Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/dK_UCBCO0hgMdyk6XXFprsu7FAo.roa
File: dK_UCBCO0hgMdyk6XXFprsu7FAo.roa (raw, json)
Hash identifier: K1uNP9sHLw1CXzCZFxP5jH22npgAglgYdiQZPZpRGJg=
Subject key identifier: 74:AF:D4:08:10:8E:D2:18:0C:77:29:3A:5D:71:69:AE:CB:BB:14:0A
Certificate issuer: /CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Certificate serial: 1505EAA2
Authority key identifier: 8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/dK_UCBCO0hgMdyk6XXFprsu7FAo.roa
Signing time: Thu 19 May 2022 07:15:17 +0000
ROA not before: Thu 19 May 2022 07:15:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203726
IP address blocks: 45.84.170.0/24 maxlen: 24
45.84.168.0/23 maxlen: 23
45.84.171.0/24 maxlen: 24
185.124.180.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 352709282 (0x1505eaa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d30810e2dc271a6a0f07b8e209e2dc223637839
Validity
Not Before: May 19 07:15:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=74afd408108ed2180c77293a5d7169aecbbb140a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9d:06:de:b2:94:1a:78:a4:34:8f:65:3e:36:
d5:33:b0:fe:63:46:f4:79:b6:6b:e1:66:89:3d:3d:
e0:40:78:0d:19:ae:84:93:41:50:d7:1a:b2:7a:e0:
25:6a:9a:d7:99:f9:1e:e4:3a:b2:19:9f:43:ac:43:
e3:5d:58:cc:29:65:cd:e2:7a:6f:0d:a5:23:f0:e8:
14:45:89:39:92:3a:1b:10:de:48:ba:40:63:fb:6b:
cd:78:03:30:e2:63:f8:3f:1a:82:83:31:d8:43:8a:
95:d7:c5:cb:5c:3f:e7:ae:a1:df:62:6e:2d:21:1e:
40:b0:c8:90:a6:83:5e:15:64:bb:79:49:9d:f1:69:
8d:6d:5b:c5:11:20:28:7e:02:d6:fa:31:7d:0c:ba:
73:1e:21:74:67:36:35:9f:b2:ae:be:30:7e:14:b8:
ec:22:0f:f6:50:e1:c5:20:bc:f3:17:6e:d9:49:93:
ee:f8:db:06:e6:13:a1:e1:82:4d:50:78:df:94:bd:
1b:ce:5c:8b:56:c4:2a:e6:13:fe:6a:bd:c6:1d:bb:
1c:2b:01:90:4f:d6:44:f3:e5:41:c3:b5:21:51:19:
7d:67:1a:87:96:ff:11:8d:0d:46:36:4c:a2:23:f8:
3f:a8:21:dd:e6:b4:3d:34:a3:e7:f9:75:fc:47:04:
a0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AF:D4:08:10:8E:D2:18:0C:77:29:3A:5D:71:69:AE:CB:BB:14:0A
X509v3 Authority Key Identifier:
keyid:8D:30:81:0E:2D:C2:71:A6:A0:F0:7B:8E:20:9E:2D:C2:23:63:78:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jTCBDi3Ccaag8HuOIJ4twiNjeDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/dK_UCBCO0hgMdyk6XXFprsu7FAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a9d9da-f8a5-47ba-b66a-bd0b5774f637/1/jTCBDi3Ccaag8HuOIJ4twiNjeDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.168.0/22
185.124.180.0/22
Signature Algorithm: sha256WithRSAEncryption
56:32:c5:af:dc:8f:a5:1e:41:a0:ee:4c:ea:0c:d9:50:39:5a:
2a:6f:a2:5d:5b:7d:44:c8:b6:5c:87:97:95:a2:06:fa:87:ab:
b9:f4:ea:4e:cc:03:28:f5:3c:b6:a0:43:8a:29:27:4c:3e:cf:
c2:73:d4:8b:01:04:64:a9:33:03:da:98:ec:bf:72:dd:53:ab:
75:f9:71:f8:17:87:de:ae:50:6c:2b:22:81:16:9d:09:b9:e2:
bc:d9:4e:3c:44:24:ff:a9:80:9c:b3:15:3c:62:4b:7c:3e:c9:
29:99:cb:5a:85:85:80:9e:12:70:14:c1:e4:9e:0b:a6:36:7d:
b1:85:20:ae:7c:c6:a8:dc:1e:5c:e4:ae:b7:8f:3e:d3:c7:f4:
26:3f:32:60:b6:d7:7c:47:f2:2f:99:bd:af:fe:d4:bf:0e:35:
b3:15:51:28:76:30:87:ce:3e:86:46:74:b8:48:6b:4d:43:6e:
7b:27:22:59:e3:df:c0:4a:eb:d6:46:2a:b3:ca:77:d7:e6:d4:
02:25:de:f2:de:5a:bd:45:ca:e7:a3:40:f5:e3:1b:f8:ec:82:
d6:1b:6b:74:e5:b2:05:05:1c:ba:dc:00:f2:f7:05:6a:e9:72:
e4:05:3d:65:be:f0:2c:ba:e0:fe:9c:70:b5:0b:97:af:00:04:
81:f2:4c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:09 2025 by rpki-client