Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/E2ZVkr2_GFwDWGnVBbrEtUOJ0u0.roa
File: E2ZVkr2_GFwDWGnVBbrEtUOJ0u0.roa (raw, json)
Hash identifier: xcexP5OBWezXjtHfgOW1OQwb80PcUt5fqdHB8LqTazw=
Subject key identifier: 13:66:55:92:BD:BF:18:5C:03:58:69:D5:05:BA:C4:B5:43:89:D2:ED
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018506F936E1F14D1D63153F144A15199C3A
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/E2ZVkr2_GFwDWGnVBbrEtUOJ0u0.roa
Signing time: Mon 12 Dec 2022 15:34:33 +0000
ROA not before: Mon 12 Dec 2022 15:34:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207279
IP address blocks: 45.90.16.0/24 maxlen: 24
185.218.22.0/24 maxlen: 24
185.126.83.0/24 maxlen: 24
185.228.73.0/24 maxlen: 24
45.131.134.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:06:f9:36:e1:f1:4d:1d:63:15:3f:14:4a:15:19:9c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 12 15:34:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13665592bdbf185c035869d505bac4b54389d2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:06:b9:1d:53:9b:cb:7e:0e:01:ba:53:25:fa:
a4:40:be:f6:3f:20:78:29:50:4b:52:7c:56:28:f1:
42:a3:e8:e8:e1:8b:68:6f:e2:e9:89:4b:35:12:69:
de:1d:83:38:91:39:e3:9b:bd:15:55:cb:e0:76:6a:
16:98:42:3d:f5:ae:8d:6e:e7:eb:e7:9e:e6:7b:18:
1c:f0:e3:5a:23:e8:d4:ec:6c:e9:b1:79:b1:78:e9:
69:f1:db:58:de:96:3a:41:3a:36:fe:15:ac:17:1f:
51:f1:9c:44:a3:2a:79:27:75:a3:67:b0:c3:c0:db:
0b:5c:65:19:3e:e9:95:ab:43:6a:b8:66:b6:d5:a7:
dc:a8:c4:8b:7a:4e:d3:67:be:37:d7:f9:46:2a:5f:
43:47:a2:c8:9f:9c:45:c6:36:78:a4:b3:f6:9f:46:
76:84:39:12:fe:e3:55:82:64:d7:c4:24:35:cf:68:
47:d5:87:c3:dd:18:2e:4e:87:9a:9c:d5:9c:ab:98:
06:52:03:22:7e:1f:c6:f8:86:d0:00:5e:92:f3:18:
d2:9b:0b:6b:7d:d7:b1:8b:cd:a4:9f:57:be:cc:4c:
d1:4c:19:08:1a:d6:6b:50:e1:94:21:1d:22:62:c9:
96:08:92:44:2b:2c:00:8f:cf:87:29:66:15:a2:b3:
c3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:66:55:92:BD:BF:18:5C:03:58:69:D5:05:BA:C4:B5:43:89:D2:ED
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/E2ZVkr2_GFwDWGnVBbrEtUOJ0u0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.16.0/24
45.131.134.0/24
185.126.83.0/24
185.218.22.0/24
185.228.73.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:af:11:b8:95:f3:da:89:03:e4:b1:6b:04:6b:f0:70:43:29:
05:88:78:4b:f5:f2:bf:68:12:c9:7d:05:ea:1e:3a:c1:75:78:
6e:0e:90:2a:e1:b0:a6:df:36:c2:9b:81:3c:c8:70:31:42:2e:
94:0d:0b:d4:be:1b:a9:33:7a:6b:e0:3d:ef:cc:c2:0f:5b:76:
36:98:43:e8:34:56:ec:f9:e4:da:fc:48:19:64:4b:12:17:b4:
d7:8e:c2:87:ab:f3:ab:ee:c3:7e:1d:4f:61:b6:f3:23:db:d8:
50:e3:c9:e4:ce:ba:b9:d4:56:d4:de:48:ed:7d:cb:0a:bc:36:
38:b7:92:86:84:16:60:ce:9c:ee:34:99:18:5f:b3:c3:22:a6:
72:c7:2b:fa:6c:03:02:83:62:8e:7b:a8:ce:ee:65:13:c4:88:
9d:59:be:12:30:95:b3:24:2b:aa:fe:37:25:d5:26:77:89:62:
2c:69:24:94:6a:6d:ee:e4:a9:1a:f0:c7:89:59:c8:df:18:e6:
b4:1d:9e:16:55:22:8c:d5:f6:72:27:c4:8f:04:41:fc:92:7f:
0d:59:34:00:93:5a:cd:22:01:2d:13:06:70:fb:3a:1d:d6:6b:
11:f0:37:c7:39:9d:0c:d5:eb:51:ce:f2:3c:c1:b6:13:ea:21:
fc:53:83:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:40 2024 by rpki-client on console-fra.rpki-client.org