Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/Jg1q31gsAz-xWERQWf-DhyE0D-Q.roa
File: Jg1q31gsAz-xWERQWf-DhyE0D-Q.roa (raw, json)
Hash identifier: au54H64ZaSwFQ5/Csl8IHpiDqfLv3fpx4o8vQun/Qn0=
Subject key identifier: 26:0D:6A:DF:58:2C:03:3F:B1:58:44:50:59:FF:83:87:21:34:0F:E4
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01826BE1E784BC013DABAC29742EB3C7E0CE
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/Jg1q31gsAz-xWERQWf-DhyE0D-Q.roa
Signing time: Fri 05 Aug 2022 02:42:23 +0000
ROA not before: Fri 05 Aug 2022 02:42:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61138
IP address blocks: 45.147.50.0/24 maxlen: 24
80.66.198.0/24 maxlen: 24
185.200.65.0/24 maxlen: 24
185.194.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:6b:e1:e7:84:bc:01:3d:ab:ac:29:74:2e:b3:c7:e0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Aug 5 02:42:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=260d6adf582c033fb158445059ff838721340fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b0:98:a3:88:1b:f5:d5:5c:58:d5:67:c9:e8:
78:83:ea:29:06:5d:b8:63:31:1d:38:be:06:2c:bf:
1a:e8:23:9e:49:04:de:c7:e3:8b:3f:84:05:69:96:
e6:fc:c9:50:60:78:e2:b8:ad:48:e5:23:bd:e4:b3:
31:b6:62:7d:3b:f3:dd:d0:60:ec:70:67:a4:bd:6c:
16:3b:01:d1:17:31:20:25:79:c4:bb:8b:e3:b4:0c:
38:6d:31:2f:dd:42:fb:4f:d4:d8:95:63:78:1e:57:
a1:f2:84:ac:0c:ce:4a:25:48:66:df:d5:4f:fa:d8:
47:80:09:b4:5d:7b:8e:44:58:83:1c:ac:33:58:b6:
94:a7:7c:c8:d0:09:39:be:c7:8f:fd:32:8d:c0:69:
32:36:60:f2:93:b8:7a:87:7a:1f:64:2b:d5:cf:15:
fc:b2:db:a7:20:16:55:7e:d0:26:07:7b:0c:10:64:
35:e1:d6:68:89:d9:bf:da:85:4d:3c:d7:99:2b:06:
a0:44:45:59:38:31:ee:cb:2f:e9:e9:d6:3e:37:6e:
56:59:56:3b:8a:f8:30:c8:f2:29:db:d2:63:d3:b2:
f2:e8:7f:92:d8:f2:90:05:f0:6b:ed:07:c5:8c:73:
b9:b4:fa:eb:a9:96:a3:ed:60:77:08:c7:18:0d:b9:
ec:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:0D:6A:DF:58:2C:03:3F:B1:58:44:50:59:FF:83:87:21:34:0F:E4
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/Jg1q31gsAz-xWERQWf-DhyE0D-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.50.0/24
80.66.198.0/24
185.194.55.0/24
185.200.65.0/24
Signature Algorithm: sha256WithRSAEncryption
19:9e:c0:7e:ce:24:3a:b7:1b:fd:ba:97:d7:88:75:64:1c:9d:
e8:6a:7c:96:29:20:ed:7a:e0:8b:cc:90:bc:08:02:57:49:8a:
df:b9:ad:59:b2:48:e2:5c:32:47:ff:b4:92:c7:82:30:79:8c:
14:34:30:e8:17:b5:81:9c:6a:7f:8c:4b:5b:cc:f3:bc:b0:42:
35:0c:9b:99:82:43:51:9b:48:e2:01:44:00:72:51:68:db:ed:
88:b2:20:90:28:69:0b:5e:5f:35:72:d2:77:f9:31:70:69:49:
a6:8e:da:bc:49:1c:74:35:63:d7:37:78:cd:4e:f6:06:75:5c:
25:e7:8f:14:2c:05:e3:4c:79:9f:29:b2:69:57:1f:b5:5d:86:
f5:4a:ee:9a:d8:99:f4:3b:1f:30:08:d3:ea:57:19:b2:1f:10:
a3:2a:86:4b:b7:3e:0d:2f:03:a6:2b:fe:91:b5:7e:ea:56:28:
2b:4c:34:8c:e3:ea:4c:46:04:58:46:39:94:e9:71:a9:97:a4:
fe:d8:1b:ab:6e:5c:e1:02:18:a6:cf:ca:22:68:b3:1c:5e:73:
5e:58:84:18:af:f9:8c:4d:e6:57:22:39:87:c6:43:c1:80:01:
64:e7:93:30:da:9f:9d:0e:2e:14:9c:77:80:61:9d:d2:ee:f6:
04:55:ba:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-ams.rpki-client.org