Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/eignguncWnivLKcNT8OH8SmsExM.roa
File: eignguncWnivLKcNT8OH8SmsExM.roa (raw, json)
Hash identifier: 14DeCZVdgNqZCqYv+22HPpk4tObokp19KdX4L3zr3I8=
Subject key identifier: 7A:28:27:82:E9:DC:5A:78:AF:2C:A7:0D:4F:C3:87:F1:29:AC:13:13
Certificate issuer: /CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Certificate serial: 018570CBD6C03E15AD5107007E008CD15E66
Authority key identifier: 85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/eignguncWnivLKcNT8OH8SmsExM.roa
Signing time: Mon 02 Jan 2023 04:44:45 +0000
ROA not before: Mon 02 Jan 2023 04:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57814
IP address blocks: 45.138.44.0/24 maxlen: 32
45.138.44.0/22 maxlen: 32
185.110.93.0/24 maxlen: 32
45.138.45.0/24 maxlen: 32
45.138.47.0/24 maxlen: 32
195.69.140.0/22 maxlen: 32
45.138.46.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:cb:d6:c0:3e:15:ad:51:07:00:7e:00:8c:d1:5e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=856f0c90073afb8ecde7e83409ceabdb93b41a4e
Validity
Not Before: Jan 2 04:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a282782e9dc5a78af2ca70d4fc387f129ac1313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:46:a3:8e:f7:5b:33:29:0d:44:7f:11:8d:81:
09:30:8c:72:ff:63:90:fa:8e:fb:b2:37:82:a2:5f:
6d:4a:3b:9c:c3:06:4c:9c:7d:db:14:eb:b4:20:ed:
a2:88:c4:fb:e8:ac:a6:ce:e2:75:1f:5a:9b:0a:a4:
18:3f:69:c1:a7:f6:fb:17:fb:b5:cd:28:ef:06:54:
32:57:3e:0d:0e:f9:c1:27:35:f4:b0:46:66:31:ca:
d0:c8:61:a8:02:32:71:c1:c9:f8:46:7b:2a:7f:61:
10:bb:2b:b0:48:f3:bc:c0:3a:77:cb:83:24:db:ee:
8f:c1:b5:e5:c1:ad:3f:06:a3:cf:93:cb:42:28:98:
f4:c2:4e:d2:fb:25:96:02:ff:d6:f2:b6:ca:13:81:
01:ab:89:8e:87:83:c4:9c:2b:23:62:ee:38:86:e4:
39:dc:90:dc:94:28:95:c3:0e:ca:58:55:3d:ca:e5:
41:fa:1d:5b:c2:82:07:06:a7:03:f7:f8:ae:41:c9:
7a:d8:5e:8e:6b:27:99:d8:21:1e:39:9f:e7:81:63:
8c:87:9b:85:1c:25:14:3c:52:81:9e:36:d4:cb:f4:
80:be:58:67:dc:0d:4d:4f:00:2c:25:06:ff:67:c2:
76:94:7e:41:78:45:96:71:83:2b:e0:3a:42:15:da:
ff:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:28:27:82:E9:DC:5A:78:AF:2C:A7:0D:4F:C3:87:F1:29:AC:13:13
X509v3 Authority Key Identifier:
keyid:85:6F:0C:90:07:3A:FB:8E:CD:E7:E8:34:09:CE:AB:DB:93:B4:1A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hW8MkAc6-47N5-g0Cc6r25O0Gk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/eignguncWnivLKcNT8OH8SmsExM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/204268-6078-4b53-94d2-44fde96b8aec/1/hW8MkAc6-47N5-g0Cc6r25O0Gk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.44.0/22
185.110.93.0/24
195.69.140.0/22
Signature Algorithm: sha256WithRSAEncryption
77:17:67:6a:55:96:96:0e:65:39:43:f2:f1:3e:eb:cd:d0:6d:
bc:e7:f0:3f:ca:1e:7b:b6:80:ec:be:5d:5d:88:37:2a:ab:cb:
3a:ea:35:8d:3f:c7:bf:ac:6f:89:d1:8c:23:27:f3:05:45:93:
50:c1:3a:f9:3d:f1:00:fa:47:24:c9:b9:8e:f9:a4:6b:1c:d3:
49:e4:54:e3:74:04:d8:eb:b9:b3:9f:17:7f:fd:c8:80:ad:ee:
bd:d0:32:15:e8:d9:13:02:e4:07:a7:69:6d:78:ca:eb:b5:46:
f1:39:d2:f2:07:71:6c:05:66:53:ae:e5:20:d1:d6:0b:a0:b9:
83:56:28:94:9a:6a:97:07:ae:e5:1f:79:98:99:8f:a3:3f:bb:
05:a0:f9:6f:35:e8:9e:ad:7b:d9:ed:5b:31:59:43:4e:c6:8a:
8d:81:fa:57:55:a1:c3:e1:4e:a0:7d:1b:bd:9a:92:55:25:8f:
04:dc:2d:75:33:ac:de:ab:49:fa:a3:b9:86:83:b6:61:2c:2a:
68:a6:56:2d:5b:2e:fa:67:59:05:2f:19:b2:78:76:e7:2f:8a:
30:41:67:75:86:a7:33:c5:f5:79:72:69:83:46:c5:34:2e:49:
89:8e:fa:40:05:af:2a:2e:ae:18:54:19:b8:aa:07:81:93:4d:
93:ba:30:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:50 2025 by rpki-client