Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/CE-d7UaxnCog8Lbf_N53vWI36LM.roa
File: CE-d7UaxnCog8Lbf_N53vWI36LM.roa (raw, json)
Hash identifier: fpVD3fbZ4iohwNf0cduc3eAzzuc+II1S1MMMSjPJSJ0=
Subject key identifier: 08:4F:9D:ED:46:B1:9C:2A:20:F0:B6:DF:FC:DE:77:BD:62:37:E8:B3
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 05527246
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/CE-d7UaxnCog8Lbf_N53vWI36LM.roa
Signing time: Tue 21 Jun 2022 11:35:44 +0000
ROA not before: Tue 21 Jun 2022 11:35:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204997
IP address blocks: 185.174.137.0/24 maxlen: 24
45.144.64.0/24 maxlen: 24
45.144.66.0/24 maxlen: 24
45.144.65.0/24 maxlen: 24
45.144.67.0/24 maxlen: 24
185.139.69.0/24 maxlen: 24
185.139.71.0/24 maxlen: 24
185.139.68.0/24 maxlen: 24
185.139.70.0/24 maxlen: 24
193.109.78.0/24 maxlen: 24
193.109.79.0/24 maxlen: 24
185.195.24.0/24 maxlen: 24
185.195.27.0/24 maxlen: 24
185.195.25.0/24 maxlen: 24
185.195.26.0/24 maxlen: 24
185.204.0.0/24 maxlen: 24
185.204.2.0/24 maxlen: 24
185.204.3.0/24 maxlen: 24
139.28.223.0/24 maxlen: 24
139.28.222.0/24 maxlen: 24
185.212.148.0/24 maxlen: 24
91.217.81.0/24 maxlen: 24
185.188.183.0/24 maxlen: 24
185.188.182.0/24 maxlen: 24
185.17.3.0/24 maxlen: 24
185.180.231.0/24 maxlen: 24
185.180.230.0/24 maxlen: 24
147.78.64.0/24 maxlen: 24
195.66.114.0/24 maxlen: 24
147.78.66.0/24 maxlen: 24
147.78.65.0/24 maxlen: 24
147.78.67.0/24 maxlen: 24
46.17.104.0/24 maxlen: 24
185.104.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89289286 (0x5527246)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jun 21 11:35:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=084f9ded46b19c2a20f0b6dffcde77bd6237e8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c8:82:04:f3:08:be:4f:d3:30:c5:68:ae:ca:
3e:47:ee:f5:14:26:7d:89:50:91:86:b3:05:27:7d:
92:bf:01:50:c3:9b:59:93:16:dc:61:36:c2:e5:63:
81:30:c0:13:fe:c6:02:d7:94:32:41:f0:4c:6d:db:
9f:f6:28:83:f5:f3:25:69:e5:cd:22:c2:b8:ce:66:
d7:ce:61:d4:a9:86:bc:b4:f5:6d:4c:0c:5a:85:cc:
e5:15:59:53:99:58:f0:43:c8:3d:b2:9e:ec:a5:84:
c7:9a:94:98:90:fb:26:bf:b3:c4:e1:4d:1c:78:2f:
33:c5:7d:88:7e:ec:58:b7:85:c6:3a:48:65:d7:54:
78:b5:6b:af:44:44:7c:e9:fc:e6:3a:e5:82:d2:a1:
25:2d:be:63:84:e2:19:32:ed:4a:80:fe:47:31:6a:
66:71:90:89:fe:37:d4:b7:66:87:e8:79:ca:d4:34:
de:a4:25:54:78:24:cd:2b:42:1d:6b:df:60:23:20:
60:22:2c:03:e2:56:a3:89:d8:57:8a:7c:52:77:94:
33:97:82:b6:df:57:73:a2:6b:7f:0b:13:58:67:e4:
88:3e:20:10:19:37:48:ba:65:3c:f7:13:1d:b0:90:
5a:72:f9:35:5b:82:50:89:69:f9:4b:b2:38:98:ac:
26:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:4F:9D:ED:46:B1:9C:2A:20:F0:B6:DF:FC:DE:77:BD:62:37:E8:B3
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/CE-d7UaxnCog8Lbf_N53vWI36LM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.64.0/22
46.17.104.0/24
91.217.81.0/24
139.28.222.0/23
147.78.64.0/22
185.17.3.0/24
185.104.249.0/24
185.139.68.0/22
185.174.137.0/24
185.180.230.0/23
185.188.182.0/23
185.195.24.0/22
185.204.0.0/24
185.204.2.0/23
185.212.148.0/24
193.109.78.0/23
195.66.114.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:98:25:5f:23:c2:ab:62:e9:38:ab:f6:1b:62:69:80:3d:85:
e0:32:d2:94:c5:92:11:9d:30:c8:23:3b:f8:4d:f8:7b:d5:5e:
20:ec:95:2f:92:6c:0a:ee:3f:17:19:f3:70:bc:d6:9a:a4:e6:
fa:fd:86:9e:3f:15:b7:fd:a8:32:85:e7:f1:9f:56:93:4a:97:
18:14:12:fd:c7:2e:3f:cf:4b:7d:b5:f5:0d:fa:81:66:33:a5:
00:95:bd:36:24:c2:24:65:ed:dc:7a:10:6d:98:4f:e5:1a:b4:
b7:ee:1b:3c:f4:25:e9:a9:c4:83:fb:0f:87:ce:a3:ae:56:c0:
7d:de:66:ed:46:8f:d7:ef:0f:31:b8:09:f3:10:3c:b7:99:45:
dc:ce:3a:8d:7b:f9:05:5a:28:c0:13:78:4f:c1:50:2c:fb:8b:
84:fc:ee:86:6d:4d:60:a9:80:9f:cd:dc:1c:ec:e8:5a:8a:8b:
87:45:66:6c:3a:73:22:99:5f:0d:db:00:1a:8d:8e:c1:1e:cb:
40:b6:d8:ac:81:b0:c5:d8:b0:8a:9d:ba:bb:ad:bf:e9:50:29:
42:e3:1f:36:c3:6d:ed:a8:39:2c:72:62:55:1b:8a:f2:ce:d7:
a3:63:c3:2e:36:e1:be:94:33:47:30:ad:16:21:24:d8:6e:20:
06:c3:92:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:07 2024 by rpki-client on console-fra.rpki-client.org