Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/RcPTioESVSQjkdCuUCd_ThBzR9s.roa
File: RcPTioESVSQjkdCuUCd_ThBzR9s.roa (raw, json)
Hash identifier: +yg/8ruJjRBI17373nkpFdtAGY5sLhTOpW8vlOEWjpA=
Subject key identifier: 45:C3:D3:8A:81:12:55:24:23:91:D0:AE:50:27:7F:4E:10:73:47:DB
Certificate issuer: /CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Certificate serial: 02257318
Authority key identifier: D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/RcPTioESVSQjkdCuUCd_ThBzR9s.roa
Signing time: Sat 01 Jan 2022 08:04:38 +0000
ROA not before: Sat 01 Jan 2022 08:04:38 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198426
IP address blocks: 185.149.208.0/22 maxlen: 22
192.175.40.0/22 maxlen: 22
2a0d:a0c0::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 36008728 (0x2257318)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d04079bb7070ed0eeea3a1a467c79462bcc5455f
Validity
Not Before: Jan 1 08:04:38 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45c3d38a811255242391d0ae50277f4e107347db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:51:66:1e:f8:e9:6f:0b:1e:c8:a0:ac:dc:2d:
7e:77:05:40:7a:59:7c:50:1c:4c:8a:fa:8d:a0:3b:
23:57:37:88:a5:06:c1:bc:ca:a8:3f:9a:e1:52:af:
4b:29:f4:b7:f0:0a:9b:69:8e:19:c2:be:93:c6:81:
08:b9:c1:9e:1c:83:06:55:fa:14:cc:de:ed:5a:15:
7f:37:68:82:6c:76:89:5b:99:72:a4:ef:99:99:cc:
5c:2c:c9:48:d4:5c:36:87:9f:20:52:03:b9:a5:20:
53:2d:99:bb:8e:1f:85:3b:80:79:0d:9c:d2:2c:54:
21:61:ad:c5:1a:a1:91:be:57:28:32:8d:1b:36:da:
f8:d5:25:cf:1e:0a:b1:bc:b8:e5:b9:fe:42:7e:6e:
52:60:67:b9:e0:11:6f:13:09:d5:53:34:72:f7:cd:
2e:69:8a:05:ac:e6:c2:e7:8a:94:51:2c:7a:e7:b5:
63:70:54:ed:99:a1:74:d6:bb:52:38:2a:cb:bc:4b:
ed:80:4b:71:35:31:72:b3:6e:5e:f4:1b:53:90:6e:
ef:65:df:37:95:8d:20:af:6a:0a:c8:6c:15:e1:4c:
0d:b3:0b:8e:ab:4a:75:41:e3:c0:b3:77:10:3e:87:
85:14:f2:8f:a2:c4:8d:7e:63:3e:0a:1c:64:90:92:
0e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C3:D3:8A:81:12:55:24:23:91:D0:AE:50:27:7F:4E:10:73:47:DB
X509v3 Authority Key Identifier:
keyid:D0:40:79:BB:70:70:ED:0E:EE:A3:A1:A4:67:C7:94:62:BC:C5:45:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/RcPTioESVSQjkdCuUCd_ThBzR9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a93da0-e155-4324-9ba9-62098d1ec1e6/1/0EB5u3Bw7Q7uo6GkZ8eUYrzFRV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.208.0/22
192.175.40.0/22
IPv6:
2a0d:a0c0::/48
Signature Algorithm: sha256WithRSAEncryption
2b:f7:02:40:52:0c:75:25:8e:13:09:1f:57:6f:18:4e:ef:1b:
77:b1:e4:40:f8:bb:c0:f5:64:60:c0:a0:77:8b:a7:39:a2:7e:
55:08:cb:0a:35:39:01:8f:bc:f9:1d:72:f9:63:bc:ae:9f:0e:
e0:8e:f9:2f:83:d4:7f:b9:ca:6a:82:bc:8f:dc:7e:f8:05:bc:
dc:f4:97:64:72:5b:d9:01:ed:3c:5c:f3:9c:7b:b1:31:e8:71:
6e:f6:64:fb:3c:f7:b5:7f:4a:a8:4f:02:a8:38:01:a6:d1:0c:
4c:1f:ab:f8:2e:5b:97:19:3b:45:8f:96:81:fb:3c:91:de:e3:
d6:af:c5:33:5a:fd:e5:7b:29:27:a0:97:b1:2b:e8:d1:62:65:
7d:29:fe:9b:1e:f6:8c:c3:1f:9e:89:6b:67:9e:36:29:c8:4a:
7b:7b:7c:be:43:29:86:01:8e:51:4a:fb:1c:ac:3e:dc:b1:6c:
50:6d:ae:6d:e3:46:f0:1a:33:6f:eb:9d:c2:96:89:09:71:da:
f9:1c:94:e7:79:07:c7:18:4b:47:c4:a9:dc:0f:d2:54:44:b5:
07:2d:c8:52:a1:f9:72:b5:65:5f:2b:54:50:84:3d:1b:3b:31:
81:34:f8:82:d6:8d:51:a7:20:c0:8b:fe:6f:57:ee:dc:1f:6e:
72:0c:69:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:35:15 2024 by rpki-client on console-fra.rpki-client.org