Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/cMPfv5SXFIu09Fk3xdn-IpFcB2w.roa
File: cMPfv5SXFIu09Fk3xdn-IpFcB2w.roa (raw, json)
Hash identifier: JE8zpXf1ePfGMDaLPOgdTZTanLdN85TnqtpimzUkjAk=
Subject key identifier: 70:C3:DF:BF:94:97:14:8B:B4:F4:59:37:C5:D9:FE:22:91:5C:07:6C
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 07A95FFB
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/cMPfv5SXFIu09Fk3xdn-IpFcB2w.roa
Signing time: Sat 01 Jan 2022 16:06:00 +0000
ROA not before: Sat 01 Jan 2022 16:06:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34962
IP address blocks: 45.88.176.0/24 maxlen: 24
45.88.177.0/24 maxlen: 24
194.76.136.0/24 maxlen: 24
45.83.84.0/24 maxlen: 24
45.89.96.0/24 maxlen: 24
45.89.99.0/24 maxlen: 24
92.118.237.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128540667 (0x7a95ffb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 16:06:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=70c3dfbf9497148bb4f45937c5d9fe22915c076c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:89:42:a8:c8:4e:5b:ad:e9:97:4d:84:ac:53:
60:d2:2b:5b:16:f4:88:ea:3e:d6:a2:80:d4:e5:76:
ff:a8:31:40:72:4b:d7:13:ae:71:05:ad:19:52:e6:
81:5a:05:dd:09:3f:5f:94:5e:3c:12:59:03:bb:78:
f1:00:f0:05:0a:cf:0a:e0:15:28:55:ed:04:74:f6:
ed:cd:f7:ba:5c:be:88:52:0f:94:54:d1:5c:b9:e0:
89:79:18:8d:ab:b9:24:75:c7:b1:b3:34:d6:11:bd:
c5:3b:b1:5c:79:04:69:62:2e:12:f6:71:fe:c4:a0:
2c:ff:b6:c7:dd:7c:5d:fc:f2:66:e8:17:39:e0:53:
c4:91:36:df:a4:03:49:51:03:b5:5b:7a:78:1b:1d:
e1:8b:ed:fd:de:bf:f0:fe:31:d2:75:7e:3a:ec:76:
8c:20:dd:5a:37:58:5c:c1:a9:64:6f:78:30:83:46:
75:88:00:f5:35:92:c3:27:03:e2:7e:c3:f1:20:9c:
6a:11:5e:69:67:64:33:0c:c9:74:a8:42:9a:b1:e2:
84:ed:8a:b5:13:cc:46:1a:71:75:c0:ff:71:ea:7a:
52:fe:80:85:c0:e4:a0:ac:77:8f:75:4f:1f:f4:ff:
26:c8:20:02:87:45:6b:16:48:93:67:3a:0f:a9:42:
44:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C3:DF:BF:94:97:14:8B:B4:F4:59:37:C5:D9:FE:22:91:5C:07:6C
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/cMPfv5SXFIu09Fk3xdn-IpFcB2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.84.0/24
45.88.176.0/23
45.89.96.0/24
45.89.99.0/24
92.118.237.0/24
194.76.136.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:ee:2e:27:51:26:db:de:ce:9a:f6:6d:19:3d:dc:b4:7d:2f:
88:3c:82:ce:32:a6:4f:8b:9d:a4:f3:10:f8:fc:f8:cf:13:36:
32:0d:54:4d:e3:a4:51:57:17:ea:b9:ed:55:0c:c5:b0:40:9b:
19:69:09:95:b4:b0:e0:70:13:1d:84:3f:27:24:f2:0b:7a:8c:
01:26:4c:59:aa:f2:db:48:d5:03:9d:ce:9e:a4:84:31:0e:b0:
22:ce:5c:dd:d7:ca:ec:42:d8:bb:b8:30:29:bd:63:5f:50:1b:
6c:a2:c6:0c:4f:f9:44:d2:05:ae:92:ea:2f:15:07:e9:26:47:
62:6d:d4:d9:f6:79:0d:43:75:8c:18:fc:a2:59:e3:d9:31:53:
8f:7d:fa:86:e6:f1:c4:09:4e:cb:60:91:5d:d4:16:ee:dd:ad:
60:ae:8d:b9:af:44:c4:66:b5:1e:02:e5:4f:6f:c9:dc:69:88:
73:17:7c:7e:ad:7d:ff:88:0d:e9:31:f6:eb:57:f9:d0:9f:69:
4d:f5:8d:23:a0:c6:86:74:02:39:67:4f:a8:81:2c:78:54:7b:
02:6a:d2:04:85:7d:2a:7f:99:af:72:af:bb:14:03:ee:68:66:
08:32:86:14:86:71:8b:6d:41:d5:00:1d:46:52:7b:a3:f0:b9:
91:fa:36:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:25 2024 by rpki-client on console-fra.rpki-client.org