Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/C8tZlzoigieeWMXuGi7IA5ts8F4.roa
File: C8tZlzoigieeWMXuGi7IA5ts8F4.roa (raw, json)
Hash identifier: yN2zNBYTdqBgtsfcaTniBCFdMs+ex9rPoU5w1Slw8JU=
Subject key identifier: 0B:CB:59:97:3A:22:82:27:9E:58:C5:EE:1A:2E:C8:03:9B:6C:F0:5E
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0182179C6B7CFBA3D358DB27A5504E1A4496
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/C8tZlzoigieeWMXuGi7IA5ts8F4.roa
Signing time: Tue 19 Jul 2022 17:58:23 +0000
ROA not before: Tue 19 Jul 2022 17:58:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 58110
IP address blocks: 45.9.13.0/24 maxlen: 24
45.83.148.0/24 maxlen: 24
45.88.169.0/24 maxlen: 24
194.76.136.0/24 maxlen: 24
45.15.140.0/24 maxlen: 24
45.92.162.0/24 maxlen: 24
45.15.184.0/24 maxlen: 24
92.118.229.0/24 maxlen: 24
171.22.119.0/24 maxlen: 24
45.83.141.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:17:9c:6b:7c:fb:a3:d3:58:db:27:a5:50:4e:1a:44:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jul 19 17:58:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0bcb59973a2282279e58c5ee1a2ec8039b6cf05e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2a:2c:c7:97:16:61:1e:8c:1d:14:16:e2:89:
c3:94:49:2b:fd:be:d8:ee:bd:b9:ef:e3:0c:85:8c:
fb:7d:29:aa:28:0c:8b:f9:c8:55:9d:5d:00:28:41:
63:12:18:c8:eb:b2:ce:ea:25:b7:af:d5:a7:0c:2f:
2f:e6:4e:19:03:8e:4a:00:56:49:40:75:d8:6f:b6:
2d:a0:d8:20:6e:5c:5d:9a:15:2d:e3:17:50:9e:94:
a9:57:19:99:26:42:ff:7b:54:00:fe:61:d8:ae:48:
fb:4d:19:2d:76:8f:88:bc:f9:1f:c9:99:8f:a0:23:
cd:f7:c2:dd:70:6c:28:cb:77:e4:f8:c1:46:38:56:
3d:8b:b9:f2:9e:97:dd:3c:f4:71:be:43:93:11:87:
e5:34:16:6b:0e:90:51:10:9c:a6:3f:66:43:3b:bb:
70:34:fa:3e:b4:fe:33:72:60:ac:b7:91:6b:e7:b7:
74:4d:a9:10:2a:c0:ec:22:28:54:60:81:0d:4d:0c:
02:fc:ec:d2:2f:42:4b:6f:c0:51:cf:e6:8a:d2:66:
95:c0:d9:9e:37:e0:db:5a:37:58:d8:94:c8:42:0f:
ee:08:c1:79:6f:bd:1f:d2:9e:0e:a9:ff:17:b8:d6:
4c:ba:e1:16:13:d7:2b:7e:76:92:76:c2:2f:15:e6:
16:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CB:59:97:3A:22:82:27:9E:58:C5:EE:1A:2E:C8:03:9B:6C:F0:5E
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/C8tZlzoigieeWMXuGi7IA5ts8F4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.13.0/24
45.15.140.0/24
45.15.184.0/24
45.83.141.0/24
45.83.148.0/24
45.88.169.0/24
45.92.162.0/24
92.118.229.0/24
171.22.119.0/24
194.76.136.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:cb:7e:ff:32:b8:2e:35:dd:9a:65:4b:49:d2:92:92:8f:0a:
bc:94:d5:dc:ab:56:28:06:7b:b8:30:4e:e5:dd:da:1c:49:4a:
2a:06:75:a7:f1:5f:31:f4:db:06:6f:64:1b:5a:f6:ba:c4:6a:
63:88:94:ac:26:56:45:12:92:6b:f2:c4:fe:f5:e9:40:41:96:
e8:73:82:02:a4:c7:9c:26:95:a6:82:35:6b:e9:cd:50:96:58:
51:60:fe:2f:b3:86:fe:f8:74:d7:cc:6a:82:1e:e9:25:1d:3e:
c5:07:da:8f:81:a6:be:dc:92:44:43:ea:68:c8:3c:4d:e0:e4:
b3:18:c0:ed:0e:10:ee:94:e0:c8:60:a1:14:f7:25:f8:38:93:
bb:a5:42:1e:67:0d:b2:94:c4:ac:7a:9b:10:27:62:c7:34:c5:
51:82:c9:2a:ce:6a:55:24:d0:c2:25:f4:89:d4:d6:33:7c:9c:
3f:8a:8e:90:62:53:b7:65:6d:3f:47:8f:2d:5a:f0:60:85:88:
6e:cf:2d:da:a8:75:10:ca:08:59:f9:36:66:cd:20:c1:34:63:
5e:5d:4b:43:39:94:34:6a:64:00:bb:ba:bf:71:2c:be:5c:83:
ba:cc:2e:f7:49:98:2a:6c:c8:f3:8a:8e:62:df:6c:46:da:41:
60:5b:4e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:22 2023 by rpki-client on console-ams.rpki-client.org