Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/dYPABtl2z58K7irmWUAmV9pTkYg.roa
File: dYPABtl2z58K7irmWUAmV9pTkYg.roa (raw, json)
Hash identifier: vK7MPP+NvxzPvaXJXLILkwse3ma9cBiss7g+mhMI70Q=
Subject key identifier: 75:83:C0:06:D9:76:CF:9F:0A:EE:2A:E6:59:40:26:57:DA:53:91:88
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0182200DFAA51438F5B84BB9342AB23233F3
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/dYPABtl2z58K7irmWUAmV9pTkYg.roa
Signing time: Thu 21 Jul 2022 09:19:23 +0000
ROA not before: Thu 21 Jul 2022 09:19:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211252
IP address blocks: 185.121.120.0/24 maxlen: 24
45.133.1.0/24 maxlen: 24
45.144.225.0/24 maxlen: 24
62.197.136.0/24 maxlen: 24
45.144.227.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:20:0d:fa:a5:14:38:f5:b8:4b:b9:34:2a:b2:32:33:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jul 21 09:19:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7583c006d976cf9f0aee2ae659402657da539188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:72:13:01:79:da:fd:cd:7e:64:65:c8:99:36:
8b:fa:20:08:a7:ac:a0:21:0f:b2:5f:5a:a6:c7:3b:
93:21:44:e7:0f:29:76:d4:76:a5:04:84:dd:d5:31:
33:c9:d5:0c:ed:cc:18:6a:40:fd:45:9c:e0:d4:d5:
50:dc:ee:e5:09:d6:95:d0:6f:c2:bf:4e:38:3a:4b:
e1:d4:af:24:fb:68:a4:d5:a7:e7:9c:4a:84:0b:fd:
f7:8e:23:f5:83:27:f3:56:80:4b:fe:be:31:7a:d8:
91:53:7d:55:31:04:19:dd:f5:99:7c:11:70:a4:53:
fd:32:62:2d:56:7b:f9:c1:e4:3b:8a:7d:65:3a:06:
fd:ea:73:84:65:8d:38:4e:8a:a8:71:3a:a5:81:65:
c0:04:97:e6:52:ca:53:31:b8:f5:04:d3:4d:18:87:
10:b8:cd:21:c9:cf:30:fe:e9:7f:30:ed:b8:34:ae:
63:70:4d:49:8c:68:a9:68:06:f6:9e:f8:a6:bb:22:
b3:a9:98:b9:89:71:d2:81:cb:06:d5:1c:b7:3b:3c:
f7:99:b6:64:51:ed:ed:6c:a7:8b:f6:04:85:70:75:
d2:1b:61:9f:c8:96:ef:6f:a1:b7:14:6d:51:bb:cb:
d4:56:9a:f4:2a:5f:c4:2d:54:ab:ae:e4:f6:10:9b:
98:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:83:C0:06:D9:76:CF:9F:0A:EE:2A:E6:59:40:26:57:DA:53:91:88
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/dYPABtl2z58K7irmWUAmV9pTkYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.1.0/24
45.144.225.0/24
45.144.227.0/24
62.197.136.0/24
185.121.120.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:f2:42:4c:48:ac:cf:9e:43:dd:95:8d:59:d4:2e:e0:58:59:
8e:ca:6b:57:d0:0e:6a:ad:13:58:3b:aa:1b:d1:7b:90:92:b7:
da:f0:22:ea:08:c0:c6:8d:f6:7d:07:2a:38:f4:d3:64:9a:58:
c8:b4:ab:3c:d1:49:29:d0:47:9f:a7:dc:80:bd:6a:1f:b9:6c:
9c:4b:0e:d5:04:3e:7a:e8:e8:36:92:dc:4f:df:e4:4b:2f:e8:
13:03:02:2b:64:f0:24:b9:9b:77:25:f3:c8:a3:89:6f:c0:44:
b3:c7:bc:b0:59:3f:ab:b2:f1:c6:41:3a:05:8a:51:e2:c0:41:
5f:18:e9:a2:05:b8:2a:8a:8f:76:7f:bd:10:22:a9:ef:93:4e:
44:5d:4c:24:30:cd:4e:80:38:de:7d:95:51:9f:ed:3b:5c:01:
e6:02:fd:f2:3b:04:27:8a:e7:8f:5e:34:2d:fd:f6:89:d5:87:
6c:15:ed:b1:7b:0c:39:83:14:1a:17:8b:df:b2:34:1a:f8:ce:
a7:46:26:fa:6a:ae:41:18:c6:fa:62:be:6f:22:d5:31:60:68:
37:97:21:82:d4:fb:b0:78:3f:a7:61:c1:f0:a2:b8:41:4d:8c:
7f:58:d5:7e:e6:5d:a5:07:ff:c6:fc:d8:9e:49:c4:75:57:fa:
de:1b:e9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:02 2023 by rpki-client on console-fra.rpki-client.org