Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/y7bQql0bNDUDcKAedQT8Gq5OQ04.roa
File: y7bQql0bNDUDcKAedQT8Gq5OQ04.roa (raw, json)
Hash identifier: 5EThuqkUotfWVP59nUHU05pimr3aFQvAIkTmk/zh8fM=
Subject key identifier: CB:B6:D0:AA:5D:1B:34:35:03:70:A0:1E:75:04:FC:1A:AE:4E:43:4E
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0D142FBE
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/y7bQql0bNDUDcKAedQT8Gq5OQ04.roa
Signing time: Tue 25 Jan 2022 11:58:07 +0000
ROA not before: Tue 25 Jan 2022 11:58:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13213
IP address blocks: 185.192.68.0/24 maxlen: 24
45.85.105.0/24 maxlen: 24
45.80.158.0/24 maxlen: 24
45.80.159.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219426750 (0xd142fbe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 25 11:58:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cbb6d0aa5d1b34350370a01e7504fc1aae4e434e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:70:a2:b1:fc:d2:77:fa:99:3e:bf:eb:fe:97:
c9:f7:11:64:33:79:5b:fb:57:f4:64:7a:6b:d1:19:
cd:bd:d7:8c:98:d1:5e:9d:91:42:99:e0:b9:ae:06:
0f:16:44:55:97:11:a5:98:79:7f:39:83:b4:42:49:
c2:00:0e:86:e9:3b:04:5c:db:84:17:e5:69:53:f4:
82:2c:3e:05:49:44:2e:86:41:a1:7f:e1:28:27:7f:
b1:80:2a:33:1c:ca:b3:f7:64:ae:29:86:00:1d:44:
c9:35:46:43:d1:a1:36:7d:32:0a:a4:4c:4d:e3:c6:
a1:dc:79:b5:f7:bc:b0:c8:a9:7b:aa:d0:e5:0a:14:
43:22:2b:c5:8b:96:fb:e3:a7:4d:4b:c1:47:17:0a:
4f:cf:31:75:46:bc:c9:8f:79:18:ad:47:f9:95:48:
8f:e7:45:c2:0e:f7:71:93:33:ae:b6:b5:2c:8c:42:
b6:b3:a6:24:cb:9e:88:62:bc:64:92:97:15:d1:09:
b2:05:b7:28:a7:e7:bb:1b:b9:eb:06:cd:c9:f3:0b:
8c:99:ea:43:e8:04:ae:ac:34:40:ad:fc:53:45:ad:
6a:88:4e:8b:58:4b:b2:b8:8d:65:d8:73:08:d1:f0:
39:99:30:95:ec:ee:b8:45:76:37:2e:aa:05:04:0d:
7d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B6:D0:AA:5D:1B:34:35:03:70:A0:1E:75:04:FC:1A:AE:4E:43:4E
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/y7bQql0bNDUDcKAedQT8Gq5OQ04.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.158.0/23
45.85.105.0/24
185.192.68.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:71:7d:ae:81:2c:34:55:83:e9:21:78:fd:1d:84:fe:9c:4e:
f7:ec:51:21:80:40:cd:69:09:7c:ac:ee:fa:ad:0a:fe:95:b5:
19:d0:52:44:46:84:56:7d:cb:a5:1c:c8:8a:20:35:c1:30:6b:
b8:b8:f6:ca:3b:9c:fa:e0:56:a3:57:87:1b:35:a5:2c:c9:e2:
c7:79:4e:96:dd:a8:8b:77:2f:39:4e:1d:7b:51:3a:30:39:a4:
c3:84:3a:fa:3a:2c:61:e8:64:68:cf:73:c1:25:4a:b1:99:d6:
49:f8:96:03:73:33:8c:82:72:40:bd:b1:12:c4:6f:5d:1f:8e:
9d:ef:ae:36:f2:00:97:97:d0:dc:ae:b1:31:70:68:b6:b8:4f:
4b:3b:22:46:59:81:75:a8:33:3a:54:d4:50:80:eb:c9:db:e6:
76:57:f8:8b:ed:1a:9b:70:7a:9f:3d:fe:4a:f9:87:8f:43:7e:
e2:57:c9:5e:d5:22:6b:0e:d9:50:9f:c1:86:20:4c:67:c4:b6:
f8:12:3f:e5:d1:d0:80:a6:79:43:a8:fd:39:24:10:d9:94:07:
55:68:60:96:30:60:f3:dc:27:12:50:82:2b:b6:0c:12:ef:17:
a8:ea:51:a8:2d:21:07:83:c8:b2:a4:27:23:e8:55:85:6b:2a:
b9:ab:d3:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:57 2023 by rpki-client on console-ams.rpki-client.org