Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/rSZCrIxHh0eG_nZrTObrxbyOpgs.roa
File: rSZCrIxHh0eG_nZrTObrxbyOpgs.roa (raw, json)
Hash identifier: zG/4QF2uYkavM69Fk3JUpN/JDwOjF/URsrvKGWNRhjM=
Subject key identifier: AD:26:42:AC:8C:47:87:47:86:FE:76:6B:4C:E6:EB:C5:BC:8E:A6:0B
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0E5047EF
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/rSZCrIxHh0eG_nZrTObrxbyOpgs.roa
Signing time: Wed 01 Jun 2022 12:31:20 +0000
ROA not before: Wed 01 Jun 2022 12:31:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209854
IP address blocks: 185.244.139.0/24 maxlen: 24
212.119.32.0/23 maxlen: 24
212.119.34.0/24 maxlen: 24
194.169.168.0/22 maxlen: 24
212.119.35.0/24 maxlen: 24
193.218.35.0/24 maxlen: 24
91.190.101.0/24 maxlen: 24
91.190.102.0/23 maxlen: 24
91.190.100.0/24 maxlen: 24
62.197.144.0/20 maxlen: 24
45.135.184.0/24 maxlen: 24
92.62.120.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 240142319 (0xe5047ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jun 1 12:31:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ad2642ac8c47874786fe766b4ce6ebc5bc8ea60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ed:6b:92:5e:5f:b1:2e:f6:9e:2d:37:90:c6:
28:69:fc:14:10:51:d0:22:5c:86:c7:3d:bb:0a:5a:
97:c2:fc:f8:3b:41:f1:14:6a:c3:bd:fb:a8:11:22:
14:4f:6e:00:37:bc:3c:6e:b3:88:04:10:f7:aa:bd:
1f:8f:9f:cc:d1:28:eb:1f:6e:81:7c:cc:7a:56:d4:
00:f0:7a:39:6f:fb:02:c4:ea:88:fd:e5:6e:b6:60:
d3:61:1a:f5:34:23:be:70:f0:96:ee:f5:b3:25:42:
de:5b:d4:64:b3:ef:a4:15:5a:9d:ff:4f:03:73:85:
de:f5:8d:bb:35:7a:e0:20:fe:0f:33:21:9e:f5:e5:
26:f7:18:43:26:73:84:c1:f8:b8:e2:42:93:05:a7:
a5:55:2d:5c:a8:2f:50:e8:98:e9:cf:97:a9:5b:f6:
da:cd:f8:19:18:52:44:e6:7d:7e:bd:2a:5b:5b:ec:
46:fa:5c:5b:6f:3e:1d:b8:f9:a0:ba:8c:e2:c9:ae:
53:c7:0b:66:c8:c6:d3:90:fc:38:a8:a9:cd:a0:93:
96:a7:d6:a5:69:49:8d:a8:cc:f2:25:3f:fa:16:63:
22:43:20:f3:bb:e4:d4:e4:a6:e7:87:b7:49:49:69:
95:77:ef:1d:4b:16:88:e5:2d:6e:a9:9a:cd:fd:f5:
2f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:26:42:AC:8C:47:87:47:86:FE:76:6B:4C:E6:EB:C5:BC:8E:A6:0B
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/rSZCrIxHh0eG_nZrTObrxbyOpgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.184.0/24
62.197.144.0/20
91.190.100.0/22
92.62.120.0/22
185.244.139.0/24
193.218.35.0/24
194.169.168.0/22
212.119.32.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:51:95:bc:c8:19:95:a4:99:8c:79:0f:40:cf:3c:f2:36:b4:
59:7c:85:d9:d2:5b:f7:9b:47:33:14:bc:d4:6a:8f:87:ae:9b:
b4:fc:23:3f:42:01:d1:38:06:4f:c8:9a:ce:a3:8c:07:1e:69:
6c:34:d9:d9:bc:0d:0d:40:b8:16:ed:23:07:42:7a:96:54:40:
76:1b:7a:4e:af:9e:c1:5f:4b:d2:68:a9:49:0e:c5:7c:57:7e:
10:07:a4:5e:6e:70:e8:9d:69:3f:ca:e8:cd:66:89:8c:e8:c8:
db:07:17:94:62:57:54:ad:ad:52:ab:e3:94:36:a2:e6:44:b8:
3d:de:ed:34:70:39:5b:b8:0b:91:3b:95:5b:d3:e4:04:d6:4e:
b3:0c:24:77:e7:e7:dc:c6:53:83:6f:8a:83:7f:d1:45:cc:50:
86:4c:61:4f:e1:f9:29:a1:db:1d:8e:1c:db:0b:fa:b3:15:d7:
cd:50:a9:19:45:37:29:93:c6:71:9a:19:7c:ae:57:83:ca:5b:
f2:61:a8:f0:12:93:0e:cc:82:44:a6:ff:f3:1c:00:68:c0:42:
ce:82:4e:f1:a5:47:6b:8d:fc:c1:65:17:1f:01:61:66:eb:47:
1e:07:99:84:ee:44:6b:24:9a:ee:43:21:c3:c7:4f:5c:79:2c:
d4:93:50:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:03 2023 by rpki-client on console-fra.rpki-client.org