Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/_m4hi26M-hMh2jBt0hz6ccS8LJA.roa
File: _m4hi26M-hMh2jBt0hz6ccS8LJA.roa (raw, json)
Hash identifier: QMdXp96zg80E1ArEwjbPf3U+zNr4F+BMJIhkofKE5v8=
Subject key identifier: FE:6E:21:8B:6E:8C:FA:13:21:DA:30:6D:D2:1C:FA:71:C4:BC:2C:90
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 04A573AE
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/_m4hi26M-hMh2jBt0hz6ccS8LJA.roa
Signing time: Mon 18 Apr 2022 09:55:04 +0000
ROA not before: Mon 18 Apr 2022 09:55:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 210644
IP address blocks: 185.174.136.0/24 maxlen: 24
185.229.66.0/24 maxlen: 24
185.112.83.0/24 maxlen: 24
45.142.122.0/24 maxlen: 24
185.17.0.0/24 maxlen: 24
2a0e:d606::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 77951918 (0x4a573ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Apr 18 09:55:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fe6e218b6e8cfa1321da306dd21cfa71c4bc2c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ed:e3:bd:45:bf:6e:0a:97:a3:ee:c0:87:d3:
3f:66:f3:db:6c:37:75:c4:bc:ec:48:90:57:68:f5:
83:51:5d:4a:26:29:62:b7:e7:2d:39:4a:10:ca:be:
41:7f:08:c3:7c:73:08:0c:db:13:8b:81:e2:77:4b:
5e:0d:41:0f:97:ac:4b:ab:58:ad:be:8d:45:88:aa:
d1:26:25:1e:d5:d3:90:94:ef:46:a0:a8:9c:45:6d:
27:65:71:e1:4c:b8:3c:16:2d:b9:c7:43:99:c6:03:
f4:01:c4:c5:6b:ca:12:cf:a3:6c:02:75:de:37:8d:
47:08:67:18:4e:ae:62:07:09:9d:08:66:10:15:b3:
85:ad:46:56:72:2b:63:3e:02:b1:3d:36:40:8b:68:
a9:b6:b8:13:c6:27:e5:15:be:07:14:7f:e6:3e:84:
bb:cd:63:46:ce:41:5a:ef:e6:72:af:8a:73:3e:fc:
f6:e4:ac:c0:85:b3:45:91:0c:16:62:09:df:57:e4:
ac:61:52:ac:1a:09:1f:6f:32:3d:3e:f6:31:22:05:
8e:9d:08:a8:b4:1c:63:96:23:69:17:1a:00:6a:45:
84:5b:f4:03:25:6d:db:4d:40:23:ec:2a:7d:9e:35:
7e:b2:d0:e7:66:1d:2c:ff:8b:c7:62:bb:5d:83:a4:
d5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:6E:21:8B:6E:8C:FA:13:21:DA:30:6D:D2:1C:FA:71:C4:BC:2C:90
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/_m4hi26M-hMh2jBt0hz6ccS8LJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.122.0/24
185.17.0.0/24
185.112.83.0/24
185.174.136.0/24
185.229.66.0/24
IPv6:
2a0e:d606::/48
Signature Algorithm: sha256WithRSAEncryption
4e:27:05:63:be:3a:1a:33:3f:6a:43:1b:9a:ba:4f:4a:e5:93:
1f:d1:e2:ca:bd:00:08:03:d9:84:85:f8:85:5b:c2:3a:9f:b1:
62:15:7f:94:da:ea:dc:34:18:bb:70:59:26:61:82:ae:87:a4:
f0:a9:fa:3e:86:95:c0:46:b5:a5:c2:d9:bc:61:53:98:ca:cd:
b2:8b:81:a5:92:a5:1e:ba:4c:ea:5e:37:55:95:f5:64:cd:42:
df:e4:4c:e8:2c:3d:cc:b9:7b:5a:c4:92:bd:5d:23:af:05:c8:
5b:16:b5:fa:da:21:8e:0e:12:96:d1:f7:c2:38:5f:ff:c9:6b:
04:b6:51:60:29:0e:8c:6d:ee:41:7b:d9:e9:ae:dd:ec:10:b5:
33:f1:4d:3a:52:82:fd:5f:c3:0b:34:71:07:b2:9e:3f:33:7f:
8c:7d:4b:04:e4:2e:88:3c:b3:e9:ee:be:5d:4e:9c:c3:a9:9b:
cf:62:35:51:1e:48:c7:da:56:f3:c7:57:fc:f8:4c:4e:58:4d:
83:ca:50:6b:d8:58:1a:37:30:a1:41:3c:e8:ae:22:42:ba:93:
6d:e2:65:96:a0:77:15:97:26:39:4a:04:90:4e:a4:8c:fd:c6:
c7:df:10:f2:3b:db:d7:40:58:7e:d8:19:2d:e9:82:46:21:c8:
bf:1b:f0:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:08 2024 by rpki-client on console-fra.rpki-client.org