Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/k03vDEaGV5FybBVovESfN9U2vuM.roa
File: k03vDEaGV5FybBVovESfN9U2vuM.roa (raw, json)
Hash identifier: uwVZHtknZeLFHRulrJp81ggrYvVf79P3e9nhp4qu+wk=
Subject key identifier: 93:4D:EF:0C:46:86:57:91:72:6C:15:68:BC:44:9F:37:D5:36:BE:E3
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 01833735B6C6E319909E5770ED9A027D9D1A
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/k03vDEaGV5FybBVovESfN9U2vuM.roa
Signing time: Tue 13 Sep 2022 14:16:50 +0000
ROA not before: Tue 13 Sep 2022 14:16:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209242
IP address blocks: 185.174.138.0/24 maxlen: 24
45.8.211.0/24 maxlen: 24
185.109.21.0/24 maxlen: 24
45.133.246.0/24 maxlen: 24
45.133.247.0/24 maxlen: 24
185.221.160.0/24 maxlen: 24
45.142.120.0/24 maxlen: 24
194.53.53.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:37:35:b6:c6:e3:19:90:9e:57:70:ed:9a:02:7d:9d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Sep 13 14:16:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=934def0c46865791726c1568bc449f37d536bee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:05:ba:d4:89:71:d8:51:c8:8a:6b:5c:64:16:
4a:77:10:70:48:08:e4:32:4f:e0:50:8a:4a:0b:a9:
f7:41:35:0f:2f:8b:bd:16:e6:17:62:64:3b:bd:0d:
f2:3a:a5:e7:d0:91:20:e0:fe:3d:97:97:f1:e0:b6:
49:62:2a:b0:43:7a:7e:6b:86:64:81:ab:3e:5c:bf:
e3:19:40:0a:66:8a:df:ee:b0:af:0a:32:e2:49:11:
c9:75:4f:dc:9b:da:21:9d:6c:25:1a:51:40:66:d7:
f2:59:42:c8:ef:98:c4:2c:4b:b4:eb:1e:da:5d:0b:
a0:75:78:48:aa:bc:68:7f:32:46:d9:70:c7:ed:36:
1c:d5:6c:b4:7c:6d:02:42:fe:2f:f0:c0:7d:70:9f:
4c:90:c3:79:a0:b4:fc:25:fa:18:42:a7:8e:85:ed:
c0:06:52:ba:b4:cc:94:f0:48:70:31:62:a4:bf:88:
52:ea:2b:50:14:5b:20:35:6d:96:04:cd:d0:db:be:
04:9a:24:e2:08:e8:02:d0:1e:85:89:a4:0b:d4:80:
b8:f4:8a:7c:e7:39:4d:8a:b6:c8:f5:3f:c0:97:0c:
d7:fb:13:6e:bb:3e:43:75:30:0c:64:46:9d:88:4b:
58:6c:7a:99:3a:db:c0:da:04:c4:d5:da:48:4c:ae:
2a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4D:EF:0C:46:86:57:91:72:6C:15:68:BC:44:9F:37:D5:36:BE:E3
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/k03vDEaGV5FybBVovESfN9U2vuM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.211.0/24
45.133.246.0/23
45.142.120.0/24
185.109.21.0/24
185.174.138.0/24
185.221.160.0/24
194.53.53.0/24
Signature Algorithm: sha256WithRSAEncryption
50:a4:11:c3:91:f5:dd:c8:c5:5d:f1:c5:89:c5:8e:de:5a:89:
d5:07:d2:5d:65:9e:d0:c3:42:dd:58:d9:57:f8:24:29:a0:a8:
2b:83:5a:9e:91:c7:7f:b1:87:25:e0:29:69:1d:5c:a1:cc:19:
27:c6:b7:1e:32:b7:2f:77:ca:4f:79:df:f7:2c:28:b4:bd:b3:
22:23:69:74:99:e1:c0:24:ed:2c:aa:1e:b4:68:fb:e2:0e:88:
a2:d0:18:d6:35:d7:01:65:c5:7e:2a:4f:db:cd:23:63:83:a0:
36:95:47:a0:68:f1:2c:c8:59:4b:40:0d:55:e8:6d:72:9c:6f:
f0:0d:3a:1d:b7:e6:81:e5:83:41:24:32:ec:95:ed:36:ff:f9:
e6:55:3b:b6:31:44:6f:6e:63:07:ab:35:4f:d3:12:ce:25:94:
a6:0f:69:c7:ad:db:6c:cc:f1:34:c8:66:42:3f:85:50:1a:de:
11:3b:35:5c:8f:c8:3c:03:1d:e9:d0:9d:70:c9:5e:c1:c1:c0:
57:e8:ba:fc:3a:e1:64:6a:f3:8b:b2:33:fa:b8:d6:93:e1:2f:
02:b5:64:9e:5b:39:fd:38:93:98:87:45:85:bf:4a:28:71:d4:
53:d0:5d:86:c8:db:96:6d:80:ed:4c:cb:0f:6e:97:94:16:2d:
f0:80:32:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:37 2023 by rpki-client on console-fra.rpki-client.org