Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/YUk6MiuRpVEMXBZOvdgxwDcDAkw.roa
File: YUk6MiuRpVEMXBZOvdgxwDcDAkw.roa (raw, json)
Hash identifier: CIEjoIg+52ss721yY+oB4S/JsmXFOwyneGuxuqbv7vg=
Subject key identifier: 61:49:3A:32:2B:91:A5:51:0C:5C:16:4E:BD:D8:31:C0:37:03:02:4C
Certificate issuer: /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial: 14E48C46
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/YUk6MiuRpVEMXBZOvdgxwDcDAkw.roa
Signing time: Mon 09 May 2022 07:39:03 +0000
ROA not before: Mon 09 May 2022 07:39:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31732
IP address blocks: 212.90.100.0/22 maxlen: 24
185.220.236.0/22 maxlen: 24
188.209.155.0/24 maxlen: 24
45.146.240.0/22 maxlen: 24
82.115.0.0/21 maxlen: 24
46.249.104.0/21 maxlen: 21
46.249.100.0/22 maxlen: 22
185.129.108.0/22 maxlen: 24
46.249.112.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 350522438 (0x14e48c46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Validity
Not Before: May 9 07:39:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=61493a322b91a5510c5c164ebdd831c03703024c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7d:72:ac:5b:6f:00:b5:f8:6d:a0:d9:0c:08:
6e:35:e8:11:36:9a:92:88:81:c1:dd:b7:3a:fe:c2:
57:ee:8b:f8:28:9c:06:da:42:03:e1:08:35:3f:a9:
e3:06:79:1e:6e:62:4c:c8:e6:ed:b6:55:8c:64:56:
9d:df:d9:18:fc:8b:0e:1a:fa:44:32:8c:80:4f:c1:
2f:ac:80:cf:1a:63:26:8c:3a:c7:cc:93:c9:a7:e2:
1d:3e:ff:44:a2:67:23:a8:ce:3d:d0:92:91:7a:e9:
df:d2:45:79:6c:b8:d9:ac:c6:8d:8a:75:57:5d:2b:
03:f4:bc:66:fc:3a:c2:44:b3:61:f5:3c:88:25:70:
12:08:1c:7e:3f:6b:ee:b1:e4:d8:84:61:7e:5d:be:
f5:ae:a1:1d:f3:b1:38:da:c8:e3:ee:c2:1e:26:12:
a5:91:98:19:f7:b8:bc:2d:14:61:5e:60:0c:7a:e8:
49:80:cb:0b:9c:d8:ae:a4:90:8b:4c:40:14:19:21:
d9:1c:c2:7e:bf:55:d4:e3:73:d6:93:c5:21:c1:7f:
a9:a0:5f:41:45:a0:d9:64:a7:a2:51:ba:58:f6:e3:
e1:28:5e:eb:86:26:52:0e:86:1f:7c:86:1c:17:4b:
a8:70:63:34:39:ce:f6:16:f7:4a:6d:de:38:b6:d4:
c3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:49:3A:32:2B:91:A5:51:0C:5C:16:4E:BD:D8:31:C0:37:03:02:4C
X509v3 Authority Key Identifier:
keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/YUk6MiuRpVEMXBZOvdgxwDcDAkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.240.0/22
46.249.100.0-46.249.119.255
82.115.0.0/21
185.129.108.0/22
185.220.236.0/22
188.209.155.0/24
212.90.100.0/22
Signature Algorithm: sha256WithRSAEncryption
03:d5:9b:17:7c:38:bc:e0:46:e9:79:b9:65:9e:da:03:3a:a0:
e8:25:cd:07:2d:55:0a:dc:b7:3f:ef:e2:fc:1f:cb:7b:c0:9f:
e9:e8:8a:85:7b:a2:7a:b9:1e:13:60:1d:e8:2f:de:07:e2:f8:
47:1b:7f:5c:a4:d6:46:43:20:7a:71:19:62:38:fe:00:b3:44:
70:94:e3:0b:28:e0:bb:59:2d:39:fd:96:56:9a:71:14:7c:7c:
ee:c0:d0:5e:7f:80:04:8e:72:4c:f3:90:d6:cb:5a:85:78:49:
cd:ad:ea:c1:7f:d1:21:2f:e3:de:36:a1:3a:77:10:5a:0c:b1:
8e:9c:3c:0a:e9:f4:61:c8:95:42:5e:72:5e:ae:c3:71:0e:a3:
10:23:51:fc:b6:8f:eb:fe:2d:38:e0:4e:33:18:76:80:3d:00:
70:3b:d9:47:eb:e9:b6:9a:8f:40:03:90:89:a9:d9:c5:d0:a8:
52:c3:52:35:08:5a:cf:d2:12:a7:75:e1:29:22:a6:ac:5e:7f:
7a:0d:51:b5:7d:bd:41:75:63:cc:5a:35:09:5e:ac:a3:66:fe:
1e:4d:1f:1d:80:cb:e3:89:92:a6:ab:2e:06:53:14:c5:72:03:
91:51:73:bb:0f:95:ed:ea:9f:84:e0:10:32:4b:90:36:48:8f:
93:c8:5d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:24 2023 by rpki-client on console-ams.rpki-client.org