Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/MX6AW5AhcUA1WM3WvR2gc8CnNuM.roa
File: MX6AW5AhcUA1WM3WvR2gc8CnNuM.roa (raw, json)
Hash identifier: us9EJ7mShOBM5ceUwsHcD0Fhz5lcVAEi/iG1V3pjJqs=
Subject key identifier: 31:7E:80:5B:90:21:71:40:35:58:CD:D6:BD:1D:A0:73:C0:A7:36:E3
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 054002C5
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/MX6AW5AhcUA1WM3WvR2gc8CnNuM.roa
Signing time: Wed 15 Jun 2022 14:00:44 +0000
ROA not before: Wed 15 Jun 2022 14:00:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206425
IP address blocks: 45.95.200.0/24 maxlen: 24
185.106.92.0/24 maxlen: 24
194.36.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 88081093 (0x54002c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jun 15 14:00:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=317e805b902171403558cdd6bd1da073c0a736e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:53:4d:01:58:07:22:13:6c:71:a7:de:d1:c8:
67:27:4f:65:bf:e1:4f:6b:69:0e:df:a1:19:03:21:
45:e9:b2:73:54:e0:3a:df:6f:cd:93:61:8c:c4:70:
ec:66:06:bc:17:3b:6c:3f:62:dc:dc:c2:bc:0e:80:
12:f4:3e:1c:be:0f:f3:f8:6b:f7:5a:8d:ee:bc:df:
28:bc:f7:e3:51:85:ef:0b:82:a3:04:c0:73:b8:91:
1e:d2:b8:a1:1a:1c:e7:96:4b:52:45:56:7a:c5:d1:
e4:3a:53:ed:1b:d4:1e:b7:b7:c3:d1:7a:1e:a1:63:
12:f1:d7:a5:ad:60:d6:65:e7:1f:a8:ce:4f:b6:4c:
35:d2:82:fd:3f:26:29:39:75:5a:ad:50:07:ab:a7:
98:ad:ac:d0:e5:0f:85:92:ef:f8:7c:bb:62:f1:cb:
03:17:e8:26:0c:83:4f:d8:9d:1b:49:fd:74:bb:de:
a2:71:36:4e:cb:47:9a:c9:f0:e7:29:5a:a5:4f:5c:
2e:a9:01:96:de:34:ff:11:a3:3f:fc:c8:70:fb:94:
f7:f2:b2:1e:f9:b2:09:23:e2:7a:3e:18:7d:f6:14:
e3:09:bd:b1:aa:0e:8f:6f:2f:d3:11:c2:67:1e:ec:
3c:70:ca:b6:58:a9:32:31:16:e0:95:e7:c7:2a:52:
72:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:7E:80:5B:90:21:71:40:35:58:CD:D6:BD:1D:A0:73:C0:A7:36:E3
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/MX6AW5AhcUA1WM3WvR2gc8CnNuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.200.0/24
185.106.92.0/24
194.36.177.0/24
Signature Algorithm: sha256WithRSAEncryption
82:79:a4:67:e6:94:7d:dc:aa:a3:91:2a:1c:90:f6:bf:0f:11:
67:8f:f0:ca:d4:cf:6e:91:d8:85:e1:92:2e:33:42:58:3e:76:
33:b2:4d:aa:7d:18:e8:a1:e7:65:78:a8:f5:e3:8f:cc:23:e2:
3d:85:d4:8c:dd:a0:d4:93:6a:18:4d:27:3e:b5:54:bf:da:de:
da:fb:f1:95:9a:b0:f8:16:d4:64:d9:18:03:00:b7:b2:7b:46:
c6:ac:22:f8:b1:68:0a:7c:bb:29:61:98:62:b1:81:f4:5c:a0:
24:f8:e0:32:5c:89:08:40:4f:ad:19:f5:e1:65:cb:9a:93:d4:
28:9b:46:85:04:6f:91:2e:f5:32:ad:3d:da:6a:7d:88:c1:08:
fa:b3:a1:ca:d0:26:6e:f1:d7:ae:71:00:92:1b:94:2a:c5:14:
fe:30:15:a6:28:9a:eb:1d:6c:02:0f:57:1d:3b:e1:d5:4c:88:
26:a3:04:c4:15:1e:d7:75:c8:50:64:98:b7:d7:e3:d4:fe:fd:
69:96:44:e6:8c:27:2e:86:9b:19:97:61:e1:c8:25:ce:34:5a:
54:71:12:18:ec:dc:d2:a0:5b:e7:40:29:97:e8:88:bf:68:a7:
77:aa:83:54:64:d7:f7:8d:dd:e1:53:fe:0e:73:73:a4:1a:f7:
ae:9a:6f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:37 2023 by rpki-client on console-fra.rpki-client.org