Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3oeFqsplu6M0LOlkJFazo4X90Iw.roa
File: 3oeFqsplu6M0LOlkJFazo4X90Iw.roa (raw, json)
Hash identifier: pWoAXeQYBdBwyMIn+9GHLAIshE7IdaFv8HRSP0IW6bE=
Subject key identifier: DE:87:85:AA:CA:65:BB:A3:34:2C:E9:64:24:56:B3:A3:85:FD:D0:8C
Certificate issuer: /CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Certificate serial: 082506B3
Authority key identifier: DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3oeFqsplu6M0LOlkJFazo4X90Iw.roa
Signing time: Sat 01 Jan 2022 04:55:00 +0000
ROA not before: Sat 01 Jan 2022 04:55:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209853
IP address blocks: 185.149.103.0/24 maxlen: 24
185.149.100.0/24 maxlen: 24
185.149.102.0/24 maxlen: 24
185.149.101.0/24 maxlen: 24
45.151.251.0/24 maxlen: 24
45.151.248.0/24 maxlen: 24
45.151.250.0/24 maxlen: 24
45.151.249.0/24 maxlen: 24
78.142.209.0/24 maxlen: 24
78.142.208.0/24 maxlen: 24
78.142.211.0/24 maxlen: 24
78.142.210.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136644275 (0x82506b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce560f0ec850da8a7c0f8d6f3825102d4de4ace
Validity
Not Before: Jan 1 04:55:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=de8785aaca65bba3342ce9642456b3a385fdd08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:87:76:e2:b7:2c:46:34:7f:2a:b7:b8:bb:4a:
fe:b9:34:d8:3a:54:76:d4:40:d9:67:d3:9c:3f:b8:
b8:17:d3:67:7e:d6:b9:8f:bc:37:77:08:5f:8f:23:
79:42:1c:27:08:d9:1c:73:a6:d4:97:26:4a:59:a5:
b5:15:b1:b9:ec:93:a0:d2:d8:20:e6:77:f4:f8:c7:
fc:b3:18:3b:09:b0:ea:96:e1:d2:e2:18:5a:40:18:
a8:2e:82:29:8f:03:46:15:54:5e:e2:90:63:b6:8a:
ec:71:70:3c:a4:4f:d6:32:ec:bf:07:45:1a:6b:f9:
97:8e:73:68:52:90:14:c6:9d:91:f8:c9:a2:0e:07:
98:21:c4:f7:e8:31:01:71:23:d9:d2:14:bc:bc:14:
47:c8:7f:94:0b:61:fa:77:c3:e9:50:b6:1b:12:fa:
55:45:09:9f:3b:04:c5:a5:9a:9c:e0:6c:c6:5f:b8:
57:e2:0d:68:c6:9e:27:95:12:2b:7f:01:58:8b:e4:
b7:91:da:e8:28:d2:c9:10:34:6f:39:e6:77:27:91:
a2:cd:5f:5c:db:46:9d:90:a6:ab:a8:f3:3c:f7:63:
6c:5f:06:94:cb:df:58:fb:30:0f:f9:78:01:6e:d7:
35:8b:e3:34:1e:b7:8f:a8:e8:15:26:b7:ef:ac:a3:
2e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:87:85:AA:CA:65:BB:A3:34:2C:E9:64:24:56:B3:A3:85:FD:D0:8C
X509v3 Authority Key Identifier:
keyid:DC:E5:60:F0:EC:85:0D:A8:A7:C0:F8:D6:F3:82:51:02:D4:DE:4A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3OVg8OyFDainwPjW84JRAtTeSs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3oeFqsplu6M0LOlkJFazo4X90Iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/053d39-374c-4387-9945-431f75ba8675/1/3OVg8OyFDainwPjW84JRAtTeSs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.248.0/22
78.142.208.0/22
185.149.100.0/22
Signature Algorithm: sha256WithRSAEncryption
49:9d:f0:b6:5b:4b:6a:92:45:8b:ad:2c:5a:3e:39:5c:73:d3:
4b:d2:ba:4c:b1:4d:6f:ee:39:b0:ad:68:b7:a7:54:8b:d8:6c:
b2:a3:a2:23:f3:54:c8:86:31:5a:fb:c7:74:9e:d5:35:58:51:
4b:00:79:2e:3f:04:de:af:c8:91:c3:8f:9c:bb:ca:1a:dd:d7:
ad:d1:f1:8d:7e:61:b9:5a:11:67:01:37:49:49:da:dd:58:3e:
ec:37:a7:96:b4:fb:41:c8:cc:fe:f9:5b:23:31:6d:5b:fb:38:
28:c4:31:95:6c:6e:3e:6d:c6:15:5d:36:d9:f1:19:c7:fd:02:
6d:bc:03:9b:c5:11:cb:47:19:7c:98:d8:9a:8e:86:7f:2b:5c:
ac:0b:3e:fd:86:25:67:58:e1:4d:fe:51:e8:af:61:ef:87:fb:
ec:e2:4b:dc:fc:e2:e4:52:aa:62:e5:cd:f0:bc:15:60:f7:d8:
e0:d9:29:a2:ac:8d:a5:b7:e1:a8:81:53:e7:5e:72:49:44:48:
41:14:2d:8b:13:7f:4a:a6:54:14:26:c4:05:b4:66:5f:53:2a:
bf:ae:b4:37:90:0b:a7:ca:44:c4:cb:0e:60:bb:b7:9d:35:e2:
fb:2b:0c:2c:55:b2:31:f0:30:22:0a:a2:73:02:45:18:12:04:
71:d0:d9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:39 2023 by rpki-client on console-ams.rpki-client.org