Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/g5FYfF9OcTGQh6H44LwOdVpQh1w.roa
File: g5FYfF9OcTGQh6H44LwOdVpQh1w.roa (raw, json)
Hash identifier: fhW/LasKHWGH9NNQXKciYzQs1bP49q6co+o16EORkL0=
Subject key identifier: 83:91:58:7C:5F:4E:71:31:90:87:A1:F8:E0:BC:0E:75:5A:50:87:5C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 11DD7BA2
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/g5FYfF9OcTGQh6H44LwOdVpQh1w.roa
Signing time: Thu 10 Feb 2022 09:28:45 +0000
ROA not before: Thu 10 Feb 2022 09:28:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58057
IP address blocks: 45.136.136.0/22 maxlen: 24
94.177.122.0/24 maxlen: 24
194.50.92.0/24 maxlen: 24
194.50.94.0/24 maxlen: 24
194.50.111.0/24 maxlen: 24
45.12.68.0/22 maxlen: 24
139.28.96.0/22 maxlen: 24
2a10:cc46:100::/44 maxlen: 48
2a0e:97c0:260::/44 maxlen: 44
2a0f:e404:10a::/48 maxlen: 48
2a0c:3b80::/29 maxlen: 48
2a0f:e404:100::/48 maxlen: 48
2001:7f8:119::/48 maxlen: 48
2a0f:e404:101::/48 maxlen: 48
2a0e:97c0:170::/48 maxlen: 48
2a0f:e404:107::/48 maxlen: 48
2a0f:e404:102::/48 maxlen: 48
2a09:4c0::/29 maxlen: 64
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 299727778 (0x11dd7ba2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 10 09:28:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8391587c5f4e71319087a1f8e0bc0e755a50875c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:72:f6:a2:6b:f4:e1:0a:a5:d7:43:60:65:bc:
3a:af:91:4d:e0:3b:f5:8a:f9:e3:f9:2d:a8:44:6c:
44:64:a5:4b:ce:db:b9:3d:5d:cc:ee:e2:7f:1a:60:
62:6e:c3:55:2a:c4:28:91:04:d3:ba:c8:36:e3:c3:
6d:ac:91:5e:35:14:76:3f:b0:4a:f6:64:9b:0d:ad:
87:c8:7d:15:f3:9b:a1:5b:b7:a0:49:1d:29:0c:10:
8c:35:5c:b2:a1:6f:e4:f0:0d:2e:4d:0e:89:23:8c:
3d:80:6c:33:0a:d6:a7:30:fd:ff:f2:28:3a:83:a8:
c6:d3:82:5b:fd:c7:6b:16:04:7e:14:f1:9d:15:56:
36:7a:36:ed:41:6d:89:f3:59:bd:8d:e8:fe:e2:42:
4d:51:8c:52:0a:59:69:47:1b:ca:ae:59:9f:02:17:
63:7b:51:1a:15:5e:d3:48:57:6c:36:23:58:af:4b:
d4:9e:34:15:93:9f:36:23:c9:62:97:91:fd:ab:93:
c7:8e:99:ec:c5:e3:59:cd:5d:bf:78:c2:82:f0:84:
39:1d:fa:7b:15:31:78:49:a8:d8:8d:57:dc:a0:d4:
8c:6c:77:c4:e9:32:4c:57:56:b3:45:4e:24:36:62:
44:a7:ee:db:9b:fd:f7:a1:c2:31:b9:1e:7f:f5:2f:
7f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:91:58:7C:5F:4E:71:31:90:87:A1:F8:E0:BC:0E:75:5A:50:87:5C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/g5FYfF9OcTGQh6H44LwOdVpQh1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.68.0/22
45.136.136.0/22
94.177.122.0/24
139.28.96.0/22
194.50.92.0/24
194.50.94.0/24
194.50.111.0/24
IPv6:
2001:7f8:119::/48
2a09:4c0::/29
2a0c:3b80::/29
2a0e:97c0:170::/48
2a0e:97c0:260::/44
2a0f:e404:100::-2a0f:e404:102:ffff:ffff:ffff:ffff:ffff
2a0f:e404:107::/48
2a0f:e404:10a::/48
2a10:cc46:100::/44
Signature Algorithm: sha256WithRSAEncryption
26:70:cc:ae:86:6c:c5:ff:e6:79:7c:65:82:b1:88:e5:76:5b:
8b:89:b6:02:37:c0:42:c9:6e:87:74:b2:67:43:2f:e6:3d:5b:
4c:c8:5b:0b:15:42:86:3d:6f:d4:eb:a4:26:ff:fa:f1:f5:0c:
de:43:4b:76:69:fa:7e:33:04:e2:05:8d:a6:c3:01:d1:6d:91:
fa:23:5c:e1:27:9d:74:68:d0:ec:01:10:92:07:36:35:4d:68:
c0:35:29:a2:fb:6c:e4:6d:4e:cf:ed:48:d3:30:a6:a9:71:e9:
f4:a0:9c:8e:9a:0a:7e:04:74:be:1a:83:c4:e3:47:50:b7:a1:
e5:c5:3e:74:28:77:26:6e:e3:86:41:b7:ef:4b:04:65:fe:45:
19:e9:86:13:97:3e:1b:27:10:43:6d:13:06:c5:b8:7a:fd:00:
18:25:81:ee:1e:4e:49:92:47:06:b6:72:8f:48:8c:ed:c8:48:
f0:54:88:1f:9c:7c:2b:de:ef:73:3d:11:3d:e8:70:2c:cd:a9:
17:23:1c:99:19:9e:28:17:09:09:2a:b8:17:c1:c7:aa:20:cd:
7d:44:c3:94:52:e9:8f:36:2c:6a:c5:ce:78:4a:fe:28:dd:8e:
56:37:47:f7:95:92:43:9b:89:42:79:be:c1:68:0c:d3:2c:d9:
1d:a8:b7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:02 2023 by rpki-client on console-ams.rpki-client.org