Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/V5ARrgOo6jYB6s9_Q3HthtmhgIg.roa
File: V5ARrgOo6jYB6s9_Q3HthtmhgIg.roa (raw, json)
Hash identifier: 25kfJUp4kKyBq+CT/i7HqKMoSh68v1iq1cN8UOOkRjo=
Subject key identifier: 57:90:11:AE:03:A8:EA:36:01:EA:CF:7F:43:71:ED:86:D9:A1:80:88
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0183F9F2FA675381CBC983105AC06D1A1F48
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/V5ARrgOo6jYB6s9_Q3HthtmhgIg.roa
Signing time: Fri 21 Oct 2022 09:49:54 +0000
ROA not before: Fri 21 Oct 2022 09:49:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14178
IP address blocks: 194.61.42.0/23 maxlen: 24
185.35.228.0/22 maxlen: 24
45.65.92.0/22 maxlen: 24
193.187.136.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f9:f2:fa:67:53:81:cb:c9:83:10:5a:c0:6d:1a:1f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Oct 21 09:49:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=579011ae03a8ea3601eacf7f4371ed86d9a18088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:81:92:33:f3:43:62:26:b5:f6:9b:23:e4:6c:
06:8d:f9:6d:c7:25:f0:42:d4:48:0a:fa:d5:e7:f3:
e3:13:ea:db:eb:4b:4d:55:a7:2d:9d:c8:0d:80:5b:
57:37:b5:db:1d:c1:88:d7:8b:c4:9b:1b:19:93:fb:
34:6d:ed:ae:3c:b5:2d:07:27:bc:e9:fa:92:d7:33:
29:3e:51:61:8d:51:7e:81:58:41:f5:5f:5a:32:51:
70:d3:80:26:b7:f9:c5:b2:87:a8:3a:c6:cb:5f:ca:
26:45:47:f7:51:cf:13:b1:6e:dd:41:03:73:10:a7:
66:09:82:b8:b2:18:5f:7d:ee:58:6c:f8:75:e5:78:
59:42:40:f0:18:85:ca:48:b3:d0:6b:49:69:71:df:
94:65:d8:dc:9c:1c:c1:67:78:71:c1:23:ad:87:d0:
ea:e2:1e:1c:7d:b6:f9:e0:a0:13:9e:3e:49:04:fd:
22:1f:c0:f4:58:7c:b9:b3:d8:1e:9a:18:75:1c:86:
a7:19:2d:e7:c8:c2:4e:f6:e5:55:bd:48:65:b3:31:
96:c8:b8:3f:7e:a0:81:60:b4:e6:a9:c2:f1:f7:19:
e1:40:d5:21:9d:0a:e7:5b:c6:cf:a6:3e:7e:9b:3a:
b8:22:2e:5f:0a:19:fe:4c:35:1b:d8:2a:ff:5d:a4:
e8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:90:11:AE:03:A8:EA:36:01:EA:CF:7F:43:71:ED:86:D9:A1:80:88
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/V5ARrgOo6jYB6s9_Q3HthtmhgIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.92.0/22
185.35.228.0/22
193.187.136.0/22
194.61.42.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:bf:a7:68:d5:35:a9:6e:a2:12:c1:39:16:ee:b5:70:91:f6:
39:54:e3:29:2c:14:8f:75:51:e7:c1:e6:4d:38:9e:e2:23:86:
7c:47:fb:c8:6c:00:55:fc:38:86:29:fe:21:f9:7f:e4:88:c0:
de:d0:36:12:77:9a:8a:86:f8:4a:b5:98:12:d3:18:cf:c1:d0:
11:2a:9d:f9:94:86:71:a2:0a:59:6e:2c:c4:70:a5:a7:ec:2a:
f4:9a:1e:94:6b:1d:31:2e:ba:77:a6:1d:a6:8c:7b:d3:b4:f8:
c1:ad:dc:eb:09:86:c5:99:f7:df:c0:99:59:78:7e:a7:b3:dd:
17:86:50:1d:a2:9c:a4:46:92:d0:6a:e0:b7:5f:fe:a5:b6:ac:
b3:8b:c9:97:74:ed:28:ac:aa:00:c4:ca:ba:72:b2:e1:b6:77:
b9:09:87:a9:37:af:d9:8b:4b:0c:b2:1d:09:a4:15:57:9f:6a:
42:33:a0:a2:5a:e3:65:32:a9:ac:18:fa:6b:d7:55:4e:05:2c:
9b:a7:d0:c1:ed:30:a8:45:61:4e:18:65:37:27:85:45:74:b2:
01:3f:2b:90:8d:fe:ad:6f:36:3f:98:95:10:f6:3c:7c:a2:5c:
3d:84:46:24:78:82:b1:d2:d2:c7:35:7d:c3:15:7a:b2:88:fa:
b2:ea:7b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:02 2023 by rpki-client on console-fra.rpki-client.org