Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/PkG8oHwLHVS8yiZ6fg6ilHV2t58.roa
File: PkG8oHwLHVS8yiZ6fg6ilHV2t58.roa (raw, json)
Hash identifier: ReRyLuxizd0NIRP3PpI2IaRVKG+FP/qTYfNAINehksU=
Subject key identifier: 3E:41:BC:A0:7C:0B:1D:54:BC:CA:26:7A:7E:0E:A2:94:75:76:B7:9F
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 38C5FE13
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/PkG8oHwLHVS8yiZ6fg6ilHV2t58.roa
Signing time: Sat 01 Jan 2022 07:55:07 +0000
ROA not before: Sat 01 Jan 2022 07:55:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1104
IP address blocks: 145.116.48.0/20 maxlen: 20
145.107.4.0/22 maxlen: 22
145.110.0.0/16 maxlen: 16
145.116.208.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 952499731 (0x38c5fe13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 1 07:55:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3e41bca07c0b1d54bcca267a7e0ea2947576b79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:41:eb:08:47:bb:02:a3:2f:31:4d:bc:af:
c5:bc:d1:a1:16:5c:eb:35:da:de:88:0e:3e:63:46:
fe:78:85:8d:ec:d5:e5:bd:85:95:df:77:cb:b3:c8:
8f:d7:e8:15:c2:41:09:15:76:3e:f1:75:04:d8:bd:
d6:55:61:e3:d0:70:e0:4f:e5:1d:f4:90:7d:27:3f:
2b:38:92:16:dc:d9:c3:4c:a8:38:52:91:17:d0:64:
c5:ae:34:4b:c7:8d:56:43:d2:d5:7e:18:6c:f9:26:
cb:a4:86:0c:b9:8e:d8:01:77:5c:03:93:03:6d:eb:
1a:c9:0f:12:52:0b:23:a3:f7:d6:88:61:66:56:44:
a3:ab:9c:03:58:fb:b0:63:de:40:82:3f:67:ad:1b:
a7:00:0d:d4:b0:7d:95:9f:2c:fc:64:13:a2:0a:58:
ff:39:ab:6b:70:8b:8d:e6:33:f3:4a:e4:b6:70:fd:
27:95:81:46:37:24:b6:97:d1:72:3c:0c:78:60:0d:
80:d4:ed:6f:77:a6:84:56:4f:f3:98:5c:9b:98:ef:
d2:9c:8e:44:5b:c9:ee:ab:c3:24:55:3b:01:23:ae:
c2:6d:f9:ce:33:ab:c0:69:5d:00:1c:19:ab:e2:dd:
fc:3e:52:22:9b:fa:27:ee:a2:2e:b1:57:2d:3a:fb:
e2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:41:BC:A0:7C:0B:1D:54:BC:CA:26:7A:7E:0E:A2:94:75:76:B7:9F
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/PkG8oHwLHVS8yiZ6fg6ilHV2t58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.107.4.0/22
145.110.0.0/16
145.116.48.0/20
145.116.208.0/21
Signature Algorithm: sha256WithRSAEncryption
6a:a5:56:de:1a:7d:52:18:35:af:b1:eb:a2:96:5e:d8:34:a5:
71:92:09:40:74:2e:34:2e:3a:24:57:0f:ea:af:02:94:ac:a4:
16:77:c1:61:7f:89:f3:b6:4e:b2:b7:c7:83:08:42:81:23:3e:
37:5d:48:5a:b1:1d:b7:0a:89:fa:9e:4e:b4:c4:91:95:12:67:
d6:68:ab:3e:4b:04:3c:3b:0c:c8:a0:8d:e4:93:dc:5f:57:a9:
ee:a5:e5:80:e2:88:e9:9b:d9:53:9e:24:80:7b:4c:82:ed:b1:
2c:03:3e:b2:2d:56:15:f4:36:44:e0:cc:84:3d:a3:02:44:12:
a2:19:32:34:72:2a:fb:67:ba:28:d8:d8:12:a8:cc:64:88:1e:
5d:1d:cf:d0:70:a3:50:7b:d4:13:88:17:2e:12:1f:f8:1e:7f:
de:0d:fc:62:8d:27:e6:39:75:0f:0d:f4:75:26:70:cf:fd:a8:
8e:7e:4f:9f:2c:4c:6b:47:f9:29:79:05:85:76:6c:29:a0:2b:
69:21:f9:49:2a:fa:fc:c7:93:be:84:15:c4:35:83:05:5d:34:
da:da:f8:ac:98:e9:43:db:20:aa:6d:4d:95:92:e1:67:df:04:
2f:cd:ca:12:fd:ea:46:d2:d9:3c:67:f1:bb:3f:4d:38:1b:f1:
a0:de:ff:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:09 2024 by rpki-client on console-fra.rpki-client.org