Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1-K2sUb9temtCE7n2ozZjpsxB6QY.roa
File: 1-K2sUb9temtCE7n2ozZjpsxB6QY.roa (raw, json)
Hash identifier: QNPa6UhRiMGKceP/1gtFcY0P9yI3MSI9uBqWYx6Kl1A=
Subject key identifier: F8:AD:AC:51:BF:6D:7A:6B:42:13:B9:F6:A3:36:63:A6:CC:41:E9:06
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01847EFCC77F210B8E56D8AE93D4FE7603EC
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1-K2sUb9temtCE7n2ozZjpsxB6QY.roa
Signing time: Wed 16 Nov 2022 05:50:06 +0000
ROA not before: Wed 16 Nov 2022 05:50:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 31122
IP address blocks: 45.92.3.0/24 maxlen: 24
45.89.37.0/24 maxlen: 24
45.140.134.0/24 maxlen: 24
45.89.39.0/24 maxlen: 24
91.190.97.0/24 maxlen: 24
91.190.105.0/24 maxlen: 24
45.88.21.0/24 maxlen: 24
45.88.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7e:fc:c7:7f:21:0b:8e:56:d8:ae:93:d4:fe:76:03:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Nov 16 05:50:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f8adac51bf6d7a6b4213b9f6a33663a6cc41e906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:92:fb:06:78:6e:c2:97:ba:3c:9d:36:a3:
68:e6:53:db:fb:21:c5:b9:59:d9:ec:b1:f3:58:25:
7e:31:cf:4a:9a:52:e7:f2:7e:fc:3a:59:e0:b7:3a:
6e:6a:d6:d9:a9:48:a3:58:dc:32:9b:87:09:22:37:
80:b2:df:12:18:03:a2:d8:af:99:83:69:68:60:04:
16:26:84:08:7e:43:e4:73:71:e2:22:0d:99:01:cc:
55:bf:0f:1b:30:f0:80:12:05:2e:b5:de:2b:71:8c:
0c:ae:5b:73:5e:83:ca:66:33:b4:00:96:5c:c8:55:
e4:12:45:cc:6d:f3:78:25:56:cb:70:de:0d:f6:66:
0c:f7:bc:ab:cd:ad:cc:33:88:c4:16:cd:49:d8:42:
1c:8a:d3:3b:8e:e8:72:cc:01:8c:92:e6:03:85:f6:
91:20:d3:c7:86:2f:1c:f5:67:c3:d8:dc:fa:e8:f6:
c2:43:06:a1:90:9d:4f:c6:b0:d1:dd:2e:a7:18:2b:
4e:db:4b:fb:ec:5c:bf:ea:3a:1e:fc:d5:92:19:23:
16:95:b3:1f:80:07:b9:7f:10:e3:05:63:99:5f:18:
dc:4d:ef:16:02:71:b5:c7:6e:85:c5:4e:8e:26:84:
34:3a:d2:c5:f3:70:c0:cf:4e:d8:e7:50:94:5e:f5:
30:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AD:AC:51:BF:6D:7A:6B:42:13:B9:F6:A3:36:63:A6:CC:41:E9:06
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1-K2sUb9temtCE7n2ozZjpsxB6QY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.21.0/24
45.88.23.0/24
45.89.37.0/24
45.89.39.0/24
45.92.3.0/24
45.140.134.0/24
91.190.97.0/24
91.190.105.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:00:e2:72:08:b9:55:1b:90:fb:48:d3:7d:a2:58:2b:72:2b:
bd:f7:8f:7f:1c:90:cb:d9:39:ac:41:a8:95:5a:1a:86:fc:0d:
2f:e1:6e:41:c8:03:6e:92:95:8a:1e:df:e3:36:11:2f:42:4d:
d5:b8:65:a7:cb:15:37:4b:13:aa:7d:4c:b0:d9:10:d2:73:f5:
f8:42:aa:2d:e4:84:48:ad:a0:22:73:a7:ef:65:71:9f:91:b7:
d6:ab:4d:56:3d:92:1e:02:c2:17:ea:ef:36:78:6d:fe:ca:b2:
d6:f8:93:67:2e:3c:f8:a3:b5:e5:fb:81:f9:b8:2e:4c:5a:f6:
cd:52:5b:3a:d8:ab:9a:b4:c4:5c:ba:1c:64:13:3d:42:b7:b5:
b4:d4:b7:c4:e4:84:7a:8c:a4:e3:b0:5c:99:ac:73:fb:a2:f1:
0f:b8:cd:65:0f:0e:51:ec:c9:0f:9d:ce:90:b3:93:81:18:22:
76:6c:a2:33:66:3f:74:46:fa:19:f3:ab:e2:0b:37:bb:36:a8:
46:bd:0c:15:ca:1c:62:0b:be:06:f0:7f:bf:5c:32:a2:f1:bb:
51:23:0c:cb:8a:1b:e5:4e:b1:5a:a6:b6:20:03:c5:16:74:2c:
b7:9f:66:28:4b:fe:f2:0c:81:a9:61:96:2c:46:fd:02:04:e6:
29:68:2b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:57 2023 by rpki-client on console-fra.rpki-client.org