Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/vuvvIJPsxlD6Ypx4pRr5VASnYjs.roa
File: vuvvIJPsxlD6Ypx4pRr5VASnYjs.roa (raw, json)
Hash identifier: UpyV9rmWAKhIknD6KCodhXqD4Spfi+/1pQ1r5krTsYc=
Subject key identifier: BE:EB:EF:20:93:EC:C6:50:FA:62:9C:78:A5:1A:F9:54:04:A7:62:3B
Certificate issuer: /CN=c8d5e37178d8524c72660a1d796165999e586622
Certificate serial: 0566F2BA
Authority key identifier: C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/vuvvIJPsxlD6Ypx4pRr5VASnYjs.roa
Signing time: Wed 08 Jun 2022 22:24:02 +0000
ROA not before: Wed 08 Jun 2022 22:24:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 0
IP address blocks: 45.151.204.0/22 maxlen: 24
45.67.44.0/22 maxlen: 22
45.12.44.0/22 maxlen: 24
45.95.140.0/22 maxlen: 24
2.57.180.0/22 maxlen: 24
45.15.52.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90632890 (0x566f2ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5e37178d8524c72660a1d796165999e586622
Validity
Not Before: Jun 8 22:24:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=beebef2093ecc650fa629c78a51af95404a7623b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:dc:12:46:8d:93:6a:36:84:a6:91:b2:50:
81:34:49:a0:08:d9:b9:62:59:b9:27:bf:24:d9:6a:
66:21:d7:1e:f2:f4:91:c8:bf:cb:30:1c:e2:6c:c2:
ef:af:a7:01:a5:74:d6:63:68:82:f1:02:51:03:df:
56:92:e6:d4:6a:a2:11:a2:59:b9:33:2b:00:2d:14:
01:c5:e9:f0:1f:95:0f:d9:c1:87:fc:18:92:9f:6c:
07:28:9a:7c:cb:19:a7:af:f4:0a:18:9f:24:9a:4d:
3d:bc:a7:d1:67:ec:fb:d5:7b:47:04:fa:87:b9:62:
2a:41:71:b4:66:e0:b3:e6:5f:85:3c:12:2a:c4:4f:
7a:5e:b5:47:62:eb:51:ad:46:2c:9b:26:8b:26:24:
8f:48:56:36:d2:38:57:54:c4:19:3e:b7:39:68:e6:
45:30:75:ed:ff:9c:7c:5f:83:5d:0e:46:81:02:8d:
71:cb:2b:90:b3:f0:f7:55:8e:19:31:5b:ed:2c:99:
6c:24:1b:04:83:a8:05:bc:c5:9c:3b:c0:71:1f:50:
9e:04:0c:db:aa:ac:40:01:ee:1e:43:26:3c:7a:84:
b4:d6:f6:b5:fa:6d:b5:c2:42:a2:78:92:67:fa:66:
7c:d5:9a:df:f6:11:ca:13:12:f2:7f:a4:ab:a1:4b:
a1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:EB:EF:20:93:EC:C6:50:FA:62:9C:78:A5:1A:F9:54:04:A7:62:3B
X509v3 Authority Key Identifier:
keyid:C8:D5:E3:71:78:D8:52:4C:72:66:0A:1D:79:61:65:99:9E:58:66:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNXjcXjYUkxyZgodeWFlmZ5YZiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/vuvvIJPsxlD6Ypx4pRr5VASnYjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/b54ca3-73d5-4984-8782-9e0aed2fb8ec/1/yNXjcXjYUkxyZgodeWFlmZ5YZiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.180.0/22
45.12.44.0/22
45.15.52.0/22
45.67.44.0/22
45.95.140.0/22
45.151.204.0/22
Signature Algorithm: sha256WithRSAEncryption
14:27:2b:10:4e:2b:dd:0d:37:41:7b:33:10:61:c6:c8:96:c7:
44:0f:4d:8a:b6:87:b3:2a:23:d8:c4:ef:67:f3:62:48:fb:b0:
63:19:6a:d1:39:00:1c:39:2f:6d:74:c5:05:2e:bb:95:c8:a9:
47:bc:95:5c:d2:ac:0a:ac:6b:c7:ba:e7:6f:d5:1d:eb:3e:ee:
82:94:c0:73:db:25:ce:29:c2:11:01:7c:04:3c:78:fc:de:20:
30:d2:7b:b8:c0:45:09:6c:cf:56:58:39:4a:2a:50:67:f9:9c:
eb:3c:d8:e5:d2:48:9d:6a:67:e0:5a:d4:ea:47:cb:a6:7c:f3:
c0:6b:3e:74:a9:aa:f3:e6:76:51:70:e9:61:88:65:d9:20:91:
d2:27:d6:8d:5f:55:5f:d0:18:ce:ef:a4:a8:d1:85:11:25:c4:
2e:2b:36:57:eb:e2:7f:7e:d7:be:5a:7a:0d:1a:4d:05:3c:9b:
2e:85:7a:0d:4f:3b:9b:0c:eb:cb:fe:18:d1:fe:da:eb:7e:25:
59:f6:c3:08:3f:43:57:08:cf:8d:61:86:a8:2e:cb:fe:4f:cb:
55:20:d2:c5:9a:98:12:39:31:82:d5:4f:ef:38:11:34:e5:5f:
5c:c4:0f:d9:7e:84:9b:ee:fb:89:37:3d:43:ff:f8:9e:f8:4d:
e6:c7:6d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:31 2024 by rpki-client on console-fra.rpki-client.org