Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RfVpQrAwY0K1xw4RzwhuVjU6xSs.roa
File: RfVpQrAwY0K1xw4RzwhuVjU6xSs.roa (raw, json)
Hash identifier: qeXZZaFlAjBqCmx4YwB3CnqqCSM2QOC6Qg3AvNqYQeI=
Subject key identifier: 45:F5:69:42:B0:30:63:42:B5:C7:0E:11:CF:08:6E:56:35:3A:C5:2B
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 08703A38
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RfVpQrAwY0K1xw4RzwhuVjU6xSs.roa
Signing time: Mon 27 Jun 2022 09:30:40 +0000
ROA not before: Mon 27 Jun 2022 09:30:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 185.230.52.0/23 maxlen: 24
185.255.124.0/24 maxlen: 24
185.121.12.0/22 maxlen: 24
185.206.251.0/24 maxlen: 24
185.206.248.0/24 maxlen: 24
185.226.107.0/24 maxlen: 24
185.234.20.0/22 maxlen: 24
185.234.23.0/24 maxlen: 24
185.194.29.0/24 maxlen: 24
185.223.153.0/24 maxlen: 24
185.240.120.0/23 maxlen: 24
45.8.20.0/22 maxlen: 24
185.238.228.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141572664 (0x8703a38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jun 27 09:30:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45f56942b0306342b5c70e11cf086e56353ac52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1f:1f:41:05:40:97:96:8a:41:42:7c:1c:8e:
5c:10:e6:5c:89:6a:67:38:32:fb:01:2a:6a:fd:b7:
df:cb:fa:a5:b1:93:6b:ee:1b:b1:3b:a8:a5:4f:fd:
51:05:fe:13:7a:8d:39:c6:8b:77:9a:f1:10:20:ae:
1b:8e:71:c3:dc:33:a1:3f:fc:cb:80:b6:7f:33:44:
1d:3c:70:5d:cd:95:26:b2:0c:c6:16:28:a1:3c:ba:
cf:06:0f:96:53:c3:b8:7f:98:f8:e9:72:ae:8d:67:
c2:7d:58:1b:b3:4e:98:1c:43:16:44:f8:dd:9e:2d:
32:73:32:72:c7:dd:27:d7:a8:37:47:fa:ea:5b:48:
83:0a:4b:e8:73:95:db:d6:16:ed:34:5a:97:b7:1f:
6f:52:95:30:45:a1:3d:09:44:d9:d8:8e:0f:ac:81:
34:9a:43:13:aa:54:65:d8:fa:ab:59:28:33:df:06:
03:64:82:7d:90:df:a7:d3:09:ed:0b:a7:29:8b:39:
9c:81:29:a1:d3:58:9d:4a:22:b8:b9:ae:7c:9b:91:
7e:69:03:a6:e0:7b:bb:d7:43:97:90:75:70:14:69:
3d:36:98:55:5d:b3:6a:4e:1f:d7:bc:b9:7b:07:77:
72:f0:1e:77:ba:42:97:85:39:1c:cf:0a:e6:61:0c:
ba:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F5:69:42:B0:30:63:42:B5:C7:0E:11:CF:08:6E:56:35:3A:C5:2B
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/RfVpQrAwY0K1xw4RzwhuVjU6xSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.20.0/22
185.121.12.0/22
185.194.29.0/24
185.206.248.0/24
185.206.251.0/24
185.223.153.0/24
185.226.107.0/24
185.230.52.0/23
185.234.20.0/22
185.238.228.0/22
185.240.120.0/23
185.255.124.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:f4:b8:96:57:3e:4b:73:a7:ea:3a:15:f1:1a:79:ca:6c:0d:
5d:17:10:89:a2:29:1b:a7:a9:7a:22:b0:96:72:f5:2b:82:0e:
63:19:58:60:e3:d7:34:7c:83:d9:98:81:64:68:0b:a8:6f:79:
78:44:b1:a5:40:76:20:4f:f4:14:94:64:6c:e8:1c:3b:92:9c:
ab:90:62:2d:a9:8f:41:d3:71:1b:ee:c5:45:02:1e:63:9b:df:
a2:bf:09:d4:19:bc:ac:26:00:9c:57:7f:98:f4:6b:42:c8:97:
98:2a:f2:34:c9:46:20:d4:55:d5:e7:60:fb:d5:12:e1:2c:c3:
02:db:8f:1c:9d:2c:ea:9a:36:f2:71:e3:3a:c2:8b:b4:50:1f:
ed:bb:34:92:0d:b3:ff:96:52:e9:f0:af:e1:77:82:72:da:82:
0a:f0:0e:5b:d3:92:fb:38:7f:ef:29:04:c5:6e:59:df:8a:11:
ac:4d:82:c1:ed:39:b3:fb:49:4e:59:09:4d:d0:4d:3f:2a:cf:
d1:46:47:b8:6f:54:5d:a8:b2:25:47:f3:d1:cc:e5:a9:0b:e6:
4a:18:24:6e:d1:78:02:34:ac:2f:14:55:b6:47:ad:88:31:e7:
1f:f9:cd:d3:08:e7:d7:c5:3b:1c:08:6b:a3:19:1f:90:9a:68:
3d:05:6b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:26 2024 by rpki-client on console-ams.rpki-client.org