Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/TsnOzO5J4i4HUacIZnw4fHYSJO8.roa
File: TsnOzO5J4i4HUacIZnw4fHYSJO8.roa (raw, json)
Hash identifier: pILl9VWbIR9i1hiTj4ykp860x3Aoe17HQBeDhyGgSbY=
Subject key identifier: 4E:C9:CE:CC:EE:49:E2:2E:07:51:A7:08:66:7C:38:7C:76:12:24:EF
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 0184D1729F25F3CFF1561D6B53009DA59EB6
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/TsnOzO5J4i4HUacIZnw4fHYSJO8.roa
Signing time: Fri 02 Dec 2022 06:07:40 +0000
ROA not before: Fri 02 Dec 2022 06:07:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206092
IP address blocks: 45.86.202.0/24 maxlen: 24
45.86.200.0/24 maxlen: 24
136.144.17.0/24 maxlen: 24
193.37.33.0/24 maxlen: 24
193.37.32.0/24 maxlen: 24
136.144.19.0/24 maxlen: 24
194.5.48.0/24 maxlen: 24
194.5.49.0/24 maxlen: 24
136.144.33.0/24 maxlen: 24
194.5.52.0/24 maxlen: 24
194.5.53.0/24 maxlen: 24
136.144.42.0/24 maxlen: 24
194.34.173.0/24 maxlen: 24
45.84.216.0/24 maxlen: 24
193.36.224.0/24 maxlen: 24
193.36.225.0/24 maxlen: 24
45.95.243.0/24 maxlen: 24
193.176.211.0/24 maxlen: 24
45.154.138.0/24 maxlen: 24
45.146.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:d1:72:9f:25:f3:cf:f1:56:1d:6b:53:00:9d:a5:9e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Dec 2 06:07:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4ec9ceccee49e22e0751a708667c387c761224ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5b:a2:d3:c5:3e:40:46:17:59:f2:e4:4e:bf:
0e:a4:b2:c9:bf:b2:f0:c7:9d:d8:d8:39:75:55:8e:
83:34:0f:9c:71:58:34:16:a1:4b:38:94:6c:cf:fa:
d5:91:f8:df:ac:b5:48:be:e2:1b:ce:61:d3:8b:07:
5b:90:74:3e:7b:f9:71:b7:7c:55:84:a1:a2:96:28:
81:54:3c:18:e4:7a:b2:43:32:37:08:d6:7f:d1:0d:
53:2f:e2:fb:59:87:90:91:3c:1e:1a:83:df:16:ad:
7f:da:2f:3e:f5:37:5c:0b:56:6a:c4:ca:9f:16:65:
14:4c:97:3e:86:c9:d0:dc:19:08:5b:f6:35:87:d8:
ab:01:c8:b5:48:58:62:be:87:21:9c:d5:82:ae:83:
38:b4:3f:c8:93:32:a5:90:9a:e9:f0:cd:21:a0:4a:
ef:e6:33:50:38:f9:a7:ac:22:b3:5a:24:bc:32:85:
69:32:f9:41:b8:26:db:87:5b:2b:70:ee:55:8c:f1:
db:cf:2f:41:d5:2c:8d:48:c4:20:d4:69:84:bb:cc:
8e:31:8f:a8:31:84:bb:ac:f9:0d:98:a8:c8:63:32:
0f:6c:20:0f:92:b4:a8:3f:fa:35:9c:af:d9:ff:ce:
07:25:25:e5:6b:39:84:d2:de:dd:dc:ab:74:88:65:
69:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C9:CE:CC:EE:49:E2:2E:07:51:A7:08:66:7C:38:7C:76:12:24:EF
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/TsnOzO5J4i4HUacIZnw4fHYSJO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.216.0/24
45.86.200.0/24
45.86.202.0/24
45.95.243.0/24
45.146.54.0/24
45.154.138.0/24
136.144.17.0/24
136.144.19.0/24
136.144.33.0/24
136.144.42.0/24
193.36.224.0/23
193.37.32.0/23
193.176.211.0/24
194.5.48.0/23
194.5.52.0/23
194.34.173.0/24
Signature Algorithm: sha256WithRSAEncryption
74:d9:f4:e8:bd:03:09:4d:dc:98:d3:a0:b3:e6:c0:2d:db:b8:
2b:da:9a:90:cf:d4:5a:b4:9c:cc:26:2c:9c:b9:6d:e9:c7:1f:
ca:9c:a5:ef:b0:63:e7:c8:85:3b:18:5f:a4:b2:0a:ec:d6:a0:
ee:d0:50:8e:ee:48:24:d0:a4:46:71:44:13:75:bc:e6:7d:88:
27:e9:6b:18:74:fb:e7:d7:85:10:c8:46:a6:c2:d1:f9:20:82:
e6:ae:dd:ce:e6:28:5b:6b:0a:a5:a2:65:85:47:a3:3d:8f:e2:
18:91:ce:c9:dd:29:76:fc:ff:4c:21:4c:05:e4:fb:13:8d:3f:
24:02:66:14:06:24:a7:22:9a:9d:c7:be:0e:3f:10:9f:f5:9b:
fd:f9:58:7a:c2:da:bf:3f:88:9c:44:b0:1f:d7:77:6f:0b:10:
d3:c8:25:42:ef:5c:2d:28:de:d7:d5:a2:6d:51:0c:00:cc:31:
48:c2:a0:f3:1a:3e:89:0e:68:3f:66:9e:1e:5d:a2:bf:2e:21:
db:f9:a9:07:3d:88:86:65:74:c4:d0:80:83:ed:46:a5:ac:b6:
f3:5f:9c:3b:8b:a1:e8:0e:45:2c:51:c9:d5:e2:95:ad:5b:07:
ac:f3:8d:88:e7:45:99:f2:bc:b2:b0:57:1d:6f:49:8c:78:07:
27:8a:1e:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:51 2024 by rpki-client on console-ams.rpki-client.org