Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/zFSRTuGMka9jarHgodAtZoKOhZM.roa
File: zFSRTuGMka9jarHgodAtZoKOhZM.roa (raw, json)
Hash identifier: VUOGP3pDLzsxT0LucNI538KkoalXR3lz56PNe9GC9U0=
Subject key identifier: CC:54:91:4E:E1:8C:91:AF:63:6A:B1:E0:A1:D0:2D:66:82:8E:85:93
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 1B1924FC
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/zFSRTuGMka9jarHgodAtZoKOhZM.roa
Signing time: Wed 20 Apr 2022 11:57:05 +0000
ROA not before: Wed 20 Apr 2022 11:57:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 396356
IP address blocks: 45.85.91.0/24 maxlen: 24
136.144.35.0/24 maxlen: 24
136.144.43.0/24 maxlen: 24
45.84.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 454632700 (0x1b1924fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Apr 20 11:57:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cc54914ee18c91af636ab1e0a1d02d66828e8593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e8:65:7e:0f:1a:b7:48:27:ff:71:c8:3f:f4:
e8:5f:4d:d7:59:3c:ae:26:6b:a6:3b:5a:e7:da:0f:
7d:0a:f7:1f:49:83:ed:6a:c3:7e:aa:02:32:a0:75:
9d:1d:35:1c:f1:c9:47:7a:9b:61:bc:1b:39:4a:a3:
2a:3a:bf:60:ce:80:7f:fb:d3:72:98:62:cf:16:68:
93:60:7e:ed:7c:85:14:6d:be:2f:7e:cb:65:6d:af:
04:6d:d7:b2:27:3f:b1:7f:10:4e:58:8e:ce:43:76:
e9:9c:e5:05:40:8a:79:3b:f7:d0:ef:d9:dc:22:fb:
17:f7:94:46:de:ae:20:7c:48:47:51:21:0f:8b:dc:
3b:ff:89:6b:a9:46:9b:24:67:23:f5:cd:c6:a3:ff:
86:6e:64:62:29:06:7e:6b:35:11:04:a2:44:39:66:
7c:1f:79:fd:cb:fb:43:cc:a6:89:47:61:7c:65:b2:
80:1d:c6:e4:2e:34:2b:98:a7:ef:29:8e:a2:65:21:
3b:5f:c9:76:b5:d6:4a:ac:ec:19:fd:2e:05:0d:0c:
6c:a4:f3:96:21:9e:bf:6a:45:93:3b:ca:70:d6:72:
8d:bc:d8:1d:9c:a2:35:44:91:02:e4:d9:c9:43:da:
9f:30:08:b4:67:3a:ec:3c:ea:48:69:bd:7a:06:61:
01:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:54:91:4E:E1:8C:91:AF:63:6A:B1:E0:A1:D0:2D:66:82:8E:85:93
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/zFSRTuGMka9jarHgodAtZoKOhZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.212.0/24
45.85.91.0/24
136.144.35.0/24
136.144.43.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:29:61:e9:11:50:91:87:e7:8d:ce:51:8e:af:e2:a8:ee:f2:
03:b5:18:28:bc:0a:cb:55:93:5a:0c:17:e5:08:b2:f0:1a:52:
f3:2e:39:f3:1f:10:c4:23:79:a6:1c:04:bb:0e:93:a4:39:0b:
29:6c:66:61:8e:1e:f4:26:d9:97:b4:8e:f7:b4:a0:91:72:07:
1f:26:36:45:a3:a1:12:55:84:cd:ee:00:80:8e:93:06:10:91:
d8:ee:62:f8:8a:16:e2:0b:2b:a7:eb:cc:ba:4d:9b:25:71:a4:
81:98:61:9c:c5:bc:e3:92:25:d4:46:c7:6e:3f:89:3c:6e:99:
9f:68:a0:b4:e8:86:37:b7:33:db:7c:fa:9e:8b:6a:80:11:eb:
ff:cf:cd:06:18:91:92:8a:17:5a:61:c0:8a:63:e9:f3:5f:36:
6c:ff:ba:67:f9:5a:e4:ea:9b:57:5c:6d:95:0d:69:90:71:7c:
71:e5:5e:06:05:1f:39:80:c1:d6:92:5d:33:ce:eb:dd:86:41:
b3:c5:f3:d4:06:5d:cd:e1:e7:44:60:53:af:72:65:6c:05:9f:
4b:fc:ba:9b:2d:58:a8:1e:63:48:39:ce:62:df:7e:02:16:50:
1b:7f:e2:88:da:e9:a9:68:40:64:d9:3c:1b:b8:5e:da:01:c1:
ac:10:0e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:25 2023 by rpki-client on console-ams.rpki-client.org