Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/oYkkDPzzpDPDwLh1TOtKhWrW6H8.roa
File: oYkkDPzzpDPDwLh1TOtKhWrW6H8.roa (raw, json)
Hash identifier: OLGTIMPk+u8SwZUeYxe4qUcDp0N9dYKpkGiHG+w5Ag8=
Subject key identifier: A1:89:24:0C:FC:F3:A4:33:C3:C0:B8:75:4C:EB:4A:85:6A:D6:E8:7F
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 19EF5299
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/oYkkDPzzpDPDwLh1TOtKhWrW6H8.roa
Signing time: Sat 01 Jan 2022 15:56:54 +0000
ROA not before: Sat 01 Jan 2022 15:56:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209854
IP address blocks: 91.206.168.0/24 maxlen: 24
45.149.3.0/24 maxlen: 24
45.95.242.0/24 maxlen: 24
45.130.139.0/24 maxlen: 24
45.130.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 435114649 (0x19ef5299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Jan 1 15:56:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a189240cfcf3a433c3c0b8754ceb4a856ad6e87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:41:74:6b:5e:a6:39:05:88:9a:2b:08:22:a4:
15:78:04:64:f1:6e:6a:5c:33:04:66:d9:f0:dd:6b:
2b:ff:bf:0b:64:88:0f:95:e3:b2:e8:f5:84:60:77:
f2:a3:56:e8:b5:25:25:58:f8:d8:a1:37:d3:37:16:
fb:95:d2:8b:9e:43:82:11:ef:cd:8c:c2:f9:83:09:
a1:4b:12:d3:8b:79:18:3e:3b:a2:8a:08:1b:e4:30:
1f:b8:73:10:46:7e:2a:84:89:cf:88:ae:e4:b6:9e:
37:17:e2:d8:dc:da:bf:26:5b:37:26:5c:c7:bc:3a:
fa:4f:57:82:d7:b1:af:44:bd:a8:04:37:99:1c:ad:
dc:ae:27:02:0f:3b:78:b9:97:d7:2f:aa:45:f5:fe:
5f:b6:bd:b6:33:d7:e8:b9:17:e7:c7:41:fc:cf:17:
f7:ef:ac:1a:30:36:3f:30:e5:dd:9c:96:15:4e:9c:
1d:08:df:49:f0:7f:31:41:a5:a0:c9:72:d1:6f:32:
ea:c8:01:20:88:42:1d:ee:73:f5:57:8d:12:9f:de:
65:e1:02:1b:ce:3e:74:c7:0b:b2:eb:65:34:11:6c:
dc:df:e0:44:75:c1:62:cf:a8:72:19:5d:29:d0:28:
3d:7d:a3:c4:cf:d7:d3:11:e1:2e:06:87:58:46:ef:
94:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:89:24:0C:FC:F3:A4:33:C3:C0:B8:75:4C:EB:4A:85:6A:D6:E8:7F
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/oYkkDPzzpDPDwLh1TOtKhWrW6H8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.242.0/24
45.130.137.0/24
45.130.139.0/24
45.149.3.0/24
91.206.168.0/24
Signature Algorithm: sha256WithRSAEncryption
56:c9:80:de:9a:b6:ef:65:42:26:f9:56:2a:4c:e5:ad:09:32:
2f:f4:06:9a:fa:d0:7b:ad:8b:63:8c:a6:05:34:57:3e:3e:04:
36:0c:02:ca:ed:93:e0:16:a1:d9:c0:39:4e:71:7e:79:91:40:
7f:48:4d:8e:61:5f:c0:20:73:64:5c:16:40:b2:71:4a:6f:97:
12:ff:56:58:10:d6:ce:7c:4b:cf:0f:4c:49:29:b1:63:eb:bb:
d4:b7:1b:f7:57:a6:db:c4:d1:69:fa:c2:bb:ce:dc:2a:0f:06:
33:e0:b8:a6:77:46:73:36:b8:a3:7d:1f:33:99:8f:7f:5f:a8:
97:a4:00:4b:96:c7:1d:89:ea:67:b1:03:77:2b:a4:47:12:b7:
f2:9a:a4:df:47:97:d0:1b:76:e3:5c:2d:1c:96:2d:fa:e9:e6:
b4:cf:3f:ee:19:82:67:4a:b5:5a:8d:a9:4c:f3:84:6c:a4:db:
5d:83:64:73:1f:1e:aa:58:fe:19:98:de:75:1b:59:6a:fa:45:
c9:19:b2:38:3c:98:5a:8a:f3:75:f0:bb:99:e5:40:95:c2:28:
98:50:81:c0:a1:be:b6:98:85:0f:c9:30:be:29:07:4b:d7:f5:
07:2d:6c:20:2b:98:f1:f5:c9:7d:ce:30:be:54:44:5e:04:c7:
02:27:31:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:25 2023 by rpki-client on console-ams.rpki-client.org