Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/dQWOqoIq6lJMIih33TBr6rBqUhI.roa
File: dQWOqoIq6lJMIih33TBr6rBqUhI.roa (raw, json)
Hash identifier: N882joekQ8UX1i+BMi1NlIIVmckXwM6fOHJVFQOQtw4=
Subject key identifier: 75:05:8E:AA:82:2A:EA:52:4C:22:28:77:DD:30:6B:EA:B0:6A:52:12
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 01833B900147671A8E8AB1403B1A30B150B7
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/dQWOqoIq6lJMIih33TBr6rBqUhI.roa
Signing time: Wed 14 Sep 2022 10:33:56 +0000
ROA not before: Wed 14 Sep 2022 10:33:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204339
IP address blocks: 185.117.117.0/24 maxlen: 24
45.95.200.0/24 maxlen: 24
2a0d:2dc2::/32 maxlen: 32
2a0b:da01::/32 maxlen: 32
2a0c:aa42::/32 maxlen: 32
2a0b:7782::/32 maxlen: 32
2a0d:2dc1::/32 maxlen: 32
2a0c:aa41::/32 maxlen: 32
2a0b:7781::/32 maxlen: 32
2a0b:da02::/32 maxlen: 32
2a0d:2dc0::/32 maxlen: 32
2a0b:da03::/32 maxlen: 32
2a0b:da00::/32 maxlen: 32
2a0c:aa46::/32 maxlen: 32
2a0b:7786::/32 maxlen: 32
2a0d:2dc3::/32 maxlen: 32
2a0c:aa43::/32 maxlen: 32
2a0b:da06::/32 maxlen: 32
2a0b:7783::/32 maxlen: 32
2a0c:aa40::/32 maxlen: 32
2a0b:7780::/32 maxlen: 32
2a0d:2dc6::/32 maxlen: 32
2a0b:da04::/32 maxlen: 32
2a0d:2dc5::/32 maxlen: 32
2a0c:aa45::/32 maxlen: 32
2a0b:7785::/32 maxlen: 32
2a0d:2dc7::/32 maxlen: 32
2a0b:7784::/32 maxlen: 32
2a0b:da05::/32 maxlen: 32
2a0c:aa44::/32 maxlen: 32
2a0b:7787::/32 maxlen: 32
2a0c:aa47::/32 maxlen: 32
2a0d:2dc4::/32 maxlen: 32
2a0b:da07::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:3b:90:01:47:67:1a:8e:8a:b1:40:3b:1a:30:b1:50:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Sep 14 10:33:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75058eaa822aea524c222877dd306beab06a5212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a7:26:11:ca:1e:fd:29:d2:a9:b3:c3:46:89:
46:33:03:27:72:68:c8:72:1a:50:e4:96:75:36:00:
99:0f:03:a6:5e:ae:6c:b3:49:2a:0f:0b:3d:46:21:
36:84:41:f6:ef:15:5f:b6:34:9f:bc:2a:80:d1:91:
51:04:07:41:ef:c0:34:4f:75:4d:bc:31:96:e9:0a:
5a:3f:a5:02:09:e7:de:e0:b1:56:9a:12:aa:8b:7e:
61:36:37:93:6e:d6:07:39:1f:d7:ae:43:24:bc:9c:
90:58:38:49:f8:de:90:76:35:25:8d:d9:44:6d:90:
cd:06:75:be:d4:0c:6e:dc:f0:b1:0b:e7:7b:0a:f9:
47:7a:53:18:2f:b3:e6:59:8b:0f:63:68:43:f5:9c:
e3:70:60:e6:fd:e1:8c:cb:e4:30:b8:d8:3c:68:60:
e6:f1:57:60:ae:e6:34:94:a8:45:1c:16:a5:a4:93:
aa:16:74:36:95:02:93:ca:27:8c:49:81:47:a3:e0:
44:8a:ab:33:30:02:90:26:7f:92:14:e6:33:4e:a5:
76:1a:17:ec:1f:80:9a:4f:47:8d:b6:4e:02:1b:5f:
3b:1e:9f:05:d0:56:38:3b:48:58:50:36:5c:70:aa:
7f:35:d4:d5:9f:69:ef:55:04:6b:d4:65:b5:08:9b:
6d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:05:8E:AA:82:2A:EA:52:4C:22:28:77:DD:30:6B:EA:B0:6A:52:12
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/dQWOqoIq6lJMIih33TBr6rBqUhI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.200.0/24
185.117.117.0/24
IPv6:
2a0b:7780::/29
2a0b:da00::/29
2a0c:aa40::/29
2a0d:2dc0::/29
Signature Algorithm: sha256WithRSAEncryption
c0:76:3c:77:a2:d4:68:0b:e8:e5:92:3d:69:50:92:93:0c:a1:
00:a7:a9:5d:31:be:5f:ed:b7:79:08:15:1b:7f:1e:36:fd:c1:
4b:2e:36:db:ee:cd:25:10:7e:8e:77:c4:40:8d:9a:45:d6:1b:
02:2a:61:55:1e:0b:04:53:4a:46:59:2d:a6:6c:4e:93:9d:99:
97:cd:fe:3c:1c:16:79:d5:8f:da:d9:34:43:17:95:23:d8:72:
cf:38:43:ff:fa:ca:7e:40:17:a8:7e:70:c2:6d:98:cc:56:c7:
b2:3f:5c:8b:07:1d:23:ce:6d:9b:f8:5d:b9:5c:a2:07:9d:53:
f4:00:7c:7f:fb:3d:0d:35:4d:6a:9e:55:e5:c8:7e:0f:65:74:
09:b8:8a:d7:88:c2:72:62:01:95:06:dd:d7:5a:9d:ca:52:de:
1a:98:97:60:f0:8b:5d:00:18:f7:93:22:70:ec:22:62:91:32:
c2:62:fd:6b:92:e4:90:b0:6f:d4:58:72:3d:09:46:a3:65:77:
6a:10:f0:94:04:01:0d:f4:bb:f8:f1:3e:49:60:4a:09:6f:f5:
01:d6:14:c4:7e:fc:23:09:41:57:6d:3e:a4:44:37:c9:7c:0d:
df:31:22:f2:53:ec:b0:6d:ae:bf:66:52:ce:7e:5c:af:5c:52:
ac:c6:5d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:29 2023 by rpki-client on console-ams.rpki-client.org