Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/RzpWwc6CvRL5TPbD1c8U_Qlq_mA.roa
File: RzpWwc6CvRL5TPbD1c8U_Qlq_mA.roa (raw, json)
Hash identifier: 5zyxJPN+P7VpNC/tNzOtRM+uctoRDhyWeW10qRirqco=
Subject key identifier: 47:3A:56:C1:CE:82:BD:12:F9:4C:F6:C3:D5:CF:14:FD:09:6A:FE:60
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 046F6895
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/RzpWwc6CvRL5TPbD1c8U_Qlq_mA.roa
Signing time: Sat 01 Jan 2022 08:57:34 +0000
ROA not before: Sat 01 Jan 2022 08:57:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12722
IP address blocks: 37.252.0.0/23 maxlen: 23
5.45.80.0/22 maxlen: 22
91.193.180.0/22 maxlen: 22
185.4.64.0/22 maxlen: 22
2a02:c6c0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74410133 (0x46f6895)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: Jan 1 08:57:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=473a56c1ce82bd12f94cf6c3d5cf14fd096afe60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:19:a3:b0:ab:8e:a4:15:ed:bb:f3:02:b3:79:
8d:c0:01:bb:21:c3:08:be:bf:ac:25:26:65:cb:1a:
27:a0:92:d8:5b:a7:5d:28:f7:63:92:25:43:7a:2d:
b8:c1:3a:0a:20:96:ac:23:5d:54:1a:57:6b:de:ff:
cb:70:0d:0f:bd:50:19:ca:87:6d:65:3d:d1:b2:1a:
0c:5f:49:3d:0b:fe:d4:d9:04:1c:83:4f:54:d7:1c:
eb:23:a4:07:6a:f5:60:1b:2b:cb:87:13:9b:00:6f:
7c:ec:7e:04:44:53:7b:b5:1e:26:e2:60:a4:d2:9a:
2e:9f:e7:49:4c:db:db:78:a0:70:28:53:62:42:95:
2d:8c:37:52:f6:4c:bb:0b:9a:46:96:28:02:9b:86:
b5:bb:f9:78:28:28:72:2c:12:07:a3:fb:4e:5e:38:
40:dc:9c:d1:f0:34:34:b7:83:60:11:70:08:c8:2a:
58:96:8a:13:b4:4c:5a:73:b8:e7:d4:c1:1e:75:83:
56:27:37:63:62:7c:20:e7:7d:cb:56:ba:3f:af:b3:
93:9a:47:05:4b:7e:32:07:a3:07:77:3a:04:b2:4f:
0d:7f:49:4a:e8:a2:09:fb:5f:9c:81:5f:a5:dc:1b:
73:08:1f:7e:69:18:68:9c:db:2c:15:3d:52:37:68:
9f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3A:56:C1:CE:82:BD:12:F9:4C:F6:C3:D5:CF:14:FD:09:6A:FE:60
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/RzpWwc6CvRL5TPbD1c8U_Qlq_mA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.45.80.0/22
37.252.0.0/23
91.193.180.0/22
185.4.64.0/22
IPv6:
2a02:c6c0::/32
Signature Algorithm: sha256WithRSAEncryption
c1:b5:61:02:7b:2d:4c:08:19:32:9b:d2:a1:8e:51:60:cb:a2:
b3:ff:92:17:35:29:56:37:f2:18:ff:3b:f5:9a:85:15:f5:a6:
9c:e6:00:98:0b:21:8f:9e:95:93:44:aa:83:c7:8b:c2:cc:8b:
c0:e9:53:48:ac:c9:a2:90:26:72:10:5f:a2:ba:60:4b:80:c9:
11:4a:67:22:bc:cc:5a:82:90:98:95:e0:1b:85:32:17:a9:64:
57:5b:a6:13:4e:45:c1:62:ff:be:1f:74:a2:a8:c8:c3:45:2b:
8f:df:ec:e0:ea:41:7d:25:25:7d:72:50:72:f2:7f:87:6b:a3:
5f:42:d6:b9:60:54:74:d5:f8:6e:f6:71:84:9b:08:1d:ba:fd:
d4:85:cf:10:5c:e0:73:5b:ab:40:66:7a:86:d6:de:a9:4c:94:
b2:99:56:44:96:57:ad:bd:9d:85:90:67:09:19:ba:dc:47:55:
a4:d0:ef:46:d2:fa:17:1c:ab:26:71:71:86:62:f8:cd:16:0e:
b5:7d:c6:46:5a:d7:fe:a7:70:3a:9b:b5:94:62:de:16:a0:12:
ad:65:3e:0e:53:18:97:c9:8f:f7:49:39:d5:1b:6a:5d:ef:4d:
eb:5d:90:9e:ed:52:51:43:53:00:ad:9e:63:3d:86:b2:9f:d0:
44:a4:1b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:42 2024 by rpki-client on console-ams.rpki-client.org