Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/RAxQnjOb-md4m5P6k9lJFBQQf8Y.roa
File: RAxQnjOb-md4m5P6k9lJFBQQf8Y.roa (raw, json)
Hash identifier: AMT8k3UvFiqEY7HDVp+IS/T2jVugHiP5kD0nedfVCJc=
Subject key identifier: 44:0C:50:9E:33:9B:FA:67:78:9B:93:FA:93:D9:49:14:14:10:7F:C6
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 01855CD8FC183557C8708B622FC942A12275
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/RAxQnjOb-md4m5P6k9lJFBQQf8Y.roa
Signing time: Thu 29 Dec 2022 07:46:42 +0000
ROA not before: Thu 29 Dec 2022 07:46:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12679
IP address blocks: 45.134.12.0/24 maxlen: 24
45.134.15.0/24 maxlen: 24
45.134.14.0/24 maxlen: 24
212.8.224.0/22 maxlen: 22
212.8.229.0/24 maxlen: 24
212.8.228.0/24 maxlen: 24
2a07:505::/32 maxlen: 32
2a0e:7c41::/32 maxlen: 32
2a0e:7c45::/32 maxlen: 32
2a07:501::/32 maxlen: 32
2a0e:7c44::/32 maxlen: 32
2a07:504::/32 maxlen: 32
2a0e:7c42::/32 maxlen: 32
2a07:502::/32 maxlen: 32
2a0e:7c43::/32 maxlen: 32
2a07:507::/32 maxlen: 32
2a0e:7c47::/32 maxlen: 32
2a07:506::/32 maxlen: 32
2a0e:7c40::/32 maxlen: 32
2a07:500::/32 maxlen: 32
2a0e:7c46::/32 maxlen: 32
2a07:503::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:5c:d8:fc:18:35:57:c8:70:8b:62:2f:c9:42:a1:22:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: Dec 29 07:46:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=440c509e339bfa67789b93fa93d9491414107fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6a:d2:71:0f:45:f0:84:90:68:3b:eb:b3:3c:
3e:79:26:c9:12:b1:b2:74:11:05:b8:83:00:c8:3f:
65:98:fc:af:da:ab:71:88:f3:b4:d1:12:ab:bd:2d:
3b:fc:74:51:6e:3d:00:f3:6a:8d:13:17:b8:5c:4b:
b7:92:95:00:4d:7b:b7:96:54:c6:b5:c3:b3:d8:3e:
71:52:96:80:99:92:07:86:52:5b:36:ac:fa:81:22:
d2:1f:be:f7:c9:f8:f9:ec:2b:cc:39:83:ad:ba:c2:
90:d1:32:41:8a:b2:06:5b:5c:68:4e:dc:c8:aa:4f:
6c:47:a2:62:bb:70:21:44:3f:d6:a9:18:a6:4a:d2:
14:65:6a:bb:23:3f:cb:a1:18:de:57:c6:fd:ee:19:
29:75:16:72:5c:53:69:1f:13:b3:79:f5:43:e1:d4:
08:f8:c2:70:f4:8d:5d:81:8e:c3:e6:a5:d8:3f:03:
67:e5:00:1e:a2:37:12:57:e4:5a:4e:0a:20:cb:0d:
a9:bf:30:ee:29:a9:51:a6:e6:30:b9:29:43:1d:88:
4f:b1:d7:30:c2:dd:98:7e:37:89:f2:b9:a6:83:6a:
2f:15:b7:33:14:87:71:3f:40:5f:d0:5e:95:83:11:
9a:9a:05:14:a7:69:2c:aa:ba:7e:70:b4:4b:78:4d:
86:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0C:50:9E:33:9B:FA:67:78:9B:93:FA:93:D9:49:14:14:10:7F:C6
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/RAxQnjOb-md4m5P6k9lJFBQQf8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.134.12.0/24
45.134.14.0/23
212.8.224.0-212.8.229.255
IPv6:
2a07:500::/29
2a0e:7c40::/29
Signature Algorithm: sha256WithRSAEncryption
01:89:e7:2e:e7:9e:5f:e5:90:9a:fb:82:63:08:9a:1d:5b:fd:
73:60:7f:a8:cb:6a:7f:ae:33:3b:ed:8a:64:77:78:08:56:f5:
63:43:97:4a:0c:0e:13:95:c3:89:ef:48:f2:db:61:72:ce:96:
e0:14:99:71:4f:0a:06:76:0d:ec:cf:ec:59:07:18:9a:e5:d8:
cc:94:82:21:d1:0b:8a:95:ae:f0:e1:c3:fd:5e:98:ac:b3:50:
f7:6a:13:bd:f4:4b:5e:a8:63:e1:8f:0c:7c:49:23:24:2f:4c:
89:a3:3f:6a:8a:a3:c3:5d:6e:51:79:52:df:aa:c9:ad:67:39:
46:e7:84:4d:84:fc:9d:bd:ae:52:75:75:0b:90:40:c3:1b:50:
e7:a9:8b:a0:2e:6a:3c:2a:1b:2c:bc:93:dd:fa:f7:26:3c:9b:
76:74:cf:05:da:99:04:18:d4:a8:2b:0e:85:42:21:22:9f:ec:
8c:5a:5a:94:5d:43:5e:f1:cf:0c:90:57:7f:bd:bd:cc:97:f3:
cf:2e:ca:9e:e5:e1:1a:97:b6:5e:11:a7:35:85:42:89:3c:b4:
1e:58:11:d8:99:77:51:b2:08:47:68:51:61:4d:d1:e9:0d:65:
ca:66:c1:f8:43:89:cd:08:d3:b1:bc:37:69:3a:8a:10:ae:ed:
11:7e:90:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:34 2024 by rpki-client on console-fra.rpki-client.org