Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/NOpDRkqdY_gHCcTJpfTmAktR9cM.roa
File: NOpDRkqdY_gHCcTJpfTmAktR9cM.roa (raw, json)
Hash identifier: svfYSCT3zfVksmcFeETQI9w7J+mmDRGyN3Hna3R6WUs=
Subject key identifier: 34:EA:43:46:4A:9D:63:F8:07:09:C4:C9:A5:F4:E6:02:4B:51:F5:C3
Certificate issuer: /CN=59dda539feb8f8a3725342600670c0c154e4baaa
Certificate serial: 018268712AFBA374EF8B23D10840D13D66FE
Authority key identifier: 59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/NOpDRkqdY_gHCcTJpfTmAktR9cM.roa
Signing time: Thu 04 Aug 2022 10:40:23 +0000
ROA not before: Thu 04 Aug 2022 10:40:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49847
IP address blocks: 185.42.225.0/24 maxlen: 24
185.42.224.0/24 maxlen: 24
185.42.226.0/24 maxlen: 24
185.42.227.0/24 maxlen: 24
45.132.172.0/24 maxlen: 24
45.132.175.0/24 maxlen: 24
45.132.174.0/24 maxlen: 24
45.132.173.0/24 maxlen: 24
2a04:9240::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:68:71:2a:fb:a3:74:ef:8b:23:d1:08:40:d1:3d:66:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59dda539feb8f8a3725342600670c0c154e4baaa
Validity
Not Before: Aug 4 10:40:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=34ea43464a9d63f80709c4c9a5f4e6024b51f5c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3c:3c:03:d7:d9:f9:60:5b:fd:de:72:24:04:
a2:f1:55:bb:a1:43:62:06:82:69:32:5c:02:7f:57:
22:58:0a:55:e1:3d:28:77:22:75:ff:8f:9a:d2:8d:
ab:1a:87:49:7d:cb:6c:2f:2e:de:45:2a:1e:5b:22:
51:bd:e9:f9:4f:95:28:0b:bb:4e:db:7c:89:f1:f5:
46:24:05:e9:87:85:5c:98:98:63:b1:d1:ff:8a:17:
a0:de:e7:46:14:5a:8a:ca:51:f9:64:21:47:3a:26:
52:71:90:ee:4f:d5:a5:e4:23:1d:1f:c6:ea:5f:e3:
02:59:b4:77:69:8d:24:4b:dc:e3:42:c3:8e:25:e5:
0e:08:b6:2d:be:49:35:a1:6c:c2:4a:96:a0:af:b9:
d2:5c:d2:d8:73:b8:b0:23:5f:24:e4:f1:c1:e7:e4:
26:bb:54:f2:f4:c9:ba:56:0f:1e:4f:64:3a:94:c6:
2a:76:90:2c:bf:87:8d:55:49:a7:bb:d5:49:80:68:
1f:61:ea:72:a9:2a:be:fd:6e:7b:19:a7:3d:fb:4d:
ab:36:1e:a0:fe:92:f7:74:d2:fe:7a:01:88:27:ca:
2d:f9:82:76:49:a9:c0:c0:ad:d8:e2:3c:a9:6f:79:
e8:00:c0:8e:03:9e:fa:dc:b1:6e:76:72:f0:27:07:
52:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EA:43:46:4A:9D:63:F8:07:09:C4:C9:A5:F4:E6:02:4B:51:F5:C3
X509v3 Authority Key Identifier:
keyid:59:DD:A5:39:FE:B8:F8:A3:72:53:42:60:06:70:C0:C1:54:E4:BA:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wd2lOf64-KNyU0JgBnDAwVTkuqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/NOpDRkqdY_gHCcTJpfTmAktR9cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/bf2ba5-f280-49e5-9a34-fec25d2e918d/1/Wd2lOf64-KNyU0JgBnDAwVTkuqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.172.0/22
185.42.224.0/22
IPv6:
2a04:9240::/29
Signature Algorithm: sha256WithRSAEncryption
56:70:0d:00:28:f7:33:ee:04:c1:e8:dd:f7:42:5f:78:0b:42:
34:b4:5d:fb:f6:56:48:b4:68:5a:c8:9e:25:46:be:74:86:b0:
ae:40:7d:60:f1:aa:e5:36:c9:2d:cc:a2:9f:bb:f5:59:39:b9:
2e:5e:f7:93:2e:2b:de:46:c4:54:c2:16:57:2b:2a:89:76:bd:
09:2a:f3:32:37:af:a8:0c:bf:99:20:64:ee:91:53:0f:4c:33:
95:ed:f3:25:68:a3:b9:9b:c6:0d:66:72:5c:47:67:c1:72:5b:
e4:23:fb:b2:00:1c:90:d9:5d:50:4b:f1:32:d5:61:d0:71:08:
6e:ae:f9:4a:35:86:82:d5:24:9a:b8:2c:af:cd:de:21:a1:21:
2f:5f:15:81:e5:e4:2e:40:16:03:2f:f3:6b:22:3b:75:86:e5:
44:34:d4:1f:04:d5:61:67:e5:14:6c:2b:ec:f4:82:40:b5:86:
1c:b8:8c:f7:37:9b:1b:61:64:9d:b3:ce:ac:52:85:1f:27:de:
c1:19:92:e3:a5:38:0d:d4:64:fc:09:ae:ee:96:f7:7b:f9:1c:
b3:e5:c6:01:9b:9b:05:7a:03:79:d6:d4:bd:38:ab:e9:2b:46:
d0:22:17:47:45:74:a8:f1:62:1c:e9:b1:91:5a:e8:16:d0:f2:
ec:af:41:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:35 2023 by rpki-client on console-fra.rpki-client.org