Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/cTN7GTuIzqiAR4NFbRVLCYI2UGc.roa
File: cTN7GTuIzqiAR4NFbRVLCYI2UGc.roa (raw, json)
Hash identifier: kRKTqyU19hwfIyXroW4GjeVWfdO56iSq6VwRWL2IbP4=
Subject key identifier: 71:33:7B:19:3B:88:CE:A8:80:47:83:45:6D:15:4B:09:82:36:50:67
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01853E7214B3F85F18A3BABBE63AC2A4E23F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/cTN7GTuIzqiAR4NFbRVLCYI2UGc.roa
Signing time: Fri 23 Dec 2022 10:05:41 +0000
ROA not before: Fri 23 Dec 2022 10:05:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 45.90.18.0/24 maxlen: 24
45.147.226.0/24 maxlen: 24
194.147.17.0/24 maxlen: 24
185.246.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:3e:72:14:b3:f8:5f:18:a3:ba:bb:e6:3a:c2:a4:e2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 23 10:05:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=71337b193b88cea8804783456d154b0982365067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:41:0e:d2:3e:fc:f3:67:ed:b4:14:d3:a3:
05:bc:64:f8:53:80:82:c7:9b:68:96:81:16:79:c3:
d9:46:ef:15:ca:89:0d:b6:8e:1f:0b:8f:84:0a:25:
d8:53:3f:c1:ea:87:65:5b:5b:86:9f:c4:74:6d:b7:
81:7c:93:75:f8:35:b7:b1:93:00:59:6d:60:a0:8e:
d1:e8:6e:ec:eb:f3:3a:7d:81:a7:ab:16:2f:81:71:
29:71:b6:25:03:21:6c:a4:de:fb:05:f7:43:17:fe:
bd:a0:3c:b8:aa:d4:8f:fd:1d:f0:cf:3d:be:eb:e3:
4d:54:73:4d:e4:d6:04:66:d8:ee:cb:01:0e:b6:16:
ea:8f:be:50:4d:f3:89:b6:e8:d5:3a:b3:30:0d:6c:
9b:25:82:d4:a5:05:3b:20:14:63:2c:d6:5e:48:ab:
fb:98:75:23:72:b5:44:a9:0d:a0:44:52:14:28:75:
9b:1a:48:88:18:b5:6a:79:bb:40:88:f6:70:67:f8:
0b:34:61:06:fb:33:09:18:f1:e2:53:f3:98:46:64:
b4:77:32:74:19:ca:88:6d:30:39:b1:e9:74:34:ac:
94:67:72:fe:a2:fb:e0:cf:a4:24:c3:0e:c2:9f:19:
77:09:2f:68:69:1f:e5:43:37:de:44:d2:bc:79:fb:
85:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:33:7B:19:3B:88:CE:A8:80:47:83:45:6D:15:4B:09:82:36:50:67
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/cTN7GTuIzqiAR4NFbRVLCYI2UGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.18.0/24
45.147.226.0/24
185.246.113.0/24
194.147.17.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:3f:91:55:bf:6f:65:68:dc:6c:f3:d4:a3:d2:a1:3e:07:82:
a0:1d:7d:e2:0d:4b:22:e4:3c:22:94:52:1b:77:3b:d5:85:15:
bf:e7:e8:6f:56:14:d3:94:86:a3:68:5b:3a:6e:d2:3a:64:8b:
cb:f8:86:35:07:ac:0f:35:33:a9:dc:19:2a:d7:39:11:35:62:
67:44:c6:d3:bb:4e:d2:ab:4d:5b:a2:5c:f3:4f:23:d8:c7:f7:
57:f1:e1:94:f9:6c:82:3c:35:8b:91:91:56:d6:9c:08:43:b0:
61:a7:61:a2:5f:86:ab:14:f9:9f:c5:ad:f9:10:58:51:f0:39:
be:26:29:3a:3e:e5:4b:74:55:c5:dc:97:4a:f9:65:3e:cc:c0:
13:09:64:2e:83:70:9f:dc:28:37:fd:2e:f0:2f:dd:c1:4a:67:
a7:e1:f2:69:e2:1b:2c:dd:f1:4c:69:16:0e:1a:1a:b3:3c:87:
09:36:09:88:43:ac:75:b1:fc:0e:1e:ff:d5:28:0c:21:8f:13:
16:23:67:e5:ae:4e:a6:d9:69:35:3f:eb:29:6f:53:e6:cd:7e:
14:0f:7d:e2:5b:a3:47:8d:fd:4a:3f:12:7c:ab:ba:45:8e:ac:
47:f3:9f:1d:bc:0f:b2:67:c4:75:ab:00:ac:94:c3:d7:98:40:
a3:7b:36:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:28 2024 by rpki-client on console-ams.rpki-client.org