Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/T6FdqPjWlme2BHsAiKlNy-XsRe4.roa
File: T6FdqPjWlme2BHsAiKlNy-XsRe4.roa (raw, json)
Hash identifier: HPOAo1QlEbPC3lynJpJwJDMO90YWI68/cpCDXW+4ofU=
Subject key identifier: 4F:A1:5D:A8:F8:D6:96:67:B6:04:7B:00:88:A9:4D:CB:E5:EC:45:EE
Certificate issuer: /CN=1b68656126198373d07886bf4ab8fb06b9006780
Certificate serial: 07F26894
Authority key identifier: 1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/T6FdqPjWlme2BHsAiKlNy-XsRe4.roa
Signing time: Sat 01 Jan 2022 07:00:27 +0000
ROA not before: Sat 01 Jan 2022 07:00:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208621
IP address blocks: 45.92.36.0/24 maxlen: 24
45.92.38.0/24 maxlen: 24
45.92.37.0/24 maxlen: 24
45.92.39.0/24 maxlen: 24
2a0e:1bc7::/35 maxlen: 35
2a0e:1bc1::/35 maxlen: 35
2a0e:1bc5::/35 maxlen: 35
2a0e:1bc4::/35 maxlen: 35
2a0e:1bc0::/35 maxlen: 35
2a0e:1bc0:6000::/35 maxlen: 35
2a0e:1bc0:4000::/35 maxlen: 35
2a0e:1bc0:2000::/35 maxlen: 35
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133326996 (0x7f26894)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b68656126198373d07886bf4ab8fb06b9006780
Validity
Not Before: Jan 1 07:00:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4fa15da8f8d69667b6047b0088a94dcbe5ec45ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:04:6a:3e:31:f5:a8:81:1e:46:4b:e0:5d:77:
a0:bb:28:cd:62:32:fa:4e:6b:48:80:f0:d7:02:30:
dd:43:c9:f9:cb:40:c2:0c:78:5e:01:9b:cc:16:aa:
f7:6e:f3:6e:71:fa:a8:c6:f7:1b:d2:e8:b3:5b:40:
6a:15:f2:76:18:d5:9e:08:d1:f2:af:f2:e4:ac:63:
4c:5a:03:c0:b8:4f:31:64:43:63:2f:fa:72:f1:c4:
45:c2:99:f4:d0:69:cb:ef:60:73:30:54:05:f4:f7:
b2:d6:dc:86:ac:c2:db:0e:15:8d:02:47:f4:0a:34:
f3:80:ce:92:3e:75:0a:cf:5e:06:fb:88:bf:2d:f0:
51:16:ce:26:71:3c:f0:09:2c:b0:ae:d5:8d:b5:84:
49:d4:06:6f:3d:12:0d:6e:5c:98:3c:a0:40:e2:18:
30:f0:cd:bf:eb:51:1e:86:c1:2e:92:5b:a0:8d:f1:
66:49:0b:56:0a:71:66:ac:cd:92:01:82:75:3b:34:
cb:59:51:15:18:af:3b:88:03:a7:d5:a4:ad:64:aa:
f0:5f:26:6e:10:17:d8:92:b5:dd:bd:c9:5f:3d:b3:
5f:a5:9a:67:44:14:2e:49:f6:ab:5e:10:75:f8:af:
84:4f:28:1b:e6:55:6a:c7:ed:21:15:65:5a:b7:af:
d7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A1:5D:A8:F8:D6:96:67:B6:04:7B:00:88:A9:4D:CB:E5:EC:45:EE
X509v3 Authority Key Identifier:
keyid:1B:68:65:61:26:19:83:73:D0:78:86:BF:4A:B8:FB:06:B9:00:67:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/T6FdqPjWlme2BHsAiKlNy-XsRe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/53100f-1bb3-4219-9c82-2398704ab50c/1/G2hlYSYZg3PQeIa_Srj7BrkAZ4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.36.0/22
IPv6:
2a0e:1bc0::/33
2a0e:1bc1::/35
2a0e:1bc4::/35
2a0e:1bc5::/35
2a0e:1bc7::/35
Signature Algorithm: sha256WithRSAEncryption
3c:df:bc:ee:82:3d:a6:9f:0e:e9:75:dd:e3:80:7b:b7:ec:46:
a1:c7:7a:a2:52:09:12:45:fd:59:aa:e5:14:dc:44:15:4d:4e:
84:05:de:0f:8a:67:6d:5a:71:23:7c:63:dc:7b:42:ac:a2:54:
85:2c:8a:48:05:7b:54:a6:92:b0:9b:d7:f4:51:db:05:83:33:
13:00:27:45:43:cb:f1:73:26:77:c1:b6:fe:c9:89:3d:13:35:
d3:b5:70:89:f4:d4:e8:e5:6b:81:a7:45:22:ee:7a:02:81:21:
68:1c:e7:65:08:5b:79:1e:27:0a:9a:91:38:fd:fe:68:0b:20:
07:c7:0e:43:08:aa:77:66:57:89:e0:b7:68:2a:53:29:26:f2:
84:96:6d:bf:62:06:97:09:c0:c9:ce:97:fa:3e:f4:d0:af:cf:
4b:90:88:de:e4:a5:4b:3b:61:e2:1a:65:fc:8b:47:dd:76:c5:
be:6a:b7:a8:36:c8:62:3c:de:94:11:10:95:5d:9a:f0:4c:cb:
38:cb:7f:f2:da:01:88:e4:be:3e:68:2c:a7:b2:e3:ba:21:5f:
e8:58:40:06:fb:db:48:90:35:e3:9c:ce:f0:56:44:cb:f8:9f:
36:7d:7d:64:38:f4:8c:0c:f2:7a:ae:56:f4:83:d6:30:1e:6f:
95:89:a6:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:54 2023 by rpki-client on console-ams.rpki-client.org