Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/LXG2Pf92B4nsGIr-0RbxKI6lvDk.roa
File: LXG2Pf92B4nsGIr-0RbxKI6lvDk.roa (raw, json)
Hash identifier: IegtJwAJGpu/4DwzUFtMxOs5bwEdMEER7zVqS2WUEWU=
Subject key identifier: 2D:71:B6:3D:FF:76:07:89:EC:18:8A:FE:D1:16:F1:28:8E:A5:BC:39
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 1BC78436
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/LXG2Pf92B4nsGIr-0RbxKI6lvDk.roa
Signing time: Wed 22 Jun 2022 10:27:33 +0000
ROA not before: Wed 22 Jun 2022 10:27:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 45.92.228.0/24 maxlen: 24
193.176.210.0/24 maxlen: 24
45.85.124.0/22 maxlen: 24
45.130.136.0/24 maxlen: 24
45.91.20.0/24 maxlen: 24
45.91.21.0/24 maxlen: 24
45.91.22.0/24 maxlen: 24
45.132.193.0/24 maxlen: 24
2a07:e341::/32 maxlen: 32
2a07:e340::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 466060342 (0x1bc78436)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jun 22 10:27:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2d71b63dff760789ec188afed116f1288ea5bc39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b5:5b:cd:87:4f:10:37:bc:be:58:8d:14:4f:
bd:ec:97:93:5a:d3:f1:4e:72:54:a1:9b:d5:2a:b4:
90:57:13:17:81:b4:97:a4:a9:dc:89:7a:58:db:f9:
56:bd:eb:c7:a8:f2:54:8d:c8:d8:30:00:f8:19:62:
ce:55:c9:22:73:ce:92:45:ca:03:ec:ce:c2:38:0b:
99:98:b2:e9:6a:23:c2:34:e9:a5:10:3e:9c:a4:da:
3a:f5:54:f8:ff:6c:03:24:96:90:16:27:8a:9d:fb:
3f:cb:6d:91:1e:9f:d2:10:ce:03:46:88:08:ab:b3:
aa:40:8a:e1:a5:f1:ae:96:b9:2f:12:be:29:e4:8c:
6a:c2:4a:2e:ee:54:a3:4a:75:4c:02:53:1e:a4:b0:
ba:33:2b:88:81:46:ec:fe:a4:6f:2d:0a:65:b0:b6:
02:f6:5e:e5:20:53:ef:d4:24:02:55:3b:f1:cd:f9:
13:21:e6:5a:e9:29:e3:3c:8c:35:29:ce:df:2b:5d:
4e:aa:36:6f:c5:e8:b5:c1:72:ee:b5:8a:b1:2f:6d:
1c:c7:d1:00:c9:8f:77:24:00:0e:37:6f:f9:6d:a9:
c8:5c:80:7f:af:eb:10:0b:f9:81:95:84:0f:50:84:
6d:db:39:d3:96:b2:2a:04:96:2c:22:1b:ac:1e:cb:
1f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:71:B6:3D:FF:76:07:89:EC:18:8A:FE:D1:16:F1:28:8E:A5:BC:39
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/LXG2Pf92B4nsGIr-0RbxKI6lvDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.124.0/22
45.91.20.0-45.91.22.255
45.92.228.0/24
45.130.136.0/24
45.132.193.0/24
193.176.210.0/24
IPv6:
2a07:e340::/31
Signature Algorithm: sha256WithRSAEncryption
12:95:e0:88:de:96:02:fc:ab:4c:81:92:59:68:43:57:b0:52:
49:4f:15:00:5d:15:cc:3b:4c:1d:af:43:ee:a1:d4:9b:5c:80:
b3:a1:b7:b9:b2:37:51:5e:28:4e:78:b6:47:25:b8:a9:31:41:
bb:c6:6d:4f:3d:82:19:e9:fe:7e:61:c1:55:f6:e3:6f:93:12:
f7:84:5c:fb:be:e8:d1:48:dd:01:d5:f1:0e:ae:1d:4a:fb:f2:
21:6c:8c:dd:ef:30:39:3c:98:43:d0:0f:0d:46:b5:cd:4e:aa:
c6:fc:20:e1:00:b0:39:a2:d6:4f:16:ad:6b:97:a6:ba:1b:f5:
6b:44:2c:a8:38:4b:d0:1a:b7:ff:fa:36:ab:fa:b7:51:a4:91:
e6:f4:ec:fe:6d:51:7e:f1:56:34:0f:b1:0b:e0:44:ab:ca:fc:
94:a2:a7:8d:7c:72:41:f5:98:b3:c6:6b:8c:0e:e8:71:3c:02:
3f:c0:7b:1d:0e:99:33:14:26:ea:01:ac:23:f6:a1:ac:35:dc:
ec:db:df:5b:ff:29:e7:e0:d3:82:8d:63:c1:c1:80:9f:8a:28:
c1:8c:46:a7:84:c1:2e:16:5a:49:03:f5:94:bf:37:fe:ad:80:
8e:8b:27:ca:99:1d:c0:f8:70:08:f6:94:98:eb:f2:e2:4e:32:
04:67:00:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:24 2023 by rpki-client on console-ams.rpki-client.org