Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/t7u0AyP_wJ8v-MesNdOd0ceZYgA.roa
File: t7u0AyP_wJ8v-MesNdOd0ceZYgA.roa (raw, json)
Hash identifier: cIUmnljP9vo/0uCtzRVGfemkxnPVdeaIkz8mbX21ozk=
Subject key identifier: B7:BB:B4:03:23:FF:C0:9F:2F:F8:C7:AC:35:D3:9D:D1:C7:99:62:00
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 0663404D
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/t7u0AyP_wJ8v-MesNdOd0ceZYgA.roa
Signing time: Fri 25 Mar 2022 12:50:08 +0000
ROA not before: Fri 25 Mar 2022 12:50:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62164
IP address blocks: 45.11.88.0/23 maxlen: 24
45.11.90.0/23 maxlen: 23
185.149.233.0/24 maxlen: 24
185.149.234.0/23 maxlen: 23
193.39.184.0/24 maxlen: 24
5.181.164.0/23 maxlen: 23
185.202.174.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107167821 (0x663404d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Mar 25 12:50:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b7bbb40323ffc09f2ff8c7ac35d39dd1c7996200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8e:fa:ab:91:3e:3e:60:c3:56:b3:07:fa:31:
8b:c8:1d:98:ae:df:ac:f0:ff:81:8e:a4:c1:c8:e4:
e2:59:81:e5:d6:c3:81:01:35:ce:66:7a:45:9b:fb:
1d:b2:57:fd:2d:c2:23:69:37:8c:6f:d7:b9:89:c2:
dd:39:6e:2c:77:f9:2d:c5:e1:ab:41:5b:a1:b9:fa:
f7:06:2b:43:f5:ba:04:03:d9:7d:86:d3:2b:b5:6b:
cf:50:3b:c4:17:07:49:cd:78:ea:2d:31:4e:e5:7d:
d4:32:53:f2:a0:3b:62:20:f0:af:b6:3d:f2:d8:f6:
db:4d:4b:e2:00:44:eb:63:60:1a:27:7b:2c:ec:d8:
8c:ec:f2:85:db:5d:a1:d8:10:7c:25:fa:b8:a3:fa:
57:0c:78:e5:25:6a:bd:e7:ae:ee:14:bc:51:4f:a5:
6e:e6:b6:5f:e2:d0:6a:b2:d4:cc:8e:87:a9:9d:b8:
92:0b:45:9b:6b:87:5b:8d:68:82:fc:db:4c:02:a4:
34:d8:83:c7:87:a0:24:54:bf:9b:cb:7d:f0:fe:53:
1d:3c:65:78:e5:b6:2a:f3:f5:82:18:7b:7d:7c:dc:
fd:ee:b4:99:96:3a:f8:f3:d7:61:46:f0:6f:17:79:
d2:e6:1c:5c:9d:ad:f2:1d:f7:e1:cd:dd:0c:a7:b5:
49:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BB:B4:03:23:FF:C0:9F:2F:F8:C7:AC:35:D3:9D:D1:C7:99:62:00
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/t7u0AyP_wJ8v-MesNdOd0ceZYgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.164.0/23
45.11.88.0/22
185.149.233.0-185.149.235.255
185.202.174.0/24
193.39.184.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:d4:55:ee:24:26:f6:5f:c1:95:7f:16:7d:17:e4:ac:fb:a6:
71:5d:79:fd:b8:e4:7a:66:8a:e9:f6:dc:5a:02:fa:91:6e:43:
61:b1:e1:61:55:89:ab:d3:b2:4c:1a:af:66:8c:04:2e:d2:10:
19:43:ca:0c:6a:84:28:13:63:f5:ed:a4:7d:8f:5d:e0:07:5c:
c9:55:cd:9b:58:d3:dc:ec:2c:bb:66:a2:8c:ca:fc:50:13:a0:
44:ea:2a:59:75:69:b9:53:02:7b:5a:9e:9f:8b:64:6c:6f:a5:
d3:41:b6:6f:96:3c:11:0b:b0:63:f4:fc:d7:26:aa:e8:e4:b8:
c6:f8:91:bb:1d:d1:54:06:18:10:97:84:c5:a9:f4:90:f2:7f:
58:75:b9:2d:c6:82:6d:62:38:7e:f4:f6:79:b7:f9:a2:f9:ca:
24:f3:0e:18:b8:d5:00:44:6a:95:36:db:b5:3f:d1:2e:19:29:
bc:81:bc:f0:79:25:81:24:e8:85:07:de:0f:8c:4b:c5:54:1a:
c7:fa:47:f0:21:e1:58:24:cb:61:73:00:1d:8e:1b:60:64:0c:
17:02:1e:b1:44:49:83:6e:71:4b:86:ba:97:92:b2:56:4c:fe:
6d:d9:3e:e3:68:f4:75:b5:7c:73:6e:91:ef:23:7d:3e:8c:df:
c9:99:4e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:02 2024 by rpki-client on console-ams.rpki-client.org