Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/8e7qlYNpCeDPqIF6_EYxsoztDlY.roa
File: 8e7qlYNpCeDPqIF6_EYxsoztDlY.roa (raw, json)
Hash identifier: HLCi6ckkWQDIQClFxHpaC9aleCaICiAnwhxX6L16kJQ=
Subject key identifier: F1:EE:EA:95:83:69:09:E0:CF:A8:81:7A:FC:46:31:B2:8C:ED:0E:56
Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial: 0562CE83
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/8e7qlYNpCeDPqIF6_EYxsoztDlY.roa
Signing time: Tue 07 Jun 2022 07:48:22 +0000
ROA not before: Tue 07 Jun 2022 07:48:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 45.151.204.0/22 maxlen: 24
45.67.44.0/22 maxlen: 22
45.136.60.0/22 maxlen: 24
45.12.44.0/22 maxlen: 24
45.95.140.0/22 maxlen: 24
2.57.180.0/22 maxlen: 24
45.15.52.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90361475 (0x562ce83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
Validity
Not Before: Jun 7 07:48:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f1eeea95836909e0cfa8817afc4631b28ced0e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:76:09:2a:21:9d:98:20:8f:f2:1d:4b:c8:a4:
ba:d7:b2:7c:9f:5e:34:6f:d4:49:72:48:1d:18:e7:
ad:3b:85:30:d7:83:f3:e0:e3:ac:e9:35:e3:f9:1d:
4c:00:48:74:a0:73:c6:1d:06:e8:72:5f:6d:e5:4b:
79:9e:4d:ac:45:d7:c1:85:44:77:b7:7e:3d:f2:d9:
7c:3b:8d:4e:1c:6f:4f:8e:b9:4d:2e:57:36:0f:02:
08:a7:f4:f7:d3:bf:c1:1e:a1:7a:20:44:89:59:87:
12:32:41:ee:34:2d:36:52:ab:9b:6e:0b:af:56:d5:
25:ec:f7:7c:18:0f:14:57:d8:7f:98:02:ac:53:d3:
ca:d2:eb:08:96:85:f0:5a:10:bb:50:e4:8a:ad:dd:
bf:62:21:bd:da:86:53:fe:17:26:59:00:b3:a0:28:
d9:8e:97:d0:d8:b7:ea:62:ed:50:17:a0:62:c9:ad:
1e:32:ee:27:87:c8:4a:f8:94:03:54:4a:21:e7:5e:
76:89:01:4a:18:6a:b7:40:9b:30:d6:a4:d8:cc:c1:
86:9a:d3:8d:81:6d:ef:3b:9a:ea:95:0c:1c:e4:5a:
f8:7d:da:f6:0a:2a:7c:d5:b6:0f:0e:60:28:59:e6:
16:8c:6a:8d:09:85:8d:a3:d5:29:ce:86:5a:a7:6f:
fc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:EE:EA:95:83:69:09:E0:CF:A8:81:7A:FC:46:31:B2:8C:ED:0E:56
X509v3 Authority Key Identifier:
keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/8e7qlYNpCeDPqIF6_EYxsoztDlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.180.0/22
45.12.44.0/22
45.15.52.0/22
45.67.44.0/22
45.95.140.0/22
45.136.60.0/22
45.151.204.0/22
Signature Algorithm: sha256WithRSAEncryption
68:b7:8a:45:42:b5:ef:2b:35:a1:a5:56:02:61:92:36:56:04:
08:d7:75:6e:a7:a1:ec:14:6b:29:35:42:48:98:5a:96:82:ef:
ab:19:0c:ce:48:82:d0:0b:2c:81:a4:7e:83:cd:3a:70:ea:b3:
c9:4b:27:f5:2f:a4:53:06:8d:29:e8:99:a0:66:b4:ac:3a:4e:
a8:5e:77:77:08:d3:ca:ca:42:57:9a:1a:79:62:98:30:8d:70:
54:4d:d9:f0:32:c1:45:5b:a4:95:32:03:e9:96:37:3d:94:b6:
47:e9:e8:2f:79:1a:e5:99:19:70:6c:4c:be:eb:4b:a3:c8:08:
5a:42:bf:33:41:34:79:eb:c1:80:50:4f:7e:30:d5:18:5c:f9:
c4:38:22:6d:2a:4c:9f:53:f0:ef:75:23:81:29:45:ff:03:8a:
a6:a6:1f:dc:9f:e9:01:4d:0e:fe:76:f7:fd:e6:a6:d6:51:8d:
71:7e:48:5a:c6:ef:e7:34:de:53:15:d2:31:85:79:55:b3:1f:
76:3f:ab:1a:ca:34:d1:51:01:dc:28:36:b0:90:30:ab:56:4e:
71:a5:5f:01:60:58:fb:e5:15:8a:f8:a7:a6:46:0f:5a:9b:b8:
9f:93:ca:36:93:fc:24:c4:d8:e6:f2:a1:85:be:e7:79:b9:0a:
73:83:51:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:02 2024 by rpki-client on console-ams.rpki-client.org