Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/TS4dejpDprQZybzYtQX2E5W5fpI.roa
File: TS4dejpDprQZybzYtQX2E5W5fpI.roa (raw, json)
Hash identifier: KXKM0XAIawF0O2U2IB9j7TFNp6Zs8Ogo91+j6ETR31s=
Subject key identifier: 4D:2E:1D:7A:3A:43:A6:B4:19:C9:BC:D8:B5:05:F6:13:95:B9:7E:92
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0184B95ED7417ABB368B8186123F2BB3B67B
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/TS4dejpDprQZybzYtQX2E5W5fpI.roa
Signing time: Sun 27 Nov 2022 13:55:11 +0000
ROA not before: Sun 27 Nov 2022 13:55:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9312
IP address blocks: 149.62.46.0/24 maxlen: 24
45.90.210.0/24 maxlen: 24
45.90.208.0/24 maxlen: 24
149.62.47.0/24 maxlen: 24
45.90.211.0/24 maxlen: 24
45.90.209.0/24 maxlen: 24
194.36.243.0/24 maxlen: 24
95.214.165.0/24 maxlen: 24
95.214.164.0/24 maxlen: 24
194.169.55.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:b9:5e:d7:41:7a:bb:36:8b:81:86:12:3f:2b:b3:b6:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Nov 27 13:55:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d2e1d7a3a43a6b419c9bcd8b505f61395b97e92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6b:20:d5:f6:46:7c:64:35:f6:9b:96:b8:74:
ae:7b:b2:1d:e0:a7:14:5e:a4:28:10:38:d7:89:79:
37:12:34:43:c5:04:0f:30:89:fb:44:13:1b:43:ef:
c7:e8:38:7c:bd:b8:bc:c0:74:64:a5:eb:62:7a:33:
60:f1:bd:7f:ad:f3:2c:cd:00:e1:b6:79:9a:fa:bc:
e7:13:68:cb:c9:76:4c:d6:ac:a4:4a:73:ca:17:42:
76:3e:7f:e7:d2:ab:9b:4f:72:f5:7c:3c:25:81:7b:
27:90:45:1b:2c:c3:70:71:81:b6:e7:a3:cc:f2:c1:
8c:6f:b7:ad:bd:36:1d:4c:61:b7:b5:8f:2f:ff:c8:
2a:a4:fd:56:62:b5:29:e0:00:ab:8a:b6:f4:54:7e:
c2:68:40:26:6d:85:e4:77:0a:b8:f9:33:7a:1e:ea:
2c:b5:3c:46:9e:e8:d2:1b:02:02:c9:a9:9f:af:3d:
75:f2:2a:f8:4d:23:52:b5:db:39:f2:88:4d:55:14:
03:12:08:a1:a2:88:57:cb:06:74:28:b4:bd:c7:69:
9f:b7:3c:61:b9:6f:f6:52:06:9a:98:91:c8:2b:d4:
78:8b:6e:a9:9f:d8:55:90:0f:f4:3e:c5:c7:cc:15:
2e:2a:44:6c:ee:24:0e:e2:29:82:48:99:a5:3e:cf:
3a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2E:1D:7A:3A:43:A6:B4:19:C9:BC:D8:B5:05:F6:13:95:B9:7E:92
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/TS4dejpDprQZybzYtQX2E5W5fpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.208.0/22
95.214.164.0/23
149.62.46.0/23
194.36.243.0/24
194.169.55.0/24
Signature Algorithm: sha256WithRSAEncryption
84:9f:03:a5:93:9e:06:70:7d:2e:ba:ef:8a:17:e1:c2:0c:9a:
35:fd:2a:cd:bc:57:d1:27:05:57:73:58:22:9d:db:b5:1e:29:
49:67:78:58:e8:cd:56:61:ea:5a:79:87:c0:2f:f4:84:4b:30:
8d:91:07:0c:04:d6:74:4e:2e:19:92:df:b6:c5:e9:3c:6e:63:
41:b3:c0:88:d7:85:77:a7:5f:46:69:a8:8e:50:52:10:20:3e:
15:20:63:9b:f8:0e:a7:78:db:e4:d5:2d:ed:dc:4c:f2:f3:a0:
30:ba:af:f7:4f:40:20:48:66:ee:f5:77:d7:81:9c:ba:d9:95:
a4:0f:7d:fc:ed:39:e2:84:c0:5a:07:92:7d:fa:64:ee:3b:44:
70:18:63:27:84:45:7e:d4:61:21:a5:3e:4e:91:91:c3:f7:a4:
5c:5d:5b:7b:e5:1a:71:03:da:80:4b:ac:77:c6:da:3c:7c:e8:
3a:28:95:15:24:12:62:b3:16:f6:13:7c:71:63:04:37:63:56:
59:c8:b1:0f:ac:c2:8e:13:f8:c3:4a:cd:84:df:84:c8:06:0e:
b1:ba:5d:e8:17:b4:86:da:8b:9b:fb:75:e4:e9:50:44:34:ba:
97:ee:5c:05:a6:f1:91:b8:ff:fe:cc:fd:17:7a:c0:5b:21:36:
ac:93:c5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:36 2023 by rpki-client on console-ams.rpki-client.org