Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/2HT37fYwHMCMIEjgvlDn8BxMcO8.roa
File: 2HT37fYwHMCMIEjgvlDn8BxMcO8.roa (raw, json)
Hash identifier: yd3t2gEJnohX24IjDmVUdMIC8Ie9AYYgj+W0ruG8di0=
Subject key identifier: D8:74:F7:ED:F6:30:1C:C0:8C:20:48:E0:BE:50:E7:F0:1C:4C:70:EF
Certificate issuer: /CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Certificate serial: 01855B2F452DA899561C8D7F82B844350A36
Authority key identifier: F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/2HT37fYwHMCMIEjgvlDn8BxMcO8.roa
Signing time: Thu 29 Dec 2022 00:01:42 +0000
ROA not before: Thu 29 Dec 2022 00:01:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55002
IP address blocks: 45.82.106.0/24 maxlen: 24
45.82.107.0/24 maxlen: 24
185.16.89.0/24 maxlen: 24
185.16.88.0/24 maxlen: 24
185.16.90.0/24 maxlen: 24
185.16.91.0/24 maxlen: 24
86.104.226.0/24 maxlen: 24
91.235.107.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5b:2f:45:2d:a8:99:56:1c:8d:7f:82:b8:44:35:0a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Validity
Not Before: Dec 29 00:01:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d874f7edf6301cc08c2048e0be50e7f01c4c70ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:05:b1:df:ee:6b:c8:47:e6:c6:30:03:6a:d5:
43:b6:8c:6a:7d:fe:15:ff:5a:d9:45:ff:92:d0:3f:
55:ac:68:83:e7:d4:7d:f1:31:5b:a0:8b:9b:6d:8a:
2a:9a:cf:cc:d3:bf:d3:16:0a:17:46:e5:b0:93:35:
f8:c7:ad:ff:3d:0c:1c:ca:ed:9a:29:32:ec:5c:40:
74:6b:48:a0:d6:a6:b2:37:1f:45:f9:7a:00:8b:df:
7d:06:cc:9b:05:6e:4b:75:d1:be:d7:a1:c0:2e:96:
dd:d2:6b:b1:e1:29:0b:90:8a:02:1a:15:60:7b:b7:
eb:19:7c:2a:48:24:41:e0:ba:38:10:8d:28:90:e1:
4b:8c:26:dd:91:79:56:76:67:eb:34:5a:60:2c:e6:
5f:50:6a:c7:c0:68:4f:b6:49:68:ab:bb:6a:64:e3:
9c:ae:8c:12:79:b0:f3:85:bc:c1:fe:47:d8:93:f7:
52:71:69:d4:72:c5:14:5d:1a:70:b8:71:e5:36:48:
04:68:35:44:5a:94:bb:67:b6:01:4d:bb:a5:e7:3f:
9a:95:84:d0:91:9e:20:21:c3:74:74:bf:5d:c9:54:
a5:2a:7a:66:86:17:95:2b:57:ff:03:3c:5a:89:49:
1a:a3:4b:53:01:bb:7b:d4:c0:0b:54:26:00:2c:ee:
c1:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:74:F7:ED:F6:30:1C:C0:8C:20:48:E0:BE:50:E7:F0:1C:4C:70:EF
X509v3 Authority Key Identifier:
keyid:F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/2HT37fYwHMCMIEjgvlDn8BxMcO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.106.0/23
86.104.226.0/24
91.235.107.0/24
185.16.88.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:ce:f5:8a:66:04:85:2f:68:db:e2:0c:1c:ee:30:68:80:6a:
68:c0:ee:8e:2f:f8:49:c5:c5:ad:18:81:b1:09:c8:a7:8f:4f:
08:fc:23:7e:93:80:53:69:15:74:9f:df:53:c7:2f:b4:b5:1e:
76:a9:a4:f1:e5:dc:b5:b8:34:e9:af:c8:5e:15:5a:71:c9:ee:
17:eb:22:e6:f3:b8:de:71:e6:21:d2:58:67:99:c5:81:d0:d4:
81:23:80:1e:e9:e7:c5:98:4a:e3:66:33:23:9b:c9:82:2a:91:
fa:01:44:54:f8:b2:00:e0:54:7a:d1:5a:e1:ee:f9:99:88:d4:
93:cd:58:ad:0f:a9:81:8b:98:2b:86:31:a9:f3:b7:8e:06:c0:
71:36:52:fa:4f:e9:3a:bc:5f:11:9a:2b:fd:e1:c1:90:5a:f1:
27:43:bd:03:1e:3c:d6:06:85:e4:80:24:3c:24:b2:e3:ea:a3:
fb:55:69:8c:90:d0:38:ac:b3:7d:20:b6:60:84:db:bf:b6:34:
4b:0c:6e:53:13:44:d2:c7:56:d3:b6:53:ed:c2:26:c2:c2:01:
2d:fb:03:d3:d7:47:42:57:8b:b6:cc:93:67:ed:99:fe:49:06:
fa:ad:c3:c8:25:30:5f:d5:f3:e0:87:b4:81:57:79:4c:42:b8:
f5:12:4a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:12 2023 by rpki-client on console-ams.rpki-client.org