Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/b1PNlnZ-FAXLrA5N1FEScTVVa7Q.roa
File: b1PNlnZ-FAXLrA5N1FEScTVVa7Q.roa (raw, json)
Hash identifier: 67cosDnOEfHyvHE/HbBG/snWROOVCMnXj2SvaGQM5HM=
Subject key identifier: 6F:53:CD:96:76:7E:14:05:CB:AC:0E:4D:D4:51:12:71:35:55:6B:B4
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 01837574709B8FA2F43DA287DA255A920C7D
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/b1PNlnZ-FAXLrA5N1FEScTVVa7Q.roa
Signing time: Sun 25 Sep 2022 16:21:48 +0000
ROA not before: Sun 25 Sep 2022 16:21:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 4785
IP address blocks: 45.14.104.0/24 maxlen: 24
45.14.105.0/24 maxlen: 24
45.14.106.0/24 maxlen: 24
45.14.107.0/24 maxlen: 24
45.142.124.0/22 maxlen: 24
45.87.92.0/24 maxlen: 24
45.87.94.0/24 maxlen: 24
45.87.93.0/24 maxlen: 24
45.87.95.0/24 maxlen: 24
149.62.44.0/24 maxlen: 24
185.184.223.0/24 maxlen: 24
45.141.44.0/22 maxlen: 24
45.131.155.0/24 maxlen: 24
45.8.112.0/22 maxlen: 24
194.114.136.0/24 maxlen: 24
195.245.229.0/24 maxlen: 24
195.245.241.0/24 maxlen: 24
195.245.242.0/24 maxlen: 24
194.104.144.0/24 maxlen: 24
194.36.24.0/24 maxlen: 24
185.248.84.0/24 maxlen: 24
185.248.85.0/24 maxlen: 24
45.14.71.0/24 maxlen: 24
45.14.70.0/24 maxlen: 24
45.135.40.0/24 maxlen: 24
45.135.42.0/24 maxlen: 24
45.135.41.0/24 maxlen: 24
45.135.43.0/24 maxlen: 24
45.8.221.0/24 maxlen: 24
45.8.223.0/24 maxlen: 24
45.8.220.0/24 maxlen: 24
45.8.222.0/24 maxlen: 24
91.200.243.0/24 maxlen: 24
91.200.242.0/24 maxlen: 24
193.32.148.0/22 maxlen: 24
45.89.216.0/22 maxlen: 24
2a10:480::/29 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:75:74:70:9b:8f:a2:f4:3d:a2:87:da:25:5a:92:0c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Sep 25 16:21:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f53cd96767e1405cbac0e4dd451127135556bb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:af:98:23:3d:0d:fb:70:1b:7b:e2:ae:0d:1e:
9e:17:b4:ac:67:61:14:d5:b1:0d:c5:82:be:77:ce:
88:4c:ee:f0:b6:32:d0:b7:c7:af:40:e0:26:97:f2:
28:a8:e5:da:bb:b0:a8:e2:4d:c2:f6:14:d3:6d:d7:
67:86:49:49:e6:eb:8d:23:a7:0f:a4:ca:3e:04:53:
ec:fa:8a:f0:10:ba:d2:6e:fd:a0:52:08:33:30:9f:
b8:9c:b8:84:bf:d4:d4:e7:28:a4:b8:3d:3c:4f:d7:
43:a3:ce:29:ce:53:2c:50:d4:1e:95:d7:31:a5:eb:
83:97:fd:d6:f3:97:1e:7b:a6:b9:24:5d:64:57:b3:
7d:66:b6:55:70:cc:fc:39:14:13:f2:e4:f6:13:8f:
55:9d:19:6a:09:b9:19:25:4a:ef:19:19:be:80:af:
24:7b:3c:a2:16:c0:5f:92:05:8c:6f:42:bc:f7:fe:
3b:f9:22:28:e1:0e:8f:96:73:1b:bb:fb:fd:2d:a8:
34:18:b3:1e:41:a0:1e:a1:dc:e0:41:40:29:ea:81:
c4:48:d8:96:77:44:89:fd:7f:d5:35:95:7d:44:38:
53:3d:c6:eb:71:16:e2:82:ae:dd:87:bb:9b:9b:a3:
24:d5:e6:36:7d:c2:9c:bb:94:38:a2:78:34:5e:64:
d6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:53:CD:96:76:7E:14:05:CB:AC:0E:4D:D4:51:12:71:35:55:6B:B4
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/b1PNlnZ-FAXLrA5N1FEScTVVa7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.112.0/22
45.8.220.0/22
45.14.70.0/23
45.14.104.0/22
45.87.92.0/22
45.89.216.0/22
45.131.155.0/24
45.135.40.0/22
45.141.44.0/22
45.142.124.0/22
91.200.242.0/23
149.62.44.0/24
185.184.223.0/24
185.248.84.0/23
193.32.148.0/22
194.36.24.0/24
194.104.144.0/24
194.114.136.0/24
195.245.229.0/24
195.245.241.0-195.245.242.255
IPv6:
2a10:480::/29
Signature Algorithm: sha256WithRSAEncryption
51:bf:0e:c8:e7:14:6a:bf:d9:3f:d5:d7:23:32:d3:74:6b:bc:
d1:df:e3:1c:7a:8e:bd:e4:27:5a:f5:65:c6:b6:c0:4f:f3:ba:
4a:ee:7f:a7:d4:ad:ca:27:dc:25:7a:bf:9a:83:6a:bc:5a:3a:
e1:4a:4c:bd:38:bf:f4:95:0a:0a:6d:90:a9:dd:50:fa:10:83:
12:ec:39:1b:68:0a:08:c9:0a:41:46:7f:f1:51:5c:e0:2a:74:
ef:e2:83:d4:ca:55:be:bb:31:2d:4a:bc:ca:2e:d3:de:3b:0f:
db:2a:cc:d1:f7:32:50:00:1c:54:97:25:d4:ab:8a:43:60:f5:
ea:95:3f:1d:1c:e0:78:f1:f1:e4:2a:13:bd:1e:de:17:ac:4a:
5d:60:60:f0:17:36:87:25:11:9e:7d:dc:61:75:2e:49:a2:76:
2f:d5:0a:22:b2:22:53:9a:3c:d1:de:da:74:eb:05:84:e0:70:
8d:ef:69:f7:16:9f:07:31:af:9f:49:77:44:79:53:7c:c2:16:
eb:89:dd:21:8a:9c:5e:ab:cb:9f:f5:2d:02:0c:30:60:9d:82:
dc:06:16:a3:ce:2b:e8:58:e5:6b:4e:83:6b:a4:fe:40:55:c0:
9f:88:fd:ae:a2:97:e5:d4:20:40:83:0d:c6:81:ac:3f:da:bb:
aa:a5:8f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:59 2023 by rpki-client on console-fra.rpki-client.org