Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/CQkb17Jt6ovAGGZeE40uxG7Xdlk.roa
File: CQkb17Jt6ovAGGZeE40uxG7Xdlk.roa (raw, json)
Hash identifier: iOjuKxYvFk41aZRSp9uy0Pp6NhyONinz5tGS1zOfz9I=
Subject key identifier: 09:09:1B:D7:B2:6D:EA:8B:C0:18:66:5E:13:8D:2E:C4:6E:D7:76:59
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0CA77EF0
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/CQkb17Jt6ovAGGZeE40uxG7Xdlk.roa
Signing time: Sat 01 Jan 2022 05:04:50 +0000
ROA not before: Sat 01 Jan 2022 05:04:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 45.8.69.0/24 maxlen: 24
45.8.71.0/24 maxlen: 24
194.242.2.0/24 maxlen: 24
45.85.104.0/24 maxlen: 24
193.19.108.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 212303600 (0xca77ef0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 05:04:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=09091bd7b26dea8bc018665e138d2ec46ed77659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2f:7c:5c:41:14:12:10:d0:b0:0f:93:54:b5:
89:45:08:ee:48:d1:0c:58:14:3b:8e:de:23:74:d9:
a1:70:91:8e:ec:e2:46:66:5d:c0:86:d5:f6:29:30:
75:ad:e8:c1:59:88:e1:6e:dd:cc:57:c1:ae:8e:d8:
1b:3b:11:6a:6e:e5:9d:e3:49:81:53:2d:37:70:5e:
cf:24:85:39:08:71:b0:74:41:84:48:9a:71:0b:49:
9a:56:78:cf:52:c1:a1:9a:c3:64:33:3c:10:25:eb:
4f:84:e2:81:79:56:2d:1c:09:d3:42:33:6f:df:af:
f1:04:8e:d7:89:d5:99:17:0e:b0:67:91:33:9a:24:
6c:8a:7e:51:6f:d8:21:d2:3e:52:4e:d8:6f:7c:75:
2a:b9:09:c3:39:28:a7:0c:b3:bc:11:d9:ce:38:37:
99:1b:43:63:14:80:67:af:80:f6:59:73:84:86:ff:
64:3f:db:bc:6d:c3:c1:d3:b4:19:63:cf:83:7e:5f:
51:39:89:4e:d8:69:d4:07:dd:7f:f7:9d:0e:41:16:
da:5d:9a:07:38:0f:c5:53:80:ca:be:fe:8c:fe:9d:
47:60:a1:24:84:9c:bd:09:f9:50:7b:ac:f7:80:78:
32:7a:50:5f:6e:5f:a3:c9:78:84:0c:46:f2:00:c7:
b4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:09:1B:D7:B2:6D:EA:8B:C0:18:66:5E:13:8D:2E:C4:6E:D7:76:59
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/CQkb17Jt6ovAGGZeE40uxG7Xdlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.69.0/24
45.8.71.0/24
45.85.104.0/24
193.19.108.0/24
194.242.2.0/24
Signature Algorithm: sha256WithRSAEncryption
67:49:04:4d:cc:ff:19:24:82:ed:20:df:be:15:5e:72:5b:5f:
e6:08:84:87:5d:36:a6:19:82:d1:68:c6:d7:00:42:af:f2:e8:
86:ac:64:bd:b2:5c:e6:fe:49:e4:93:3a:d6:10:2e:e5:35:4c:
a2:95:46:60:94:c7:de:13:92:d2:19:9b:b9:c9:c1:be:a0:53:
2d:83:10:6c:bb:91:6c:99:43:a5:9d:6a:fc:f7:de:80:f2:87:
04:c4:00:83:36:fc:aa:f3:9f:aa:38:8f:15:86:b2:21:8b:2b:
62:c5:1e:22:16:7c:43:ba:55:2e:8c:7c:2e:11:36:3c:74:72:
f7:ef:de:af:34:01:3e:76:cb:4f:48:a5:5a:e5:ff:e5:c0:1b:
38:58:46:9b:eb:d9:f9:26:cb:0c:72:ea:ca:f1:ee:a6:fe:c3:
a4:0a:32:76:a3:d2:c8:3b:c7:b0:f3:55:13:99:3f:14:b0:2f:
80:fc:38:da:3c:8c:9c:c9:66:7e:47:5d:ec:63:21:ba:cd:fe:
e6:3e:d6:b7:78:36:cd:ce:f8:5d:ed:93:88:b5:8e:24:83:51:
eb:49:5d:35:6d:fe:12:24:38:31:ae:37:b2:77:7d:92:73:3a:
f9:3b:37:5e:87:5b:36:04:fe:be:8a:dc:0f:af:94:f9:85:1a:
95:96:b8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:53 2023 by rpki-client on console-ams.rpki-client.org