Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/EuDpTXl5cTBqEVq4rnoKp5BO6g8.roa
File: EuDpTXl5cTBqEVq4rnoKp5BO6g8.roa (raw, json)
Hash identifier: SGmmm/As3fyHwz60+MXNDFxhu3/CbDiugs1/ChAfF10=
Subject key identifier: 12:E0:E9:4D:79:79:71:30:6A:11:5A:B8:AE:7A:0A:A7:90:4E:EA:0F
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0181DD2E89D896395B9F92B43DD820D8B1CD
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/EuDpTXl5cTBqEVq4rnoKp5BO6g8.roa
Signing time: Fri 08 Jul 2022 09:40:23 +0000
ROA not before: Fri 08 Jul 2022 09:40:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210644
IP address blocks: 185.174.136.0/24 maxlen: 24
185.229.66.0/24 maxlen: 24
185.106.94.0/24 maxlen: 24
185.112.83.0/24 maxlen: 24
45.142.122.0/24 maxlen: 24
185.17.0.0/24 maxlen: 24
45.138.74.0/24 maxlen: 24
2a0e:d607::/48 maxlen: 48
2a0e:d602::/48 maxlen: 48
2a0e:d606::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:dd:2e:89:d8:96:39:5b:9f:92:b4:3d:d8:20:d8:b1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jul 8 09:40:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=12e0e94d797971306a115ab8ae7a0aa7904eea0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:81:02:27:2f:7a:f0:92:0b:45:a2:c5:38:27:
18:ff:4e:b2:85:0f:d6:f3:73:ad:9b:d0:16:d0:80:
8b:31:4f:ae:41:ec:f4:3c:42:6a:30:23:df:d9:72:
52:e6:45:42:c9:b5:98:af:a0:5c:a9:d3:03:1f:a6:
20:4e:8a:d9:99:96:ee:25:28:df:5b:2a:ae:13:37:
89:22:a5:a1:2b:1a:30:6b:cc:2f:95:1a:f5:d0:38:
74:10:7c:d2:f2:3c:71:3a:51:89:c1:fc:bb:e9:ec:
88:8b:b5:85:b8:ae:97:41:82:bb:c7:19:a7:8c:35:
44:a5:01:94:8c:a7:b3:ff:e0:b2:22:49:09:bd:fb:
fd:68:47:0f:f5:6b:11:55:a8:54:a0:15:00:97:26:
62:af:89:0e:35:dd:83:61:f6:4a:ad:a9:ae:1f:82:
3b:2d:d4:28:c5:9e:a1:6f:3c:27:11:92:37:80:3d:
ba:da:52:36:98:ee:ab:76:5a:86:c0:67:b1:91:db:
30:64:da:b7:ea:d0:21:39:a5:5e:1e:14:9d:83:50:
77:16:d7:c0:d5:25:f7:19:c8:29:25:cb:44:ab:22:
93:64:ac:a7:38:49:b7:d0:b8:5c:44:f4:21:c7:64:
d8:fe:73:8c:19:28:93:b7:57:4b:12:ca:7e:eb:26:
3b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E0:E9:4D:79:79:71:30:6A:11:5A:B8:AE:7A:0A:A7:90:4E:EA:0F
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/EuDpTXl5cTBqEVq4rnoKp5BO6g8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.74.0/24
45.142.122.0/24
185.17.0.0/24
185.106.94.0/24
185.112.83.0/24
185.174.136.0/24
185.229.66.0/24
IPv6:
2a0e:d602::/48
2a0e:d606::/48
2a0e:d607::/48
Signature Algorithm: sha256WithRSAEncryption
a3:65:35:63:db:d9:9e:a5:6a:cd:39:4b:ea:69:ca:cc:40:ee:
e7:db:39:af:cb:b6:3c:20:c8:88:0a:22:11:98:be:de:e0:5b:
02:d3:fa:f4:d4:18:e0:58:74:c6:d5:91:c3:c2:43:e4:60:56:
22:93:b2:97:2c:31:29:6a:20:4b:d5:8f:a3:77:14:4f:df:a6:
04:57:fb:98:00:d0:a5:4d:ec:41:c3:45:25:18:d0:84:be:de:
89:6b:f1:6a:fc:5e:4f:5b:f8:ad:2e:e1:6a:99:0b:ef:76:69:
04:5b:cb:aa:cd:9a:68:c8:bc:9e:50:12:62:22:a2:d8:72:ab:
fb:d0:ef:55:84:db:1e:2f:b3:1f:9f:f0:7b:79:52:bb:52:14:
c0:98:65:02:d1:35:b3:f8:4c:79:04:a9:85:29:89:72:b4:63:
ab:6b:27:ce:b2:b3:48:61:62:57:c4:ae:c2:3d:38:5e:c7:27:
d5:fe:cf:61:6e:19:8d:17:22:ad:ef:b6:7f:a1:8d:c5:57:4a:
76:b8:45:8f:55:77:d9:69:a2:fc:ff:bb:87:34:dd:45:00:97:
61:a5:2d:8f:cc:cd:6b:46:e1:1b:bb:a8:cc:87:f6:ba:c9:9d:
48:93:3a:7a:dc:27:78:e5:f7:61:42:17:bf:b8:09:9a:b1:63:
f5:e3:88:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:37 2023 by rpki-client on console-fra.rpki-client.org