Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/I_J5dpCZiJo2XC_7SY6TnL30BWo.roa
File: I_J5dpCZiJo2XC_7SY6TnL30BWo.roa (raw, json)
Hash identifier: PI0gsVWRQzOdZq1eCzD6n3O2bZ2skGQY0FdM11pw+0A=
Subject key identifier: 23:F2:79:76:90:99:88:9A:36:5C:2F:FB:49:8E:93:9C:BD:F4:05:6A
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 10AB85E7
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/I_J5dpCZiJo2XC_7SY6TnL30BWo.roa
Signing time: Sat 26 Mar 2022 20:32:14 +0000
ROA not before: Sat 26 Mar 2022 20:32:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31631
IP address blocks: 45.150.140.0/22 maxlen: 22
185.108.168.0/22 maxlen: 22
185.205.172.0/22 maxlen: 22
2a06:e40::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 279676391 (0x10ab85e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Mar 26 20:32:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=23f279769099889a365c2ffb498e939cbdf4056a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:59:10:50:c7:b1:57:73:2e:01:74:d5:74:0f:
4f:f1:35:2a:08:9d:09:57:b4:d8:b0:0d:83:12:be:
71:35:13:be:3a:96:14:a6:25:2c:d6:27:df:83:89:
d7:d9:f4:dc:e5:03:52:55:e8:0b:8d:b2:af:a0:b7:
16:a9:e5:dd:04:ec:15:d8:4c:99:e9:73:3a:cb:ed:
c6:a0:84:2e:df:42:e5:65:0a:94:a8:70:de:8a:9c:
fe:01:27:61:a4:cc:c1:a5:6c:19:ba:c2:f8:3c:5b:
70:6a:cf:2f:89:1b:bf:c9:49:40:32:aa:c5:94:87:
37:e4:f2:d4:86:b3:91:c8:54:8f:88:18:ad:c2:f1:
bc:e7:32:e8:0c:27:16:64:3e:99:3d:5d:0b:a3:f1:
13:c6:2c:18:17:95:4d:b3:14:1e:11:3d:78:2b:82:
8c:de:a5:5d:b6:a7:08:86:38:37:16:92:83:5a:fc:
34:40:18:bf:d5:7b:70:56:af:23:fc:8d:b3:de:dd:
9e:3b:3b:d8:56:70:0a:46:1d:6d:69:2e:0c:76:6b:
0b:b8:1f:3d:b6:54:d5:d2:d2:dd:62:ae:25:96:7a:
d2:99:d5:94:f5:2e:78:81:1c:e1:3b:3d:7f:6e:c8:
a9:28:8e:a4:cb:a9:b8:de:47:19:9b:d9:6e:24:34:
8a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F2:79:76:90:99:88:9A:36:5C:2F:FB:49:8E:93:9C:BD:F4:05:6A
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/I_J5dpCZiJo2XC_7SY6TnL30BWo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.140.0/22
185.108.168.0/22
185.205.172.0/22
IPv6:
2a06:e40::/29
Signature Algorithm: sha256WithRSAEncryption
b8:da:a6:e0:a5:e7:29:84:16:1b:b9:38:12:c4:22:7f:c5:09:
a7:38:b1:70:94:5d:a1:3e:8b:38:08:9d:13:3b:b3:5e:b7:1c:
dd:e2:bc:d8:5a:6c:8a:c9:80:4b:5b:67:71:e1:9a:4f:86:cc:
6e:50:51:d6:49:c3:17:63:73:30:52:90:14:e6:9f:6f:86:80:
16:06:64:42:b7:70:99:01:07:19:cc:f4:e9:66:1a:75:bf:06:
a1:09:e0:c7:fb:b7:80:14:96:d2:e2:ff:d3:26:94:79:a0:63:
d4:cb:40:a6:95:f7:53:a2:57:2b:2c:06:67:54:d7:21:dd:7d:
53:ac:52:09:41:90:2f:4d:68:a4:78:09:94:09:0f:bb:af:eb:
3d:5e:6b:aa:5d:3a:6d:8b:95:f8:7a:db:75:a5:24:cc:20:7e:
24:1b:92:b9:ff:67:91:1a:59:a2:3a:16:d5:15:05:24:ca:ca:
4e:79:3c:83:0f:ae:28:49:8b:2c:34:e4:f0:95:a8:b9:7f:e5:
8d:c5:d1:fc:04:0c:de:cc:02:6c:e6:06:dc:81:f6:a5:73:18:
a7:78:71:42:a1:1f:56:06:90:5a:73:09:2a:de:9a:f9:32:80:
b8:c4:93:bc:84:25:4b:52:74:88:37:12:9f:72:5d:73:83:2b:
75:22:49:3c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:28 2023 by rpki-client on console-fra.rpki-client.org