Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/tXZRRa3NvE7bzrQhaCGCl_I-wRs.roa
File: tXZRRa3NvE7bzrQhaCGCl_I-wRs.roa (raw, json)
Hash identifier: MhJ4EofG2JZ6BTuPKQ+HGVoHjYZJAY8bk+dL9+UV/PE=
Subject key identifier: B5:76:51:45:AD:CD:BC:4E:DB:CE:B4:21:68:21:82:97:F2:3E:C1:1B
Certificate issuer: /CN=3aba1172472ea80265d12982967de0a8b0bc5901
Certificate serial: 17804655
Authority key identifier: 3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/tXZRRa3NvE7bzrQhaCGCl_I-wRs.roa
Signing time: Fri 14 Jan 2022 15:08:42 +0000
ROA not before: Fri 14 Jan 2022 15:08:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201942
IP address blocks: 185.58.196.0/22 maxlen: 22
185.119.112.0/22 maxlen: 22
195.184.72.0/24 maxlen: 24
45.130.16.0/22 maxlen: 22
46.226.144.0/21 maxlen: 21
195.182.205.0/24 maxlen: 24
193.46.216.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 394282581 (0x17804655)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba1172472ea80265d12982967de0a8b0bc5901
Validity
Not Before: Jan 14 15:08:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b5765145adcdbc4edbceb42168218297f23ec11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ba:bc:e8:6c:7e:c1:d3:17:95:18:61:87:5f:
43:08:14:1e:d5:ca:55:73:4a:9e:8c:f8:ca:e5:ee:
38:4e:0b:ee:5b:51:4b:11:08:45:93:58:7a:90:43:
92:5d:16:ca:3f:44:d3:ca:f4:e1:f7:17:e6:3c:21:
13:e6:8a:b4:28:eb:2b:2a:a8:bb:16:65:a3:c8:21:
e5:5a:4a:7f:b8:d6:36:6b:0c:1f:49:21:33:aa:58:
13:f3:77:cf:57:91:32:96:ef:8d:42:48:2e:21:1c:
c9:ca:c7:8c:32:11:3d:5e:48:89:04:80:bc:ac:58:
0a:fe:bb:61:e8:e1:01:5e:d8:64:0c:11:21:96:5e:
35:9e:aa:8d:46:6b:cb:d9:21:29:ba:4d:0f:cb:cc:
80:a3:fe:c8:66:cc:ce:2c:17:9b:06:7c:38:c9:90:
c3:de:88:fc:11:6f:5e:b0:90:54:f1:3c:1b:4b:75:
0c:33:bb:ad:fe:fa:5e:bd:ae:52:dc:4e:c7:c9:6a:
42:a4:bf:a8:55:aa:2e:e4:0b:67:ff:a5:a2:8f:df:
e5:5a:db:85:bd:15:a2:7f:ea:ca:e1:94:74:ab:26:
11:fb:29:5a:2b:f4:9f:d3:90:33:fd:39:7c:bd:9c:
5e:78:1c:7a:ec:f0:da:ba:60:6b:d2:bc:05:06:43:
cc:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:76:51:45:AD:CD:BC:4E:DB:CE:B4:21:68:21:82:97:F2:3E:C1:1B
X509v3 Authority Key Identifier:
keyid:3A:BA:11:72:47:2E:A8:02:65:D1:29:82:96:7D:E0:A8:B0:BC:59:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OroRckcuqAJl0SmCln3gqLC8WQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/tXZRRa3NvE7bzrQhaCGCl_I-wRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7b1c55-ddd0-4281-8378-4dd04346abc3/1/OroRckcuqAJl0SmCln3gqLC8WQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.16.0/22
46.226.144.0/21
185.58.196.0/22
185.119.112.0/22
193.46.216.0/24
195.182.205.0/24
195.184.72.0/24
Signature Algorithm: sha256WithRSAEncryption
36:95:b0:99:d7:4b:b6:42:c1:16:a5:93:f3:2e:dc:fb:7e:3e:
c1:26:a2:5e:73:ff:88:93:88:22:ab:b5:7b:de:ae:35:ea:f0:
7f:2b:8b:19:77:76:29:95:65:44:b7:64:12:f0:93:e6:15:9a:
52:14:d9:47:65:44:b8:f9:87:99:b7:d3:38:1f:f9:72:56:87:
a4:5c:aa:e6:6f:99:58:aa:b6:a0:2b:ce:b0:c4:59:16:57:f2:
12:97:47:06:ff:fb:73:90:48:53:1f:24:35:4e:bf:a0:9c:45:
bc:0d:b8:e8:bf:6f:3b:aa:63:e8:23:20:be:cd:ef:15:6f:da:
86:ef:67:12:21:46:3e:e0:d0:58:b5:fa:51:58:7e:a6:a2:de:
63:11:18:d7:98:b2:31:d2:fa:25:14:6c:08:90:77:8c:0f:81:
2d:87:d5:35:41:0a:cc:ed:96:9d:47:54:09:c2:ad:dc:1f:a6:
b0:8c:0c:8a:6f:38:67:8c:ee:6c:e0:46:e1:9e:eb:46:6d:32:
d2:91:ff:a1:81:a9:af:c9:af:20:f3:2d:e9:d9:1a:53:d5:a0:
26:94:18:84:48:0e:37:52:8d:11:e3:47:0d:68:ba:ae:13:47:
42:af:c7:cd:6b:01:1a:16:d5:51:c6:1b:86:d1:b3:c7:39:ec:
71:f6:44:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:04 2024 by rpki-client on console-ams.rpki-client.org