0:63:d2:
00:85:0b:70:22:65:b4:f8:6d:50:4a:1e:d5:20:e1:
31:d7:b1:67:2f:66:20:ac:b8:08:a3:ca:14:54:06:
de:05:ed:cf:2b:4c:27:48:cc:89:e0:f7:37:01:67:
02:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:7B:C3:30:2D:70:AB:84:2D:AD:A1:02:2B:E4:FB:9B:C7:C5:60:D5
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/cHvDMC1wq4QtraECK-T7m8fFYNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.68.0/22
45.136.136.0/22
85.202.203.0/24
94.177.122.0/24
139.28.96.0/22
194.50.92.0/24
194.50.94.0/24
194.50.111.0/24
IPv6:
2001:7f8:119::/48
2a09:4c0::/29
2a0c:3b80::/29
2a0e:97c0:170::/48
2a0e:97c0:260::/44
2a0e:b107:1165::/48
2a0e:b107:1786::/48
2a0f:e404:100::-2a0f:e404:102:ffff:ffff:ffff:ffff:ffff
2a10:cc46:100::/44
Signature Algorithm: sha256WithRSAEncryption
50:12:ac:e7:35:64:41:e1:e6:8f:94:1a:b5:ab:c6:e7:63:c2:
3b:64:ac:4e:8b:2f:75:b4:9e:8c:00:f3:8e:ba:6a:17:78:ae:
fa:39:1e:cd:c9:eb:2c:63:d4:9e:f4:63:46:7a:4c:92:04:7b:
2e:66:5b:a2:99:e1:52:01:a6:88:60:1a:49:cb:37:f4:22:c9:
2e:65:95:ec:7a:b7:62:e3:9c:4a:e7:25:ef:64:4f:16:4c:94:
e3:21:ed:0c:6f:fd:03:fc:e9:a5:51:e5:b8:b8:fb:ab:30:eb:
43:e6:a4:4a:21:aa:65:e2:1e:cf:1e:cf:dc:07:41:f4:48:97:
13:71:c2:af:b0:51:9f:cc:c7:07:5f:d2:30:cb:55:0d:76:a9:
75:7e:24:c0:ee:e9:4e:a9:f5:6d:bb:ba:52:94:38:8f:df:1d:
49:fd:4d:ef:f8:25:0b:cc:89:56:ce:41:3c:ad:e2:b2:31:fa:
8f:98:6a:8b:d8:b6:58:36:11:0a:7a:90:80:83:fc:f0:34:2d:
b5:1b:3e:17:43:8a:41:54:76:7e:9d:c2:ba:4e:3f:86:3c:a8:
1b:76:f0:af:cb:6a:5c:25:69:e8:f0:7f:7b:9a:20:50:53:4e:
aa:4d:13:59:02:3a:43:b0:af:db:fe:f1:64:9d:cb:40:67:52:
50:cf:9c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:01 2023 by rpki-client on console-ams.rpki-client.org