Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/cfEomVaKkBaODoOD9RYb7-PlFH0.roa
File: cfEomVaKkBaODoOD9RYb7-PlFH0.roa (raw, json)
Hash identifier: APkVXvW1LjBkQbVpquenJNNUV+cPhLESpIr+XPXGy/Q=
Subject key identifier: 71:F1:28:99:56:8A:90:16:8E:0E:83:83:F5:16:1B:EF:E3:E5:14:7D
Certificate issuer: /CN=33954330349f57502a76ae6e99987efc3e3b8109
Certificate serial: 411CF503
Authority key identifier: 33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/cfEomVaKkBaODoOD9RYb7-PlFH0.roa
Signing time: Fri 03 Jun 2022 06:22:20 +0000
ROA not before: Fri 03 Jun 2022 06:22:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198330
IP address blocks: 185.55.96.0/22 maxlen: 24
185.104.172.0/22 maxlen: 24
185.128.64.0/22 maxlen: 24
45.12.224.0/22 maxlen: 24
134.90.136.0/21 maxlen: 24
45.10.180.0/22 maxlen: 24
2a03:c280::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1092416771 (0x411cf503)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33954330349f57502a76ae6e99987efc3e3b8109
Validity
Not Before: Jun 3 06:22:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71f12899568a90168e0e8383f5161befe3e5147d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b7:4f:d9:bb:9e:a2:d1:13:e1:31:d3:38:8d:
a9:9b:85:10:1c:e3:62:23:98:37:4b:9b:d5:12:78:
1d:ac:e2:b8:4f:66:70:65:c5:0d:8a:73:e0:08:90:
bd:ae:3e:c2:4d:5a:a2:fc:c8:20:de:bd:10:18:af:
f9:c3:a2:1d:0a:72:3b:13:86:ab:b5:ab:8d:40:50:
f7:cb:fc:64:a1:16:8b:26:0e:e2:8f:7a:0d:08:12:
cc:9a:d4:31:b3:37:76:bc:c0:01:aa:51:63:1a:40:
ec:5c:49:96:ed:bb:77:0d:fb:22:8b:90:f6:5e:7f:
e4:b2:0d:02:e5:21:02:33:91:71:b1:35:10:e3:9e:
80:89:c6:c9:c7:2b:1b:a8:33:84:76:66:1e:52:42:
5b:bb:70:48:27:d2:08:2b:28:38:4a:41:49:cf:8c:
96:f7:0a:08:de:46:fe:21:cf:0e:63:30:2b:b6:9b:
22:02:c3:f4:bc:ce:bb:1c:91:1d:ee:f0:b4:e1:50:
06:e6:39:78:a3:06:62:3f:c1:f1:44:52:27:82:c3:
d5:da:e7:e9:a3:1a:08:b6:96:65:8a:e5:0a:7e:23:
a2:f3:1f:a8:e8:69:1b:9a:6e:8b:77:76:b7:cd:f8:
d5:21:c2:30:04:f0:4a:e7:82:4b:6b:54:e4:23:e4:
27:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:F1:28:99:56:8A:90:16:8E:0E:83:83:F5:16:1B:EF:E3:E5:14:7D
X509v3 Authority Key Identifier:
keyid:33:95:43:30:34:9F:57:50:2A:76:AE:6E:99:98:7E:FC:3E:3B:81:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5VDMDSfV1Aqdq5umZh-_D47gQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/cfEomVaKkBaODoOD9RYb7-PlFH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/0f19e9-1b2b-4812-ab5a-fdf84f83a274/1/M5VDMDSfV1Aqdq5umZh-_D47gQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.180.0/22
45.12.224.0/22
134.90.136.0/21
185.55.96.0/22
185.104.172.0/22
185.128.64.0/22
IPv6:
2a03:c280::/32
Signature Algorithm: sha256WithRSAEncryption
64:90:c1:d0:79:c8:d8:ae:3b:9a:e8:1f:22:7a:20:5a:82:a6:
4c:1d:19:7a:53:bf:8e:5b:51:ac:73:fa:7a:81:15:fd:c4:66:
e0:64:d0:7f:ea:f6:ee:bd:82:fb:a0:ea:29:ae:d2:31:9d:c8:
75:d7:68:72:ef:c1:c4:bf:11:c9:43:53:79:98:5f:15:91:9d:
34:3f:fc:79:d7:00:27:30:c8:2a:ce:a1:3a:57:80:17:c8:09:
e9:95:b0:3a:57:50:8a:51:8c:8a:49:f1:c7:49:50:54:2d:82:
01:dd:30:05:8a:6f:b9:43:34:fa:23:33:1f:cf:aa:bd:c3:7e:
23:e7:01:88:ee:f8:9d:21:33:dc:37:69:4a:f0:d9:15:e3:cd:
36:75:d9:2b:d2:a3:6c:86:c0:f6:45:8f:b5:48:04:af:2d:32:
a5:6a:5e:72:d9:1b:19:1e:20:44:78:3e:51:cc:02:2a:68:d8:
90:90:1d:ef:a4:34:0b:7a:3e:45:e4:f5:bf:a3:ff:80:8d:78:
69:39:28:08:d4:68:fa:6e:5a:c6:cf:03:39:e8:c7:ef:8c:9e:
39:dc:bf:4d:db:3c:f6:57:ab:a9:7c:04:d3:8c:e3:a3:d1:ae:
7d:78:3c:2e:01:c3:7e:01:92:0c:90:93:38:be:15:15:fb:42:
68:84:8c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:25 2024 by rpki-client on console-fra.rpki-client.org