Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/IhOajJYOewGD-TFKLp0jXxNEBvY.roa
File: IhOajJYOewGD-TFKLp0jXxNEBvY.roa (raw, json)
Hash identifier: OrgDMk6wMlKC5JvWQJPq3XFp1rQ6JicqOD7xux3y25U=
Subject key identifier: 22:13:9A:8C:96:0E:7B:01:83:F9:31:4A:2E:9D:23:5F:13:44:06:F6
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 046C566C
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/IhOajJYOewGD-TFKLp0jXxNEBvY.roa
Signing time: Tue 29 Mar 2022 12:41:50 +0000
ROA not before: Tue 29 Mar 2022 12:41:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205090
IP address blocks: 185.112.81.0/24 maxlen: 24
185.117.117.0/24 maxlen: 24
185.112.101.0/24 maxlen: 24
185.112.102.0/24 maxlen: 24
185.112.103.0/24 maxlen: 24
45.9.73.0/24 maxlen: 24
45.9.75.0/24 maxlen: 24
193.162.143.0/24 maxlen: 24
185.105.90.0/24 maxlen: 24
185.105.91.0/24 maxlen: 24
185.105.88.0/24 maxlen: 24
185.105.89.0/24 maxlen: 24
185.221.162.0/24 maxlen: 24
45.95.202.0/24 maxlen: 24
45.95.203.0/24 maxlen: 24
185.102.139.0/24 maxlen: 24
45.90.216.0/24 maxlen: 24
45.90.217.0/24 maxlen: 24
45.90.218.0/24 maxlen: 24
45.90.219.0/24 maxlen: 24
84.252.73.0/24 maxlen: 24
84.252.74.0/24 maxlen: 24
84.252.75.0/24 maxlen: 24
185.128.105.0/24 maxlen: 24
45.89.65.0/24 maxlen: 24
85.209.2.0/24 maxlen: 24
185.103.109.0/24 maxlen: 24
185.128.106.0/24 maxlen: 24
185.128.107.0/24 maxlen: 24
193.168.227.0/24 maxlen: 24
185.217.198.0/24 maxlen: 24
185.217.199.0/24 maxlen: 24
185.104.251.0/24 maxlen: 24
2a09:5302::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74208876 (0x46c566c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Mar 29 12:41:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=22139a8c960e7b0183f9314a2e9d235f134406f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7c:c7:a0:74:4d:c8:10:e4:9a:f3:b3:0d:f8:
ae:48:c9:61:ae:c5:30:bc:8f:17:fc:a8:93:37:6a:
0f:ee:f6:e5:a4:95:e6:db:7d:08:2b:3f:ea:1d:e0:
9d:60:c3:b5:5d:db:bf:4f:ca:d4:32:4d:68:09:fb:
91:26:a9:e4:08:8d:2a:8b:23:c7:3a:93:28:a5:ea:
e9:7d:c1:0d:1f:d2:b3:e7:8b:78:f6:81:24:83:00:
7e:6d:00:db:96:eb:13:22:4b:6c:6d:72:9f:8d:c1:
f3:2d:6b:b5:81:a0:17:11:60:5c:84:81:ca:3c:04:
bc:b6:d6:ca:5a:3e:0d:b5:30:cb:dd:61:9a:60:7a:
a9:cf:f6:63:ef:fb:fb:f7:da:f7:f4:69:5f:6b:2f:
13:3f:ab:14:9d:aa:d3:58:9e:2f:34:1d:52:1a:0e:
7e:1e:f9:5e:41:17:51:be:21:d1:ea:ca:ac:74:a6:
c9:e3:4e:51:8a:9b:f9:70:0d:c3:a6:85:93:7e:6f:
4e:4d:7e:1b:6b:0a:04:84:f2:6e:f4:e0:a5:a5:cd:
99:a7:47:90:dc:a5:86:fd:9b:71:83:63:7d:49:7c:
e7:fc:2e:f8:31:53:10:e3:3f:ae:d0:aa:6f:f7:e9:
8b:d8:74:1e:20:da:8e:52:fd:f3:91:fe:52:34:4f:
ad:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:13:9A:8C:96:0E:7B:01:83:F9:31:4A:2E:9D:23:5F:13:44:06:F6
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/IhOajJYOewGD-TFKLp0jXxNEBvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.73.0/24
45.9.75.0/24
45.89.65.0/24
45.90.216.0/22
45.95.202.0/23
84.252.73.0-84.252.75.255
85.209.2.0/24
185.102.139.0/24
185.103.109.0/24
185.104.251.0/24
185.105.88.0/22
185.112.81.0/24
185.112.101.0-185.112.103.255
185.117.117.0/24
185.128.105.0-185.128.107.255
185.217.198.0/23
185.221.162.0/24
193.162.143.0/24
193.168.227.0/24
IPv6:
2a09:5302::/32
Signature Algorithm: sha256WithRSAEncryption
a8:8a:f1:e4:f3:e2:1f:3c:0d:64:e2:00:e4:f3:32:99:ac:59:
74:5e:08:63:e7:90:2e:19:e7:a1:1a:51:ac:03:94:17:19:f6:
de:8e:3a:ac:27:ef:15:44:db:e7:7a:2f:42:e3:c5:8e:11:ca:
26:37:d1:97:1b:4c:88:e2:89:e8:5a:88:c7:f4:4d:d0:d6:36:
e3:b4:df:68:f6:e5:72:90:84:b6:ff:d0:1a:4e:a6:2e:70:15:
fc:e8:5e:41:fe:84:51:72:03:8e:19:4a:29:f8:a0:29:1a:7b:
ba:2c:6d:9c:5d:b4:78:75:ae:1d:16:14:6f:cf:b6:c6:cb:3d:
03:5a:86:0b:52:4e:8c:52:03:b5:7a:9d:db:12:dd:1e:45:c4:
c9:1b:93:52:b1:88:77:40:19:51:e0:7f:c5:0c:81:19:e8:d2:
96:7b:0d:81:01:4d:a2:7d:5f:d3:c6:52:0c:3b:7b:f8:41:71:
16:58:1f:36:1c:76:ff:03:ca:2d:c9:03:86:a4:fb:0b:71:b3:
36:54:82:a6:48:1f:14:b2:0b:f1:e0:42:ae:59:4c:c1:9d:f7:
7f:cb:f8:5c:8e:9e:a3:bd:77:df:43:dd:52:03:94:45:e5:31:
00:12:71:b0:a9:a3:c6:0f:62:2d:52:4a:41:e0:23:7e:98:68:
8b:8f:94:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org