Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1ehdNAj5Z3LVBb0ibJn5E00r_AE.roa
File: 1ehdNAj5Z3LVBb0ibJn5E00r_AE.roa (raw, json)
Hash identifier: NZoiEJ1vN69lluaJ9E1iUT4MCiY1pYp1z4DVGXxIe8I=
Subject key identifier: D5:E8:5D:34:08:F9:67:72:D5:05:BD:22:6C:99:F9:13:4D:2B:FC:01
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0183E74F39BEEE22608475B17DBB84837B81
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1ehdNAj5Z3LVBb0ibJn5E00r_AE.roa
Signing time: Mon 17 Oct 2022 18:57:52 +0000
ROA not before: Mon 17 Oct 2022 18:57:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 45.147.50.0/24 maxlen: 24
80.66.198.0/24 maxlen: 24
141.98.199.0/24 maxlen: 24
94.124.118.0/24 maxlen: 24
185.200.65.0/24 maxlen: 24
185.200.67.0/24 maxlen: 24
149.62.45.0/24 maxlen: 24
45.143.232.0/24 maxlen: 24
195.245.229.0/24 maxlen: 24
185.194.55.0/24 maxlen: 24
45.142.124.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:e7:4f:39:be:ee:22:60:84:75:b1:7d:bb:84:83:7b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Oct 17 18:57:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d5e85d3408f96772d505bd226c99f9134d2bfc01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:b9:bd:49:94:1a:04:7b:e5:3d:2e:62:92:
53:4c:33:52:8d:ae:9b:e8:60:95:03:8d:29:02:16:
43:72:c2:f5:5f:1a:9b:12:ab:75:f0:2a:67:a0:0f:
f4:a5:93:4c:35:37:3d:5c:87:38:5e:cc:10:7f:b9:
28:57:59:8c:a1:f5:47:30:82:89:bf:59:d5:95:b2:
68:f7:73:0d:db:63:a9:22:b3:9b:01:44:0b:2a:71:
5f:75:7b:f6:1c:4c:3c:81:2a:2c:07:dd:9e:b7:7d:
56:e6:61:63:a9:b9:19:1e:c0:0f:48:31:99:94:df:
92:58:f2:3c:b5:6e:87:63:b4:35:37:e6:7d:ae:ad:
5c:f2:c8:d3:fb:dd:a7:d5:4c:3b:d5:74:6d:dd:be:
28:d3:e0:a5:27:d4:c0:ee:2d:34:98:02:5b:b3:41:
ea:48:81:2e:06:ff:e7:07:17:5b:a4:d3:79:c2:27:
84:b8:6e:ac:41:4f:bb:55:ab:3a:3a:da:2b:46:3e:
8b:63:9a:94:27:a8:a6:01:b8:90:e8:1f:22:36:44:
a3:97:e7:96:ae:c4:9b:55:54:36:e8:f3:15:ff:68:
46:7a:af:9d:24:a9:e2:ba:a0:14:2a:8d:ad:92:99:
af:17:6b:fb:59:47:61:63:f2:98:e0:58:32:00:88:
bd:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E8:5D:34:08:F9:67:72:D5:05:BD:22:6C:99:F9:13:4D:2B:FC:01
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/1ehdNAj5Z3LVBb0ibJn5E00r_AE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.124.0/24
45.143.232.0/24
45.147.50.0/24
80.66.198.0/24
94.124.118.0/24
141.98.199.0/24
149.62.45.0/24
185.194.55.0/24
185.200.65.0/24
185.200.67.0/24
195.245.229.0/24
Signature Algorithm: sha256WithRSAEncryption
77:4c:c0:ce:d9:54:eb:f0:85:b4:20:f1:03:af:6e:31:75:ed:
4c:e3:58:39:61:40:f1:8d:a1:47:47:2b:1f:cc:18:99:c9:6c:
6a:b2:b4:1b:94:a3:f0:f7:da:eb:fc:2a:32:e6:1d:f8:1d:21:
10:2f:1c:9d:86:fb:c3:58:22:18:b6:2f:82:8f:aa:53:21:b4:
16:c8:eb:17:9a:4b:67:3b:c5:05:ea:f4:31:12:84:a9:50:9a:
58:e1:17:31:97:04:6e:45:e2:32:e8:2a:65:64:2d:84:94:08:
a2:59:c5:b9:24:6d:b8:29:39:92:46:53:c4:fa:ef:4b:d0:93:
be:71:b3:03:ff:00:c1:85:1c:91:11:8a:ea:6e:48:1e:19:22:
23:47:ae:d3:6a:62:e9:ad:83:91:55:98:da:85:ee:12:bc:9c:
4c:6b:cf:f3:df:ac:89:ab:7f:b1:5b:5c:77:7f:2e:93:6a:37:
23:e7:f1:c5:a4:f0:bc:44:b8:0a:67:d3:1d:ba:50:fd:37:fd:
14:ff:9a:62:7b:f3:ea:2c:3f:f5:12:79:39:ee:a3:45:20:80:
51:68:60:4e:b7:44:f7:6c:76:48:7e:8d:aa:08:56:2f:0c:53:
79:4a:d9:b9:5a:76:c9:13:92:e4:41:bb:5d:85:49:60:96:a3:
a4:aa:eb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:47 2024 by rpki-client on console-fra.rpki-client.org