Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/CEkrzEDE_CHgzNETtWaVbpHfKdE.roa
File: CEkrzEDE_CHgzNETtWaVbpHfKdE.roa (raw, json)
Hash identifier: g5WYGhp2sVIUczhNAZK5wzWSZpMj2vNnn7LX4SdM5h8=
Subject key identifier: 08:49:2B:CC:40:C4:FC:21:E0:CC:D1:13:B5:66:95:6E:91:DF:29:D1
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01854F928A3FFA979E26CC2DE56DD2DD5EAC
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/CEkrzEDE_CHgzNETtWaVbpHfKdE.roa
Signing time: Mon 26 Dec 2022 17:54:41 +0000
ROA not before: Mon 26 Dec 2022 17:54:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 6233
IP address blocks: 80.66.196.0/24 maxlen: 24
141.98.196.0/22 maxlen: 24
45.11.45.0/24 maxlen: 24
94.124.116.0/22 maxlen: 24
185.200.64.0/22 maxlen: 24
194.36.242.0/24 maxlen: 24
195.245.219.0/24 maxlen: 24
45.139.193.0/24 maxlen: 24
185.184.222.0/24 maxlen: 24
45.13.197.0/24 maxlen: 24
45.13.196.0/22 maxlen: 24
45.13.196.0/24 maxlen: 24
45.130.20.0/22 maxlen: 24
79.143.140.0/22 maxlen: 24
45.87.164.0/22 maxlen: 24
195.245.242.0/24 maxlen: 24
45.87.164.0/24 maxlen: 24
195.245.241.0/24 maxlen: 24
194.104.152.0/22 maxlen: 24
45.147.48.0/22 maxlen: 24
45.153.244.0/22 maxlen: 24
194.36.24.0/24 maxlen: 24
45.143.232.0/22 maxlen: 24
45.143.233.0/24 maxlen: 24
185.248.87.0/24 maxlen: 24
45.143.235.0/24 maxlen: 24
45.143.234.0/24 maxlen: 24
194.169.54.0/24 maxlen: 24
194.169.54.0/23 maxlen: 24
185.194.52.0/22 maxlen: 24
185.222.216.0/21 maxlen: 24
2a09::/29 maxlen: 48
2a0d:c7c0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:4f:92:8a:3f:fa:97:9e:26:cc:2d:e5:6d:d2:dd:5e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Dec 26 17:54:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=08492bcc40c4fc21e0ccd113b566956e91df29d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1d:ee:46:f5:2a:c5:84:c3:01:c8:bd:81:36:
a9:dd:74:44:f6:76:c5:20:77:dc:60:ac:e2:66:e1:
b4:9c:78:0e:f7:5e:39:b7:cc:4f:17:a8:df:fd:fc:
94:1c:63:97:e4:27:cb:d6:48:68:12:65:02:9a:c8:
a1:19:f9:d8:d3:b3:7f:b3:62:f0:d4:d6:09:8c:99:
62:e5:f6:d2:e7:71:38:15:43:0a:4c:50:4e:32:61:
d0:02:8b:ac:37:59:f9:b7:c8:e1:c3:1a:6c:85:d0:
5c:3f:51:be:25:ae:f3:3c:7c:b9:cb:9f:8d:d5:91:
3e:18:78:f4:83:77:c6:26:3a:85:24:5a:7e:27:6f:
5b:4b:a6:1f:65:fb:75:9f:56:0c:f8:3f:46:0f:20:
91:50:ec:23:d2:c6:67:6d:1f:15:f2:f2:4b:c4:97:
11:46:e5:2a:f0:63:66:f1:ec:eb:6d:84:f7:13:19:
b6:df:78:9c:a8:49:97:b5:f7:1d:f1:76:18:9d:e3:
4a:be:45:45:2e:ae:33:92:89:3d:68:e9:f6:8e:ae:
3b:8c:b4:61:fa:1a:85:c2:75:a8:9e:5e:77:47:42:
93:4d:7c:04:69:a6:65:95:e2:8d:0e:ff:5e:8f:87:
1a:c4:e1:5f:8e:8f:94:48:16:c1:e4:4b:53:22:3b:
1d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:49:2B:CC:40:C4:FC:21:E0:CC:D1:13:B5:66:95:6E:91:DF:29:D1
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/CEkrzEDE_CHgzNETtWaVbpHfKdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.45.0/24
45.13.196.0/22
45.87.164.0/22
45.130.20.0/22
45.139.193.0/24
45.143.232.0/22
45.147.48.0/22
45.153.244.0/22
79.143.140.0/22
80.66.196.0/24
94.124.116.0/22
141.98.196.0/22
185.184.222.0/24
185.194.52.0/22
185.200.64.0/22
185.222.216.0/21
185.248.87.0/24
194.36.24.0/24
194.36.242.0/24
194.104.152.0/22
194.169.54.0/23
195.245.219.0/24
195.245.241.0-195.245.242.255
IPv6:
2a09::/29
2a0d:c7c0::/32
Signature Algorithm: sha256WithRSAEncryption
49:bf:69:f8:df:d1:2e:06:d6:75:00:09:c7:bd:ee:21:77:ec:
9a:62:a9:6a:d0:45:a3:0d:bc:d7:78:a0:cd:67:5c:99:6a:63:
7a:9e:08:42:7d:96:fe:05:98:bf:98:b3:36:55:b8:d5:68:fa:
02:90:41:a5:e2:38:29:99:8b:46:41:08:c6:5c:4f:ce:99:ec:
56:e8:c1:8f:58:44:b3:bf:50:f7:d7:b3:2f:25:e4:aa:08:09:
d1:aa:e1:c0:7e:89:a1:b0:f2:d6:75:19:48:06:59:5f:3b:7e:
72:1e:75:7f:c6:94:9c:8c:3f:cd:9c:9c:c1:bc:2d:57:45:c3:
f5:0b:7a:53:1c:46:26:9a:e7:63:df:24:57:9e:db:d9:bb:e1:
94:74:bf:26:32:94:5a:9c:a6:cf:c4:70:27:e9:65:38:13:c9:
54:f6:5f:30:53:50:2f:41:2e:b5:52:27:97:cf:52:32:c7:e2:
48:2e:80:06:73:62:d6:64:a1:47:76:e5:8c:da:28:10:b1:29:
a1:4d:d9:ae:95:ad:c5:89:c2:a4:0a:54:64:06:18:96:cf:c0:
07:be:40:34:3e:e9:26:f9:f7:64:67:b8:49:53:91:eb:19:0f:
74:0d:ed:7a:ee:2d:65:31:b9:e3:7b:c1:6b:b0:81:29:e6:86:
77:28:ba:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:46 2024 by rpki-client on console-ams.rpki-client.org