Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/i7dZhLETeLiHPO1iFtzOjJc9PvE.roa
File: i7dZhLETeLiHPO1iFtzOjJc9PvE.roa (raw, json)
Hash identifier: bAHh7zYuLI6o41NLn/VNfCiHN7wX6fLmtPy7zeiqRX0=
Subject key identifier: 8B:B7:59:84:B1:13:78:B8:87:3C:ED:62:16:DC:CE:8C:97:3D:3E:F1
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 01850CFA64B20D0F05D6A51B5051F7DA6C6F
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/i7dZhLETeLiHPO1iFtzOjJc9PvE.roa
Signing time: Tue 13 Dec 2022 19:33:34 +0000
ROA not before: Tue 13 Dec 2022 19:33:34 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 211237
IP address blocks: 45.90.18.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
194.147.17.0/24 maxlen: 24
185.246.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:0c:fa:64:b2:0d:0f:05:d6:a5:1b:50:51:f7:da:6c:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Dec 13 19:33:34 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8bb75984b11378b8873ced6216dcce8c973d3ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:50:9c:3d:08:bd:7f:89:6d:b4:6b:ad:05:00:
79:c1:cb:07:61:25:36:ed:e7:23:ac:4d:66:4e:fd:
5a:87:a1:bc:ab:af:d6:50:c3:65:fb:4e:12:3e:e1:
b6:bc:3a:8f:35:a6:a6:16:7a:c4:b1:62:6b:41:d3:
6b:33:1c:7f:fe:3b:09:f0:e3:d3:fc:48:46:f1:1c:
8a:1e:81:44:5d:db:2c:ef:33:69:7c:a1:ea:d9:09:
4f:d5:9f:ad:62:48:2d:35:2e:4e:ca:97:c9:2b:2f:
e0:b2:b0:99:17:33:8b:16:31:f5:45:af:86:4c:ce:
9a:fb:f1:3c:d0:cd:0b:ca:29:11:b2:d6:70:db:87:
26:6e:b1:aa:ac:ad:3e:96:26:dc:65:cd:fa:37:50:
ad:e4:f4:2d:ee:2a:d6:86:48:bb:35:2a:80:ac:2e:
20:85:f5:0c:4a:b8:e3:96:8e:38:c5:43:9a:5b:e6:
1e:79:1f:7f:08:02:18:ed:85:97:2a:6a:71:39:d3:
a2:e5:38:35:a1:47:e0:0d:36:62:25:07:3e:be:5c:
fb:37:0f:d3:ce:ae:79:b0:5b:9f:8e:e5:d8:ec:d8:
85:b9:d8:2f:71:97:c5:d3:64:f1:93:6f:f4:02:e5:
98:80:f7:b0:52:69:39:01:e8:fa:52:09:67:e7:35:
55:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:B7:59:84:B1:13:78:B8:87:3C:ED:62:16:DC:CE:8C:97:3D:3E:F1
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/i7dZhLETeLiHPO1iFtzOjJc9PvE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.18.0/24
185.246.112.0/23
194.147.17.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:bd:68:22:d6:b0:85:ff:f9:a3:c0:d8:9b:c4:89:3c:a7:7b:
2a:0b:d2:eb:f1:d8:24:24:e5:e7:f5:ec:bb:f6:5a:6e:6a:d1:
5f:46:ff:aa:b2:2f:14:27:d2:7e:95:c6:e5:b7:87:f9:6d:73:
7b:41:ae:ac:6c:77:d0:dc:66:dd:95:69:0f:6c:a2:e7:d2:e5:
2e:ab:09:4b:db:a7:a0:0e:bb:f2:96:c4:41:1e:c1:40:21:d8:
a1:f8:4f:fe:f5:5f:6b:e6:8b:25:47:00:d9:81:1e:4b:19:b3:
b5:1a:8c:cf:29:7b:b0:0b:61:91:d3:d8:57:71:43:86:25:08:
23:d2:c2:19:97:8f:c1:7a:da:4f:1c:e6:39:66:6f:e2:5e:ed:
db:d5:04:c2:ff:b2:40:4b:c1:32:95:87:cc:99:83:71:23:75:
35:4e:31:91:cd:ee:cf:90:62:79:ce:49:1b:db:35:ae:49:af:
a9:e3:89:27:42:7c:42:3e:7d:82:b6:09:fe:2f:0d:49:c0:fa:
cd:7d:9f:d3:0d:28:5b:3c:35:51:c7:30:21:6e:32:d0:2e:fe:
7b:1e:eb:30:77:5d:95:42:1b:cd:19:d8:a9:52:d0:af:ba:04:
44:60:5b:c8:ac:fc:5d:91:8f:8c:37:de:14:d1:f8:01:84:5e:
09:34:59:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:28 2024 by rpki-client on console-ams.rpki-client.org