Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/C3fTGxvSzvTeQwpdkqC8DuxL-3A.roa
File: C3fTGxvSzvTeQwpdkqC8DuxL-3A.roa (raw, json)
Hash identifier: GPkuTN4poNs9TOFCi7LYIx6x/tUrqr+SLIrRqhJ4wXM=
Subject key identifier: 0B:77:D3:1B:1B:D2:CE:F4:DE:43:0A:5D:92:A0:BC:0E:EC:4B:FB:70
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 03CB1B81
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/C3fTGxvSzvTeQwpdkqC8DuxL-3A.roa
Signing time: Fri 11 Feb 2022 13:02:23 +0000
ROA not before: Fri 11 Feb 2022 13:02:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205090
IP address blocks: 185.112.101.0/24 maxlen: 24
185.112.102.0/24 maxlen: 24
185.112.103.0/24 maxlen: 24
45.9.73.0/24 maxlen: 24
45.9.75.0/24 maxlen: 24
193.162.143.0/24 maxlen: 24
185.105.90.0/24 maxlen: 24
185.105.91.0/24 maxlen: 24
185.105.88.0/24 maxlen: 24
185.105.89.0/24 maxlen: 24
185.221.162.0/24 maxlen: 24
45.95.202.0/24 maxlen: 24
45.95.203.0/24 maxlen: 24
45.90.216.0/24 maxlen: 24
45.90.217.0/24 maxlen: 24
45.90.218.0/24 maxlen: 24
45.90.219.0/24 maxlen: 24
84.252.73.0/24 maxlen: 24
84.252.74.0/24 maxlen: 24
84.252.75.0/24 maxlen: 24
45.89.65.0/24 maxlen: 24
85.209.2.0/24 maxlen: 24
185.103.109.0/24 maxlen: 24
185.128.106.0/24 maxlen: 24
185.128.107.0/24 maxlen: 24
193.168.227.0/24 maxlen: 24
185.217.198.0/24 maxlen: 24
185.217.199.0/24 maxlen: 24
2a09:5302::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63642497 (0x3cb1b81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Feb 11 13:02:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0b77d31b1bd2cef4de430a5d92a0bc0eec4bfb70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:44:65:db:b6:40:69:f2:6a:08:fc:c4:53:52:
d0:13:9b:8c:1a:16:6f:71:3c:5d:f5:64:bb:cd:34:
c7:af:1e:b4:e8:75:69:3f:5a:c2:e7:df:8e:90:79:
b9:69:f1:3e:e8:c6:3c:7f:86:b8:7d:95:c0:fd:22:
d3:4e:ca:51:a9:25:1a:9d:9b:d7:2b:7c:ac:02:b9:
37:09:3e:3e:d3:0c:75:4b:7d:be:14:67:45:31:2d:
fc:ac:66:45:fe:23:13:0a:9e:8c:af:d8:70:98:dc:
33:66:56:da:86:96:22:d0:96:53:b1:bb:bf:7c:58:
8e:28:a2:b9:cc:d8:f4:d7:43:8f:23:c8:31:9a:77:
3f:6b:70:b6:45:86:8e:8c:9d:e2:54:cd:81:12:f9:
16:24:a9:35:5b:98:01:2c:48:c8:59:e5:cd:37:bb:
5f:e5:e2:2b:90:a7:c5:23:93:84:c4:50:78:a5:2d:
5e:d9:e2:49:36:e7:7e:bb:49:94:3a:1b:30:4c:31:
15:63:54:01:a9:80:3e:dc:cb:70:b1:2d:6b:35:ad:
6e:23:6c:cc:17:04:fb:f5:73:a1:64:47:c7:6d:40:
30:6b:9c:3a:dc:d0:fc:ad:f9:2f:66:a6:9d:8f:07:
2b:4a:d3:bc:cb:18:89:93:5f:9c:d1:8e:b2:f5:a2:
a1:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:77:D3:1B:1B:D2:CE:F4:DE:43:0A:5D:92:A0:BC:0E:EC:4B:FB:70
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/C3fTGxvSzvTeQwpdkqC8DuxL-3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.73.0/24
45.9.75.0/24
45.89.65.0/24
45.90.216.0/22
45.95.202.0/23
84.252.73.0-84.252.75.255
85.209.2.0/24
185.103.109.0/24
185.105.88.0/22
185.112.101.0-185.112.103.255
185.128.106.0/23
185.217.198.0/23
185.221.162.0/24
193.162.143.0/24
193.168.227.0/24
IPv6:
2a09:5302::/32
Signature Algorithm: sha256WithRSAEncryption
9e:20:42:ac:68:e4:ea:46:54:bf:50:18:e7:da:29:e8:52:bf:
f0:95:5e:6b:c5:18:97:b6:61:98:61:c0:f8:0b:54:dd:35:49:
23:c1:14:af:bc:bf:fa:65:68:d4:1b:68:69:79:0b:b5:8c:73:
ed:be:a6:9c:be:07:dc:0f:02:74:2a:09:53:1f:28:f4:fe:9f:
8c:38:d0:49:99:68:86:d2:4c:3a:41:a1:0a:77:c6:06:c4:d8:
0e:31:55:e9:01:a2:09:78:2a:03:a4:90:b1:6f:ee:ae:83:fe:
59:8a:e6:c0:27:40:2c:30:33:15:d6:26:a1:37:b3:aa:dc:2d:
dc:66:4f:3e:9a:62:9b:0b:6b:f5:a6:70:0a:f5:22:e7:c4:54:
be:0a:25:61:65:18:97:34:b0:2d:d1:99:bd:7f:1e:14:87:83:
04:3e:50:47:d5:96:eb:6d:7c:8f:fb:b0:6c:9e:8e:06:fa:71:
af:3c:c5:a9:59:75:ff:c8:e8:14:04:f7:d4:7a:0b:4b:c5:18:
10:44:9b:13:a2:4a:55:3e:5e:d3:b4:21:8e:1f:96:69:f4:01:
20:54:9e:67:9f:9a:cf:20:ab:30:33:07:9d:87:b6:23:f7:80:
09:5e:24:d4:0a:78:d1:82:af:87:4a:a5:5c:cd:fe:47:c0:e2:
92:57:8a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org