Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/EyRE54KRnpIItXaFNxVi5xElIm0.roa
File: EyRE54KRnpIItXaFNxVi5xElIm0.roa (raw, json)
Hash identifier: iL66AAPHTGRRr7FHIaL16WX6jMzi1jcxTdMuWNEHmzY=
Subject key identifier: 13:24:44:E7:82:91:9E:92:08:B5:76:85:37:15:62:E7:11:25:22:6D
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0CC9035F
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/EyRE54KRnpIItXaFNxVi5xElIm0.roa
Signing time: Sat 01 Jan 2022 05:05:09 +0000
ROA not before: Sat 01 Jan 2022 05:05:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211252
IP address blocks: 185.121.120.0/24 maxlen: 24
45.133.1.0/24 maxlen: 24
45.144.225.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214500191 (0xcc9035f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 05:05:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=132444e782919e9208b57685371562e71125226d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:91:6f:bb:0a:07:81:a1:34:fa:69:32:4f:
4d:70:95:3c:8e:40:aa:0d:c2:5c:bf:34:d3:da:41:
a3:16:a8:a2:d1:f1:a7:8f:5e:44:14:ad:2c:8d:c6:
2b:90:c4:e2:a4:8f:e5:e8:dc:d5:e5:d7:3a:aa:04:
b0:16:70:57:22:64:69:72:fe:ff:48:f2:8e:ce:35:
78:d7:3b:58:da:8e:34:69:30:22:00:70:bf:54:db:
e0:88:2a:25:59:1a:4b:f9:c6:78:1f:68:7e:fb:53:
6d:0d:02:e4:0c:ad:7c:e4:a3:42:fb:39:06:7b:d5:
88:5f:98:bc:8c:45:bc:76:ba:61:3b:e9:a5:9d:d4:
28:53:5a:db:22:d4:4d:8d:b0:59:0a:bc:7d:b9:30:
07:49:e5:32:0a:30:be:62:bd:b3:08:71:26:a6:77:
e3:1f:42:ac:6c:94:56:31:70:30:f8:3e:d2:45:bf:
6c:f3:70:fa:7f:21:f4:ad:68:b0:6a:00:c5:02:ba:
ce:e8:b8:0b:95:9e:f2:73:61:73:57:25:f8:62:3f:
88:1e:e5:c5:80:d3:a8:ee:86:50:9c:97:f4:f6:44:
0b:15:cb:7c:f8:aa:e9:58:8f:81:89:3b:cf:29:4c:
ff:50:7a:65:b2:e1:48:9d:df:79:3d:f8:ab:05:a2:
5a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:24:44:E7:82:91:9E:92:08:B5:76:85:37:15:62:E7:11:25:22:6D
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/EyRE54KRnpIItXaFNxVi5xElIm0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.1.0/24
45.144.225.0/24
185.121.120.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:6e:22:c4:6b:51:79:b9:4f:6e:64:8c:38:ff:9a:cd:08:64:
e5:bb:74:b0:a2:d2:ab:19:3b:18:fb:72:68:02:46:75:15:02:
0d:ea:5f:1f:d9:b0:d8:cd:dc:44:cf:0f:ae:2b:4e:bb:72:e9:
bc:02:5a:40:bd:6d:04:8e:bd:cc:59:2d:fc:b8:f5:6c:fe:1b:
31:47:28:c1:5f:43:a4:ae:ae:49:ac:a2:2c:e2:4b:1a:bf:15:
bf:85:18:82:26:f2:38:af:1c:da:88:e1:f5:f8:e0:6e:4a:6a:
c5:de:23:4e:0c:9b:e5:ee:4a:8b:06:c3:85:bd:f7:dd:92:6a:
21:22:c5:72:01:6a:ba:e6:e2:ed:82:7f:c0:6b:2f:e5:e5:dd:
59:56:24:82:00:f7:f5:a2:2e:92:09:c9:55:67:9c:c0:2f:a9:
c6:db:23:a0:57:ea:4e:53:9a:10:59:89:27:95:51:dd:26:a5:
f6:ca:2a:d1:54:52:d7:e9:46:dd:fa:31:be:af:7f:a7:10:19:
82:2d:ec:79:b5:08:36:a8:4b:cf:91:de:f4:f1:ce:b2:49:21:
2e:9d:58:9e:15:6f:c4:77:8f:45:60:aa:de:45:c8:58:6e:3e:
e0:ec:0e:b7:16:e7:11:1e:f6:65:81:36:a7:e1:c2:79:6d:9f:
b4:96:94:40
-----BEGIN CERTIFICATE-----
MIIE+zCCA+OgAwIBAgIEDMkDXzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygz
NmMyYTRiN2Q1ZDczYzViNTcwNDYyMjNiZjMwZWI2NTMwMDViMGUyMB4XDTIyMDEw
MTA1MDUwOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMTMyNDQ0ZTc4Mjkx
OWU5MjA4YjU3Njg1MzcxNTYyZTcxMTI1MjI2ZDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMPDkW+7CgeBoTT6aTJPTXCVPI5Aqg3CXL8009pBoxaootHx
p49eRBStLI3GK5DE4qSP5ejc1eXXOqoEsBZwVyJkaXL+/0jyjs41eNc7WNqONGkw
IgBwv1Tb4IgqJVkaS/nGeB9ofvtTbQ0C5AytfOSjQvs5BnvViF+YvIxFvHa6YTvp
pZ3UKFNa2yLUTY2wWQq8fbkwB0nlMgowvmK9swhxJqZ34x9CrGyUVjFwMPg+0kW/
bPNw+n8h9K1osGoAxQK6zui4C5We8nNhc1cl+GI/iB7lxYDTqO6GUJyX9PZECxXL
fPiq6ViPgYk7zylM/1B6ZbLhSJ3feT34qwWiWgcCAwEAAaOCAhUwggIRMB0GA1Ud
DgQWBBQTJETngpGekgi1doU3FWLnESUibTAfBgNVHSMEGDAWgBQ2wqS31dc8W1cE
YiO/MOtlMAWw4jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L05zS2t0OVhYUEZ0WEJHSWp2ekRyWlRBRnNPSS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYmMvOGRkODVhLWJmOGYtNDI1ZS1hMjRiLTJjY2VkYjk2NmE1OC8x
L0V5UkU1NEtSbnBJSXRYYUZOeFZpNXhFbEltMC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMv
OGRkODVhLWJmOGYtNDI1ZS1hMjRiLTJjY2VkYjk2NmE1OC8xL05zS2t0OVhYUEZ0
WEJHSWp2ekRyWlRBRnNPSS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAC2FAQMEAC2Q4QMEALl5eDANBgkq
hkiG9w0BAQsFAAOCAQEAOm4ixGtReblPbmSMOP+azQhk5bt0sKLSqxk7GPtyaAJG
dRUCDepfH9mw2M3cRM8PritOu3LpvAJaQL1tBI69zFkt/Lj1bP4bMUcowV9DpK6u
SayiLOJLGr8Vv4UYgibyOK8c2ojh9fjgbkpqxd4jTgyb5e5KiwbDhb333ZJqISLF
cgFquubi7YJ/wGsv5eXdWVYkggD39aIukgnJVWecwC+pxtsjoFfqTlOaEFmJJ5VR
3Sal9soq0VRS1+lG3foxvq9/pxAZgi3sebUINqhLz5He9PHOskkhLp1YnhVvxHeP
RWCq3kXIWG4+4OwOtxbnER72ZYE2p+HCeW2ftJaUQA==
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:00 2023 by rpki-client on console-fra.rpki-client.org