Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/wNoPF0xE4-GeRd6TxLupzYuHNgk.roa
File: wNoPF0xE4-GeRd6TxLupzYuHNgk.roa (raw, json)
Hash identifier: 2ro0vTT45zF3LkGqRFO6xR/BbilPKcbx1xkUoihSMPE=
Subject key identifier: C0:DA:0F:17:4C:44:E3:E1:9E:45:DE:93:C4:BB:A9:CD:8B:87:36:09
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 0602F68B
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/wNoPF0xE4-GeRd6TxLupzYuHNgk.roa
Signing time: Sat 01 Jan 2022 16:01:20 +0000
ROA not before: Sat 01 Jan 2022 16:01:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209242
IP address blocks: 45.12.30.0/23 maxlen: 23
45.85.118.0/23 maxlen: 23
195.88.213.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100857483 (0x602f68b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jan 1 16:01:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c0da0f174c44e3e19e45de93c4bba9cd8b873609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f7:34:3a:3e:f3:01:f4:6f:91:ca:ce:95:99:
45:7e:6b:46:dc:24:da:b2:d5:a5:ec:85:fa:5c:7e:
45:60:3c:6c:b6:4d:cd:7a:c6:2c:f6:af:32:f2:f4:
fa:02:06:11:ec:91:ac:38:62:32:5e:10:de:bd:05:
44:2f:4e:40:4c:71:ea:a2:01:19:53:08:ed:96:55:
16:ed:d3:dd:4a:f8:1a:3e:ac:ef:f1:5b:fb:88:c6:
86:b0:55:55:06:ee:8a:4c:7f:d4:73:a7:3d:be:d9:
9b:0c:92:1b:c0:dc:91:81:ab:e9:20:07:ce:bb:aa:
df:22:12:63:63:f8:05:25:64:1c:ca:a8:29:14:08:
f2:ea:67:d6:7d:f5:f5:91:7f:f3:6f:b6:0c:fd:b1:
39:9f:5d:99:56:40:09:21:b4:65:4a:2a:33:26:28:
f0:01:f8:9a:50:ed:9b:45:60:c8:8b:27:7d:70:dc:
7e:e5:92:ce:e3:46:d4:f7:7e:70:d2:17:07:a0:42:
2a:8b:d0:b0:9f:73:35:8c:0d:ce:dd:49:3e:6d:a6:
4c:bb:3b:fd:64:7b:d7:25:f0:7e:56:70:3c:b0:d5:
f3:43:ed:e7:83:e0:39:dd:6f:40:85:fd:ae:33:00:
79:48:d3:f8:46:14:ba:e0:36:28:20:05:ad:1c:11:
be:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DA:0F:17:4C:44:E3:E1:9E:45:DE:93:C4:BB:A9:CD:8B:87:36:09
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/wNoPF0xE4-GeRd6TxLupzYuHNgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.30.0/23
45.85.118.0/23
195.88.213.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:8b:6b:12:91:8d:5f:f4:e3:bf:28:76:ee:45:7f:f4:10:f1:
45:94:cc:fe:05:a7:d6:9f:f8:5f:50:24:ac:b5:c1:8e:c1:27:
6c:04:88:79:ef:6a:f5:6c:a5:b9:23:9b:b3:9e:5f:8c:27:fe:
4d:36:38:2b:e1:7e:56:bc:32:d2:7b:f0:1c:85:d0:83:98:c9:
71:33:69:07:cd:83:f2:75:b4:b4:36:c0:c4:8f:22:83:3d:34:
e2:ec:20:d7:08:f7:f0:48:bf:71:cc:a1:16:60:5b:2a:1d:38:
b9:9a:00:5b:18:3f:be:37:e6:9e:da:ea:5b:bf:2d:a8:c5:bb:
de:9a:ce:2d:71:1b:24:84:18:f0:a7:5e:10:a6:8e:73:af:f7:
9e:95:b9:39:fc:2f:6c:b6:cf:31:75:e1:ba:ab:6a:5a:46:67:
c0:34:14:76:f4:be:93:9d:28:fc:f2:b2:1f:3f:9f:c4:41:58:
03:2a:eb:65:76:64:bc:b6:9e:70:c7:68:e7:8e:5d:df:ac:14:
b0:bf:af:06:ef:e1:dc:84:3a:c1:e6:76:7b:54:50:29:14:b6:
17:3b:fd:ab:02:8a:34:fc:7b:8d:5d:f5:38:68:bc:f7:58:af:
07:df:49:43:cd:fe:5c:87:30:cc:49:15:bb:f5:37:03:4e:00:
61:58:77:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:36 2024 by rpki-client on console-ams.rpki-client.org