Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/RURgib40qwEUrFvYE_mQ_wBdA58.roa
File: RURgib40qwEUrFvYE_mQ_wBdA58.roa (raw, json)
Hash identifier: FUWmhAtaeX1BjZlNm0KqAD988emqMBwSztk1yqQtcGc=
Subject key identifier: 45:44:60:89:BE:34:AB:01:14:AC:5B:D8:13:F9:90:FF:00:5D:03:9F
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0423B87E
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/RURgib40qwEUrFvYE_mQ_wBdA58.roa
Signing time: Tue 15 Mar 2022 16:43:56 +0000
ROA not before: Tue 15 Mar 2022 16:43:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205090
IP address blocks: 185.117.116.0/24 maxlen: 24
185.112.101.0/24 maxlen: 24
185.112.102.0/24 maxlen: 24
185.112.103.0/24 maxlen: 24
45.9.73.0/24 maxlen: 24
45.9.75.0/24 maxlen: 24
193.162.143.0/24 maxlen: 24
185.105.90.0/24 maxlen: 24
185.105.91.0/24 maxlen: 24
185.105.88.0/24 maxlen: 24
185.105.89.0/24 maxlen: 24
185.221.162.0/24 maxlen: 24
45.95.202.0/24 maxlen: 24
45.95.203.0/24 maxlen: 24
45.90.216.0/24 maxlen: 24
45.90.217.0/24 maxlen: 24
45.90.218.0/24 maxlen: 24
45.90.219.0/24 maxlen: 24
84.252.73.0/24 maxlen: 24
84.252.74.0/24 maxlen: 24
84.252.75.0/24 maxlen: 24
185.128.105.0/24 maxlen: 24
45.89.65.0/24 maxlen: 24
85.209.2.0/24 maxlen: 24
185.103.109.0/24 maxlen: 24
185.128.106.0/24 maxlen: 24
185.128.107.0/24 maxlen: 24
193.168.227.0/24 maxlen: 24
185.217.198.0/24 maxlen: 24
185.217.199.0/24 maxlen: 24
2a09:5302::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 69449854 (0x423b87e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Mar 15 16:43:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45446089be34ab0114ac5bd813f990ff005d039f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d3:75:8b:bb:72:53:3a:ef:38:03:02:2b:61:
7c:52:12:8d:71:92:1f:44:9e:2f:d0:3a:54:4b:1d:
0c:7a:fe:3e:e1:f0:e4:23:36:72:f9:2e:84:74:16:
4e:8c:be:4f:3f:28:51:4d:f2:dc:81:c9:b9:50:0a:
a9:9a:7e:56:3a:42:1a:18:f0:e1:98:d0:e7:73:b8:
b5:08:2e:65:2d:f1:6b:c8:c8:22:de:24:f1:01:67:
fc:22:d4:67:66:f0:04:b3:2b:8d:fe:03:f2:b7:06:
73:36:c2:8f:e4:eb:b8:fd:3a:7d:a9:15:7b:12:14:
b4:43:66:d0:a2:80:36:54:83:2c:8f:00:05:75:b2:
93:01:81:f6:0d:2c:75:ac:99:10:35:aa:11:86:5d:
d8:a6:5f:8a:ef:31:5a:bf:37:4d:93:40:7e:8b:28:
1a:12:a3:64:4a:7b:e7:bf:02:40:ef:19:5a:87:97:
06:3f:db:23:be:24:35:98:f6:81:8d:15:38:7e:40:
58:99:ce:9b:1a:e9:2c:44:68:b3:b2:c6:86:d9:fe:
a8:d9:93:60:28:fd:e6:81:0e:3f:30:bd:3c:71:57:
74:0a:25:ba:e2:88:ee:5f:09:21:55:0f:1a:cd:52:
9f:08:e5:bf:35:f9:39:de:36:43:e5:68:a5:d8:d7:
19:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:44:60:89:BE:34:AB:01:14:AC:5B:D8:13:F9:90:FF:00:5D:03:9F
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/RURgib40qwEUrFvYE_mQ_wBdA58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.73.0/24
45.9.75.0/24
45.89.65.0/24
45.90.216.0/22
45.95.202.0/23
84.252.73.0-84.252.75.255
85.209.2.0/24
185.103.109.0/24
185.105.88.0/22
185.112.101.0-185.112.103.255
185.117.116.0/24
185.128.105.0-185.128.107.255
185.217.198.0/23
185.221.162.0/24
193.162.143.0/24
193.168.227.0/24
IPv6:
2a09:5302::/32
Signature Algorithm: sha256WithRSAEncryption
91:18:0c:b1:46:d3:ac:bb:53:70:17:36:cb:c1:b2:1c:dc:77:
a1:36:c5:22:91:86:29:72:89:c4:ca:dd:58:7d:b7:7c:d6:92:
1b:cb:b8:11:10:a1:a6:fa:14:3c:00:9a:7b:16:bb:3a:62:06:
c9:0f:09:5d:c7:16:c6:98:22:4e:59:0f:4b:ff:e5:7f:e9:2f:
5d:b5:39:14:0d:68:4e:03:23:65:82:5a:dc:61:a4:18:65:f9:
5e:8b:33:f5:4a:b5:a6:c7:52:08:a6:9a:a9:48:4b:41:8d:25:
b3:11:2e:d8:8d:b7:33:f4:ad:d0:44:8f:c9:8e:1d:e3:2d:99:
1f:14:1b:0c:39:32:ba:fe:03:41:10:11:80:74:4c:63:e0:f2:
37:65:21:25:2d:59:05:8b:c2:19:13:13:e4:fb:3f:36:db:d0:
7c:2a:23:7f:33:53:52:6b:94:93:cf:83:15:70:60:69:fd:0f:
6b:98:1c:2d:a4:4d:0f:1f:df:70:a6:ec:dc:84:5a:a5:c9:55:
7f:2b:2e:b2:97:6e:ec:b0:42:ba:12:f0:ac:16:f1:6f:bf:6e:
0e:d7:ea:2e:d4:5e:b0:4f:b3:ee:62:04:03:42:3a:27:e4:83:
b3:85:53:79:25:55:bc:94:8d:34:7c:60:d8:72:b6:22:ce:d4:
96:47:02:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org