Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/Xx5AVSKnJVsOW0xwsZIZBLvlLHw.roa
File: Xx5AVSKnJVsOW0xwsZIZBLvlLHw.roa (raw, json)
Hash identifier: 41Vdj+Ir6J9LKEFfvICvbYIwUZDUQ7E2anoT+UAdwnI=
Subject key identifier: 5F:1E:40:55:22:A7:25:5B:0E:5B:4C:70:B1:92:19:04:BB:E5:2C:7C
Certificate issuer: /CN=134efe7c541f5406dc7e0ff268d05582baefc996
Certificate serial: 245080
Authority key identifier: 13:4E:FE:7C:54:1F:54:06:DC:7E:0F:F2:68:D0:55:82:BA:EF:C9:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E07-fFQfVAbcfg_yaNBVgrrvyZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/Xx5AVSKnJVsOW0xwsZIZBLvlLHw.roa
Signing time: Sat 01 Jan 2022 01:50:21 +0000
ROA not before: Sat 01 Jan 2022 01:50:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 45.91.40.0/22 maxlen: 22
185.212.7.0/24 maxlen: 24
185.126.33.0/24 maxlen: 24
94.140.6.0/23 maxlen: 23
94.140.5.0/24 maxlen: 24
195.85.6.0/23 maxlen: 23
91.208.213.0/24 maxlen: 24
83.229.28.0/23 maxlen: 23
89.35.228.0/24 maxlen: 24
195.158.236.0/23 maxlen: 23
2a10:13c0:da7a::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2379904 (0x245080)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=134efe7c541f5406dc7e0ff268d05582baefc996
Validity
Not Before: Jan 1 01:50:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5f1e405522a7255b0e5b4c70b1921904bbe52c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:01:a6:90:83:6a:a1:5f:37:21:32:9a:5b:50:
58:d0:d2:78:16:23:53:c2:23:a9:7c:8e:bd:4a:f0:
9a:9e:12:32:e7:37:6f:5e:f4:10:28:ad:ef:e2:f1:
7d:37:a9:a3:c1:80:f1:15:8d:cc:e9:9a:13:35:d6:
65:29:44:6e:4a:9b:de:ea:b4:eb:2e:b6:72:dc:bb:
0a:00:0d:b6:6c:eb:91:6e:7d:51:e8:ef:f5:08:3e:
95:a5:cb:ec:79:79:6f:2b:35:f8:2d:56:a3:4b:63:
93:fe:5f:ce:7c:b8:61:7a:02:e0:aa:5c:4f:8c:fb:
b5:13:b4:8e:7f:79:cc:33:ef:4c:59:50:2f:57:55:
2d:5a:cc:63:7a:38:75:7c:67:11:74:ff:b3:45:d0:
11:c6:fc:df:3b:ad:42:96:c9:cb:14:1f:72:c1:7f:
5e:48:eb:04:8e:7d:dd:61:d4:f7:69:6d:50:f4:21:
d3:8a:15:c6:10:f6:5a:01:17:f8:3c:2a:2c:55:82:
85:a4:68:ee:2a:83:a2:d8:32:da:87:d6:2a:1c:e0:
a5:76:a4:f0:0a:81:50:f0:c1:35:2a:c5:6d:33:3c:
f6:80:fd:ad:12:8f:f6:64:24:90:82:9f:5f:4f:b6:
20:d1:b8:e6:46:a1:84:1e:d4:84:91:2b:de:0d:36:
d3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1E:40:55:22:A7:25:5B:0E:5B:4C:70:B1:92:19:04:BB:E5:2C:7C
X509v3 Authority Key Identifier:
keyid:13:4E:FE:7C:54:1F:54:06:DC:7E:0F:F2:68:D0:55:82:BA:EF:C9:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E07-fFQfVAbcfg_yaNBVgrrvyZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/Xx5AVSKnJVsOW0xwsZIZBLvlLHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/93d297-8038-4b9a-8f7b-b36491ee6ee4/1/E07-fFQfVAbcfg_yaNBVgrrvyZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.40.0/22
83.229.28.0/23
89.35.228.0/24
91.208.213.0/24
94.140.5.0-94.140.7.255
185.126.33.0/24
185.212.7.0/24
195.85.6.0/23
195.158.236.0/23
IPv6:
2a10:13c0:da7a::/48
Signature Algorithm: sha256WithRSAEncryption
04:91:4a:6e:42:37:9a:6a:89:83:f3:c7:9f:dd:33:67:1f:39:
ec:9e:65:d1:04:fb:b3:ef:99:57:05:4b:6d:e4:e1:81:07:4e:
db:97:bf:5f:15:81:a1:cf:82:17:f1:42:90:fb:e3:c5:bc:5f:
b5:84:8d:68:66:30:3b:b7:18:7a:49:ec:94:01:2a:ba:7d:f0:
05:e6:37:70:4e:76:c4:96:a1:56:aa:be:ff:5a:1e:a2:e6:de:
69:ed:17:ae:c9:fb:ff:54:fb:56:4c:b6:ff:29:3a:2b:24:1d:
22:99:c0:a2:72:46:72:62:22:3f:79:2d:b4:bb:08:cf:67:3a:
64:b9:2c:79:b5:8e:21:5a:04:e0:53:75:3b:2c:3b:8d:05:80:
ed:89:d2:75:85:61:6e:d6:fb:23:0e:ac:1b:b6:02:4e:91:36:
34:8d:e4:b5:e7:59:19:3f:f8:eb:ec:2c:6d:d3:be:46:18:12:
62:53:6f:04:ac:34:7d:5a:32:80:b4:09:aa:f1:16:af:d7:c6:
ed:9c:7e:74:b3:bd:bf:87:29:3e:3a:24:e0:9e:5d:14:55:eb:
ec:ef:54:38:62:e0:cc:5e:08:2f:bb:d8:25:83:a9:2d:85:32:
d6:05:13:3d:f2:d1:5a:ce:dd:45:d8:06:7f:2e:13:5c:ad:3b:
a0:24:13:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:41 2023 by rpki-client on console-ams.rpki-client.org