Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/fFEazUwQVbzXzvfS1_AtVzfzk_k.roa
File: fFEazUwQVbzXzvfS1_AtVzfzk_k.roa (raw, json)
Hash identifier: eGiUskHn84hK25QgG+Sv61naToUwmR/Kl+R2c2sCHms=
Subject key identifier: 7C:51:1A:CD:4C:10:55:BC:D7:CE:F7:D2:D7:F0:2D:57:37:F3:93:F9
Certificate issuer: /CN=de2e917315f0a878b21fc139d49a821aaddc3c97
Certificate serial: 018340BDADF136DD82662566D46C40EC8133
Authority key identifier: DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/fFEazUwQVbzXzvfS1_AtVzfzk_k.roa
Signing time: Thu 15 Sep 2022 10:41:56 +0000
ROA not before: Thu 15 Sep 2022 10:41:56 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 39351
IP address blocks: 45.129.57.0/24 maxlen: 24
45.129.56.0/24 maxlen: 24
185.209.196.0/24 maxlen: 24
185.209.197.0/24 maxlen: 24
193.32.249.0/24 maxlen: 24
185.65.132.0/24 maxlen: 24
185.65.134.0/24 maxlen: 24
185.65.133.0/24 maxlen: 24
185.65.135.0/24 maxlen: 24
141.98.252.0/24 maxlen: 24
141.98.255.0/24 maxlen: 24
141.98.254.0/24 maxlen: 24
45.83.220.0/24 maxlen: 24
45.83.221.0/24 maxlen: 24
45.83.223.0/24 maxlen: 24
45.83.222.0/23 maxlen: 24
45.83.222.0/24 maxlen: 24
185.213.152.0/24 maxlen: 24
185.213.153.0/24 maxlen: 24
185.213.155.0/24 maxlen: 24
185.213.154.0/24 maxlen: 24
193.138.216.0/22 maxlen: 22
193.32.127.0/24 maxlen: 24
193.32.126.0/24 maxlen: 24
185.195.232.0/24 maxlen: 24
185.195.233.0/24 maxlen: 24
2a03:1b20:8::/48 maxlen: 48
2a03:1b20:3::/48 maxlen: 48
2a03:1b20:6::/48 maxlen: 48
2a03:1b20:1::/48 maxlen: 48
2a03:1b20:a::/48 maxlen: 48
2a03:1b20:5::/48 maxlen: 48
2a03:1b20:beef::/48 maxlen: 48
2a03:1b20:2::/48 maxlen: 48
2a03:1b20:7::/48 maxlen: 48
2a03:1b20:9::/48 maxlen: 48
2a03:1b20:4::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:40:bd:ad:f1:36:dd:82:66:25:66:d4:6c:40:ec:81:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de2e917315f0a878b21fc139d49a821aaddc3c97
Validity
Not Before: Sep 15 10:41:56 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c511acd4c1055bcd7cef7d2d7f02d5737f393f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:39:c4:f7:1a:6e:0d:68:cb:6b:8f:24:a0:e8:
bf:7f:82:9b:e5:c4:5c:2a:17:8c:97:1e:3e:83:bf:
31:78:f9:7d:b8:87:96:f0:9a:43:4c:be:fe:8f:6d:
75:e3:72:f4:45:94:af:72:eb:36:30:eb:9a:6c:2a:
04:34:77:7d:6d:80:a2:e8:20:d2:b7:fe:53:3b:cd:
58:d8:c4:94:22:45:be:53:17:ba:95:88:a6:e5:75:
0a:f7:5b:fd:e6:2d:6c:81:da:a2:df:32:2b:e6:9f:
f6:be:17:ae:ed:74:b9:f4:de:74:8f:ac:c7:6f:5f:
0e:b1:c9:7b:3b:2b:3a:af:0f:8b:db:b9:8c:90:2b:
4f:6b:53:f5:64:54:00:da:b8:02:d9:6b:8b:90:c4:
c1:5c:d8:a4:a4:d3:3b:97:f9:ae:b0:73:e6:5a:63:
d9:38:18:9f:a8:68:6f:04:ee:9e:b2:cc:c1:5d:69:
43:a6:b3:ee:5f:b3:17:93:83:e3:2b:49:e7:98:0a:
6d:5a:b0:1e:24:b4:a4:04:f4:7e:bd:41:74:6c:81:
94:7a:c3:4d:30:a5:9f:db:cc:80:a0:17:6a:7b:51:
a2:1f:17:e5:76:e7:49:52:97:79:26:5e:6f:e0:4b:
a8:63:63:bb:e7:d4:10:e4:aa:de:16:f6:2b:fa:0b:
bb:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:51:1A:CD:4C:10:55:BC:D7:CE:F7:D2:D7:F0:2D:57:37:F3:93:F9
X509v3 Authority Key Identifier:
keyid:DE:2E:91:73:15:F0:A8:78:B2:1F:C1:39:D4:9A:82:1A:AD:DC:3C:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3i6RcxXwqHiyH8E51JqCGq3cPJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/fFEazUwQVbzXzvfS1_AtVzfzk_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2d5bc8-5d93-4b0a-a8b6-f8d65c983744/1/3i6RcxXwqHiyH8E51JqCGq3cPJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.220.0/22
45.129.56.0/23
141.98.252.0/24
141.98.254.0/23
185.65.132.0/22
185.195.232.0/23
185.209.196.0/23
185.213.152.0/22
193.32.126.0/23
193.32.249.0/24
193.138.216.0/22
IPv6:
2a03:1b20:1::-2a03:1b20:a:ffff:ffff:ffff:ffff:ffff
2a03:1b20:beef::/48
Signature Algorithm: sha256WithRSAEncryption
6c:96:bd:6e:2e:fe:03:8a:1b:6d:0f:45:84:42:97:c5:59:1a:
18:16:65:9f:c5:dc:8a:58:70:bf:94:c0:4f:3c:56:02:02:6e:
23:32:b6:5b:a4:6f:d0:fb:1f:5d:da:ae:2f:46:29:7f:81:4e:
c8:16:56:66:e7:9f:5b:87:02:25:58:07:f1:69:1e:e3:2c:5d:
7c:0b:43:f4:c9:b8:5e:61:02:5d:f0:05:51:50:c8:9a:8d:0f:
35:bb:9a:8c:70:82:af:3d:19:d7:18:b1:4e:d7:78:08:de:35:
43:9c:a1:c1:99:33:fa:94:a1:98:38:f5:b0:40:90:d0:77:d6:
22:14:b9:e2:d2:4e:d0:a9:b3:1e:89:ba:d0:29:1d:f4:72:4c:
5b:3d:17:00:a2:b3:4a:db:a2:ae:8b:33:72:5f:ff:f6:8b:8c:
8b:84:3c:80:fb:e4:32:38:d1:fd:f8:4e:6a:04:d1:5f:7c:e5:
6f:7b:5f:e8:c0:3e:f5:a8:42:84:09:6b:cf:d3:56:a6:de:3f:
95:75:bf:d2:f3:01:db:16:31:d0:34:06:49:a1:5c:2b:1d:84:
69:18:d5:d9:12:9c:29:ed:d2:fd:79:d8:1d:b2:b1:eb:f2:8b:
41:3c:f3:d2:03:63:24:17:4b:c0:6e:9e:f6:c5:27:92:c3:31:
f4:a5:bd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:27 2024 by rpki-client on console-ams.rpki-client.org