Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Vi8voOGPV0D96CgkjGQpHQjODmU.roa
File: Vi8voOGPV0D96CgkjGQpHQjODmU.roa (raw, json)
Hash identifier: 9ySC6fdU3n8x0dTzGhMdrbzvClt3rIqShP44cd/vZzU=
Subject key identifier: 56:2F:2F:A0:E1:8F:57:40:FD:E8:28:24:8C:64:29:1D:08:CE:0E:65
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 07AE0E98
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Vi8voOGPV0D96CgkjGQpHQjODmU.roa
Signing time: Sat 01 Jan 2022 16:06:03 +0000
ROA not before: Sat 01 Jan 2022 16:06:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 45.8.184.0/22 maxlen: 24
45.8.192.0/22 maxlen: 24
45.8.188.0/22 maxlen: 24
45.8.196.0/22 maxlen: 24
45.8.204.0/22 maxlen: 24
45.8.200.0/22 maxlen: 24
85.208.104.0/22 maxlen: 24
193.168.208.0/22 maxlen: 24
45.66.152.0/22 maxlen: 24
5.180.80.0/22 maxlen: 24
5.180.232.0/22 maxlen: 24
5.180.32.0/22 maxlen: 24
85.209.160.0/22 maxlen: 24
5.180.48.0/22 maxlen: 24
85.208.112.0/22 maxlen: 24
5.253.36.0/22 maxlen: 24
5.253.44.0/22 maxlen: 24
45.8.252.0/22 maxlen: 24
45.9.0.0/22 maxlen: 24
45.9.4.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128847512 (0x7ae0e98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 16:06:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=562f2fa0e18f5740fde828248c64291d08ce0e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2b:b2:5e:82:ad:ea:ca:ed:8c:85:71:de:a3:
1c:80:b5:d1:8d:55:41:a7:5c:e7:05:aa:20:ff:0e:
4c:e5:67:2e:c3:e9:d4:91:c3:dd:63:0f:e1:0d:7c:
77:5b:d5:2e:8c:dd:f1:6c:8a:29:10:86:69:26:c1:
72:87:df:ff:00:f0:df:16:14:c6:5e:39:dc:47:1c:
19:62:cf:b3:3d:8c:43:64:83:ad:7b:15:5a:1b:03:
a7:ac:e3:e8:56:02:d3:ab:9e:a8:a8:1c:33:ad:0a:
ef:0b:f5:9d:14:1b:49:59:32:05:14:12:84:51:a9:
65:e9:25:f5:54:96:50:bd:92:a2:b6:84:93:26:24:
b8:cc:8f:5d:c3:ee:65:81:c4:71:9c:fb:10:95:7f:
67:f6:68:14:97:63:aa:8f:38:aa:ec:89:e7:4a:05:
ee:1d:84:b9:b8:61:5e:3c:b7:91:ec:1e:46:dc:8b:
56:2e:f5:24:2d:3a:04:15:27:7e:cf:fc:e1:4e:81:
2f:a1:4f:23:31:59:aa:f4:ca:a4:4e:d9:88:be:90:
dd:b9:6b:61:20:2e:32:2f:af:87:5f:8b:39:f2:07:
3e:58:a8:d5:4f:3e:f8:9c:64:b4:71:07:18:b7:02:
a7:96:e5:95:aa:1e:6d:61:cb:64:8f:e3:74:00:4d:
38:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2F:2F:A0:E1:8F:57:40:FD:E8:28:24:8C:64:29:1D:08:CE:0E:65
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Vi8voOGPV0D96CgkjGQpHQjODmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.32.0/22
5.180.48.0/22
5.180.80.0/22
5.180.232.0/22
5.253.36.0/22
5.253.44.0/22
45.8.184.0-45.8.207.255
45.8.252.0-45.9.7.255
45.66.152.0/22
85.208.104.0/22
85.208.112.0/22
85.209.160.0/22
193.168.208.0/22
Signature Algorithm: sha256WithRSAEncryption
62:71:d9:9f:9d:08:2e:28:65:75:a6:18:2e:7c:a6:e5:46:04:
df:a4:25:a7:1a:17:94:4b:77:32:61:4a:89:24:7c:63:e6:31:
00:f4:f3:3c:d8:be:3c:8c:7c:03:69:1c:dd:4e:ef:bf:d5:12:
f5:8c:18:a7:17:84:2c:91:ce:0f:5e:fc:91:b3:9b:24:8f:d2:
7c:45:b1:a3:1c:fc:55:13:4e:bc:9b:bd:40:a2:f8:a7:f4:57:
ee:a4:15:67:3b:84:5b:07:d9:3f:6d:18:6a:2f:fc:76:92:33:
3b:b2:29:ea:51:33:e9:c6:99:12:d9:55:ce:7c:d1:d1:b5:4e:
14:a3:f1:66:60:1b:b4:41:cc:00:df:64:34:e4:3b:6e:fc:17:
c5:54:bb:0a:fa:e2:12:3b:d8:bf:b5:d1:c6:cc:ff:da:8f:77:
45:d7:67:76:46:e5:0b:93:68:9b:80:03:5f:e2:d8:ae:28:4e:
23:0d:89:18:be:23:44:9a:84:dc:b5:da:9b:2d:0f:3d:d8:bb:
98:81:c4:71:b8:f5:0e:37:ac:47:e1:65:9c:7b:75:35:c6:47:
36:88:42:5c:7f:4b:f1:15:fa:44:53:6f:03:94:8c:07:9c:c4:
fb:86:ac:11:33:db:4e:c4:96:e9:40:fb:d7:ee:dd:8e:09:f5:
df:bd:c9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:22 2023 by rpki-client on console-ams.rpki-client.org