Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/8yIsP47t-dggV4cOFfaqtHD_nZM.roa
File: 8yIsP47t-dggV4cOFfaqtHD_nZM.roa (raw, json)
Hash identifier: 0y+OA9/n9o01bXh+ndwJfBqfgx2KKhd/Zj+72ElO7eo=
Subject key identifier: F3:22:2C:3F:8E:ED:F9:D8:20:57:87:0E:15:F6:AA:B4:70:FF:9D:93
Certificate issuer: /CN=b5745bb8ef0088cb519a4095d651719ef51ee354
Certificate serial: A6CFBE
Authority key identifier: B5:74:5B:B8:EF:00:88:CB:51:9A:40:95:D6:51:71:9E:F5:1E:E3:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/8yIsP47t-dggV4cOFfaqtHD_nZM.roa
Signing time: Sat 01 Jan 2022 03:54:46 +0000
ROA not before: Sat 01 Jan 2022 03:54:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48437
IP address blocks: 45.14.28.0/22 maxlen: 22
195.22.140.0/23 maxlen: 23
185.175.244.0/22 maxlen: 22
91.200.8.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10932158 (0xa6cfbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5745bb8ef0088cb519a4095d651719ef51ee354
Validity
Not Before: Jan 1 03:54:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f3222c3f8eedf9d82057870e15f6aab470ff9d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3b:70:43:14:59:96:fc:d1:54:ad:80:9f:0e:
0b:52:50:e9:1b:66:4b:18:7f:44:d8:22:dc:02:ee:
06:1c:19:b7:18:fb:c7:47:b2:f2:18:22:ae:42:ba:
ce:7a:2b:f3:66:5c:8f:ce:31:ab:e4:68:4e:c0:37:
46:52:9b:50:60:14:6f:0c:02:ee:25:a2:03:e9:1a:
6e:b4:cc:2f:73:06:58:e6:eb:41:6f:b0:f2:0e:c5:
65:22:37:a8:63:5c:9c:74:06:0a:76:f1:f5:67:06:
8d:6b:77:8c:a2:0b:83:5d:ab:93:e6:a5:9d:30:d7:
78:79:2a:2f:1c:a5:58:43:3a:89:16:dc:91:3d:30:
f6:19:a2:b5:3c:39:48:d8:cb:05:ab:0f:df:fb:6b:
cf:2a:a9:f2:98:3b:86:17:50:02:95:87:1f:e2:e8:
75:d9:10:6d:1c:67:a8:5a:6e:f6:ce:28:6a:ae:d9:
74:6c:15:85:a6:8a:b1:84:80:4a:ef:2d:98:08:7e:
d2:46:a4:12:97:f5:e8:c2:14:ae:a2:f9:fa:67:51:
5c:0b:20:99:80:7b:e1:8e:a9:ef:0f:08:53:9e:41:
7d:0a:32:e0:3c:ac:39:41:43:f2:81:22:17:77:4e:
f9:01:9f:83:2c:a3:2f:40:2c:4e:aa:80:16:ef:ae:
98:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:22:2C:3F:8E:ED:F9:D8:20:57:87:0E:15:F6:AA:B4:70:FF:9D:93
X509v3 Authority Key Identifier:
keyid:B5:74:5B:B8:EF:00:88:CB:51:9A:40:95:D6:51:71:9E:F5:1E:E3:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXRbuO8AiMtRmkCV1lFxnvUe41Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/8yIsP47t-dggV4cOFfaqtHD_nZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/15afe5-42b3-4ce6-9d9d-87c3368cb3fa/1/tXRbuO8AiMtRmkCV1lFxnvUe41Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.28.0/22
91.200.8.0/22
185.175.244.0/22
195.22.140.0/23
Signature Algorithm: sha256WithRSAEncryption
04:8d:03:a3:ea:9f:aa:98:b0:ee:9c:7b:aa:27:5a:bf:10:ec:
83:8d:32:c9:bc:fb:fc:da:00:39:f1:30:d1:cd:ec:7e:6e:43:
9e:dc:fb:88:3c:d3:e0:42:41:03:ea:2c:e8:ab:3c:b7:34:af:
3d:6a:c9:49:00:96:4c:27:d3:8f:55:ea:b5:a5:5b:1a:a9:d3:
3a:db:ef:c6:74:1a:d4:3c:e3:c0:de:56:21:b8:75:40:c1:05:
da:ea:f2:a1:64:df:9b:80:fe:66:1b:45:8e:23:a4:ae:2b:80:
17:ce:59:4e:06:bf:8a:58:0d:28:02:22:97:a4:7e:d1:38:f8:
66:c2:3b:ee:6c:6b:a9:d9:d3:1e:09:0c:95:43:34:b2:f2:2a:
8e:f3:e8:2e:0a:e1:59:22:a3:bd:60:8f:3a:a3:88:77:f1:f8:
e5:e6:5d:fd:25:05:c8:25:69:51:dc:3d:c3:3d:ed:c4:c4:85:
01:13:e2:c6:54:9f:c2:bb:df:94:48:48:f1:eb:18:8d:20:d3:
12:13:6a:2a:1d:06:64:7d:f3:7d:2e:9a:69:f4:ea:67:b4:ca:
50:b0:62:2e:81:98:b7:74:b5:b6:fb:40:b4:ed:f9:f0:65:03:
8e:6b:5b:36:e2:89:32:c8:b6:37:79:7e:d4:9d:44:6f:70:60:
f6:78:af:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:56 2024 by rpki-client on console-ams.rpki-client.org