Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/dKeTkEyKK06rG3yUuqnZuutxynM.roa
File: dKeTkEyKK06rG3yUuqnZuutxynM.roa (raw, json)
Hash identifier: hOIOCXd+kXT9q02skt9jiKFmH7ALpuPhi1mWgjCueDg=
Subject key identifier: 74:A7:93:90:4C:8A:2B:4E:AB:1B:7C:94:BA:A9:D9:BA:EB:71:CA:73
Certificate issuer: /CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Certificate serial: 018506F4F41357D397DAD0B1E5D04C922AA9
Authority key identifier: DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/dKeTkEyKK06rG3yUuqnZuutxynM.roa
Signing time: Mon 12 Dec 2022 15:29:54 +0000
ROA not before: Mon 12 Dec 2022 15:29:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35491
IP address blocks: 194.24.180.0/23 maxlen: 23
46.148.64.0/20 maxlen: 20
46.148.64.0/24 maxlen: 24
46.148.67.0/24 maxlen: 24
46.148.68.0/24 maxlen: 24
46.148.69.0/24 maxlen: 24
46.148.70.0/24 maxlen: 24
46.148.71.0/24 maxlen: 24
46.148.65.0/24 maxlen: 24
46.148.66.0/24 maxlen: 24
46.148.76.0/24 maxlen: 24
46.148.77.0/24 maxlen: 24
46.148.72.0/24 maxlen: 24
46.148.73.0/24 maxlen: 24
193.151.112.0/22 maxlen: 22
193.151.112.0/24 maxlen: 24
193.151.113.0/24 maxlen: 24
193.151.114.0/24 maxlen: 24
193.151.115.0/24 maxlen: 24
91.192.120.0/22 maxlen: 22
91.192.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:f4:f4:13:57:d3:97:da:d0:b1:e5:d0:4c:92:2a:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deb145756080aff1bb00f5f90fd9f2f27cc5732a
Validity
Not Before: Dec 12 15:29:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74a793904c8a2b4eab1b7c94baa9d9baeb71ca73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e7:68:8d:a6:28:1d:9f:76:de:13:0c:0d:5c:
b4:c4:94:db:82:33:d2:cf:fe:ee:2b:81:6b:dd:e9:
5e:c8:d0:cb:48:53:a2:f7:4e:42:81:ae:3a:7d:36:
64:f2:63:2f:26:62:ec:96:04:93:ed:1a:70:50:84:
99:53:95:2c:08:ff:51:6d:71:cf:89:1c:d8:79:ec:
29:a8:12:dd:03:30:41:fd:9e:8b:9c:a1:7e:14:cd:
4a:aa:5c:bd:d4:ff:37:04:7d:b6:e8:92:ee:90:fa:
ce:ba:40:d7:39:ff:f3:b1:84:9d:3a:ba:c6:e9:f1:
c9:6a:d8:a2:6d:72:60:53:fe:bc:b1:28:67:07:af:
fe:f2:95:61:6d:9c:be:0e:5b:91:04:bf:84:40:28:
8a:a6:4e:de:01:3d:20:7a:69:e3:2c:05:19:d8:89:
aa:f0:a7:b3:b8:ad:ec:dc:50:d5:51:3f:80:7a:a5:
ac:01:b6:48:da:75:6e:aa:4c:9f:80:84:9e:af:9b:
67:eb:cb:b1:3f:82:6e:46:ea:df:fa:ef:fa:61:4e:
90:38:17:01:0f:5d:55:a1:4d:be:8f:b6:41:76:e3:
43:6b:b7:2d:36:8d:7c:dc:bd:dc:9e:64:57:29:64:
a9:9f:10:21:7f:f7:c5:47:9c:8b:d4:b5:00:4e:ff:
95:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A7:93:90:4C:8A:2B:4E:AB:1B:7C:94:BA:A9:D9:BA:EB:71:CA:73
X509v3 Authority Key Identifier:
keyid:DE:B1:45:75:60:80:AF:F1:BB:00:F5:F9:0F:D9:F2:F2:7C:C5:73:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3rFFdWCAr_G7APX5D9ny8nzFcyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/dKeTkEyKK06rG3yUuqnZuutxynM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a65d14-9365-40c9-a568-3ff9645503e9/1/3rFFdWCAr_G7APX5D9ny8nzFcyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.148.64.0/20
91.192.120.0/22
193.151.112.0/22
194.24.180.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:e0:61:cb:45:63:08:a8:fb:88:fc:78:82:22:65:58:e6:b4:
2a:d7:7c:b5:14:ee:16:bd:16:af:7a:6c:e1:71:41:a4:78:df:
c4:30:0c:a5:b4:a7:fc:2d:7e:45:91:2d:55:33:8d:9f:78:66:
9b:f8:6d:4e:c6:67:2b:ef:91:be:9d:43:63:9f:a4:18:bd:7c:
85:74:86:f0:08:c7:c2:05:d9:60:f1:0b:03:4e:6b:ca:cb:4c:
d1:19:ab:8d:00:ec:b2:a3:0b:fb:90:00:55:b2:4d:93:54:72:
85:49:6f:89:1b:73:b4:e4:b3:2d:aa:5d:06:8b:6c:9c:fe:78:
08:41:1a:16:dd:b5:a7:07:0d:d6:c5:64:9b:6c:ba:0b:d4:0d:
b5:4b:bb:0b:4d:f3:35:8b:a8:bc:02:5c:5f:f6:3c:23:f5:8c:
a5:45:c8:f4:ab:90:3b:13:2b:cb:33:2c:cb:30:e4:b1:68:b3:
98:9c:ec:3f:4f:69:bd:52:0d:f7:f3:3d:ce:fe:1a:9e:32:eb:
2e:ae:db:0b:7a:84:ea:60:e0:8e:d4:27:6c:e7:51:f1:db:29:
1b:e7:8c:98:88:97:2e:65:79:a5:69:f3:c5:41:56:f5:ef:8a:
4b:8e:4a:76:bb:b9:41:9c:c5:72:8e:a4:29:35:09:fb:6e:9a:
e1:c5:52:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:02 2023 by rpki-client on console-fra.rpki-client.org