Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/jNrVNsq6RMhlJ-p6gxcdghHAvsY.roa
File: jNrVNsq6RMhlJ-p6gxcdghHAvsY.roa (raw, json)
Hash identifier: ZUtD4FfUhcSr2RBa9rTyvCZ9w1eRmMtPN/ZuJfESu54=
Subject key identifier: 8C:DA:D5:36:CA:BA:44:C8:65:27:EA:7A:83:17:1D:82:11:C0:BE:C6
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0338C2E9
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/jNrVNsq6RMhlJ-p6gxcdghHAvsY.roa
Signing time: Sat 01 Jan 2022 16:04:31 +0000
ROA not before: Sat 01 Jan 2022 16:04:31 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204997
IP address blocks: 45.144.64.0/24 maxlen: 24
45.144.65.0/24 maxlen: 24
45.144.67.0/24 maxlen: 24
45.144.66.0/24 maxlen: 24
185.139.69.0/24 maxlen: 24
185.139.68.0/24 maxlen: 24
185.139.71.0/24 maxlen: 24
185.139.70.0/24 maxlen: 24
193.109.78.0/24 maxlen: 24
193.109.79.0/24 maxlen: 24
185.195.24.0/24 maxlen: 24
185.195.27.0/24 maxlen: 24
185.195.26.0/24 maxlen: 24
185.195.25.0/24 maxlen: 24
185.204.0.0/24 maxlen: 24
185.204.3.0/24 maxlen: 24
185.204.2.0/24 maxlen: 24
139.28.222.0/24 maxlen: 24
139.28.223.0/24 maxlen: 24
185.212.148.0/24 maxlen: 24
91.217.81.0/24 maxlen: 24
185.188.182.0/24 maxlen: 24
185.188.183.0/24 maxlen: 24
185.17.3.0/24 maxlen: 24
185.180.231.0/24 maxlen: 24
195.66.114.0/24 maxlen: 24
147.78.64.0/24 maxlen: 24
147.78.66.0/24 maxlen: 24
147.78.65.0/24 maxlen: 24
147.78.67.0/24 maxlen: 24
46.17.104.0/24 maxlen: 24
185.104.249.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54051561 (0x338c2e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 16:04:31 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8cdad536caba44c86527ea7a83171d8211c0bec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:82:bb:63:68:e5:fb:9b:a8:8b:76:a3:5a:a7:
c5:b3:19:56:6a:08:83:0d:09:7e:04:d6:16:d8:74:
04:4d:c0:6c:e0:d1:7a:66:e2:48:6f:44:67:b6:13:
d6:13:f0:08:15:2f:4a:e5:69:7f:d1:b5:a5:1f:ec:
8e:a4:01:76:d6:61:1d:8c:70:57:5d:f1:05:23:c6:
05:6a:c6:3b:89:3f:82:ec:ca:84:e6:27:4f:91:bd:
00:50:cd:ad:16:3f:71:20:88:80:1f:d4:c3:ec:99:
8b:b1:0c:2c:76:14:d0:ca:ce:da:35:22:85:4a:ad:
83:86:7e:01:24:5f:e8:62:13:c7:c5:9b:f5:ea:ff:
a8:c4:95:8f:28:e9:b8:48:05:38:e8:37:dc:6e:f3:
d0:4b:17:72:b0:e7:11:36:97:83:93:15:5c:72:95:
75:58:5b:87:ba:fb:21:96:ea:2f:aa:b8:c1:40:0e:
53:01:38:8e:31:c0:a2:a8:94:52:c5:b3:59:f5:86:
0c:da:c8:6f:49:fc:09:57:d7:bc:48:ea:69:01:a4:
27:12:15:57:5d:ca:46:32:05:83:74:c7:9d:24:c9:
ef:8a:02:e4:22:cc:05:3a:0d:2f:3e:c2:55:a9:e8:
c6:2d:db:27:2d:b6:09:57:02:d9:42:3e:39:84:8e:
5a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DA:D5:36:CA:BA:44:C8:65:27:EA:7A:83:17:1D:82:11:C0:BE:C6
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/jNrVNsq6RMhlJ-p6gxcdghHAvsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.64.0/22
46.17.104.0/24
91.217.81.0/24
139.28.222.0/23
147.78.64.0/22
185.17.3.0/24
185.104.249.0/24
185.139.68.0/22
185.180.231.0/24
185.188.182.0/23
185.195.24.0/22
185.204.0.0/24
185.204.2.0/23
185.212.148.0/24
193.109.78.0/23
195.66.114.0/24
Signature Algorithm: sha256WithRSAEncryption
12:41:ea:9f:a5:d0:6e:90:2f:93:ed:14:e3:05:76:aa:af:58:
a2:d0:19:92:ba:d1:9c:ef:00:c6:5a:4c:2d:38:13:26:b2:4d:
ad:47:06:5a:fb:09:d7:5f:db:22:aa:e4:a9:ae:77:8b:2a:08:
04:06:a7:55:57:f3:db:d3:89:a8:83:2d:cd:bb:8e:6c:7e:99:
b7:50:95:94:5a:e0:fc:47:1d:30:58:5f:d4:b5:d1:64:fe:d3:
62:fc:a4:a8:3b:27:8a:da:21:43:ce:f3:b3:55:64:7e:70:af:
0d:b6:08:60:8c:a6:c9:0a:5d:89:ef:38:18:c0:31:39:64:ce:
e9:ff:3c:6e:a9:6e:61:1c:7f:63:64:c4:7a:50:fb:a2:03:ca:
64:fd:98:e1:15:96:d7:6e:b3:9b:0b:aa:00:fd:b2:9a:16:c2:
8e:88:cd:4e:e3:bb:4e:e5:83:62:0e:9a:d8:83:6d:00:32:67:
1b:91:a2:e8:01:69:c7:58:0a:73:0b:44:e9:96:88:e5:40:a8:
eb:3d:4e:d3:2c:5b:47:ca:43:51:c2:ff:ea:c4:cb:84:26:e1:
b8:7e:42:16:21:f3:1c:f6:fb:fc:b2:a7:e5:96:e4:55:77:a8:
28:a2:22:96:48:6f:33:9e:83:92:de:7b:0d:66:0b:f6:ce:cc:
09:b3:f2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:10 2024 by rpki-client on console-ams.rpki-client.org