Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/2cZvO3LZrOkVKQtynVlCFoBGngs.roa
File: 2cZvO3LZrOkVKQtynVlCFoBGngs.roa (raw, json)
Hash identifier: vwSg/kACy7cbAw8XaWGgMY8wcsK2cHjD+donkGy5Qgs=
Subject key identifier: D9:C6:6F:3B:72:D9:AC:E9:15:29:0B:72:9D:59:42:16:80:46:9E:0B
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 17CD36AB
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/2cZvO3LZrOkVKQtynVlCFoBGngs.roa
Signing time: Sat 01 Jan 2022 04:54:30 +0000
ROA not before: Sat 01 Jan 2022 04:54:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 134526
IP address blocks: 188.116.18.0/24 maxlen: 32
45.138.109.0/24 maxlen: 32
185.236.80.0/24 maxlen: 32
194.49.108.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 399324843 (0x17cd36ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:54:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d9c66f3b72d9ace915290b729d59421680469e0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:a7:85:fd:e6:58:42:bb:24:82:5d:a5:f3:
75:7a:cf:d3:ef:6a:25:c6:39:b2:d7:1c:98:33:b9:
0c:bd:21:e9:a0:64:fc:8d:82:07:c0:ae:4a:d5:63:
4d:e8:dc:01:7d:c9:1b:ff:71:34:be:4a:48:ba:36:
6b:19:30:85:2b:4a:37:01:6d:bb:f9:e6:56:08:c3:
05:a5:4d:e2:c6:9e:27:32:c5:5f:c9:a8:7f:fe:9c:
08:d1:24:9b:f2:ee:37:ec:0b:7a:14:8d:3b:c7:05:
16:cd:55:e4:b7:62:54:de:68:b5:e0:4a:e5:83:f4:
0e:b9:e3:f1:51:2d:50:c6:d9:49:33:87:d1:63:5d:
f2:a4:b7:9e:2a:82:4e:01:80:ef:57:e8:a5:76:2d:
e0:12:d5:79:dd:87:21:a6:87:b7:1c:cd:a7:7b:14:
33:09:4e:5f:96:00:8d:f5:68:19:c0:fd:0a:95:2a:
6b:eb:23:dd:2b:10:2c:af:82:6d:5f:ed:8b:f7:d2:
50:28:96:c9:71:9b:73:25:d3:6b:7f:86:8c:4b:9b:
8c:44:4f:b9:1e:fb:91:ae:37:f2:ce:a2:94:14:18:
40:97:49:c1:06:7e:ba:0c:34:58:46:06:52:07:85:
96:a5:36:7f:c7:22:c5:87:27:67:6b:de:7a:fb:cd:
b5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C6:6F:3B:72:D9:AC:E9:15:29:0B:72:9D:59:42:16:80:46:9E:0B
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/2cZvO3LZrOkVKQtynVlCFoBGngs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.109.0/24
185.236.80.0/24
188.116.18.0/24
194.49.108.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:43:34:aa:c3:11:76:91:43:7b:45:b8:ae:75:26:43:cc:c8:
cb:49:9d:82:6b:ba:34:5b:0a:77:93:e6:4c:37:20:9c:6d:86:
30:9e:67:e5:64:b0:92:6b:45:de:72:a1:57:74:db:12:45:25:
a8:4e:ee:8e:19:d9:14:88:9c:35:bc:91:92:e1:7b:6c:3d:e2:
42:3d:78:65:7e:9e:d0:66:37:50:35:9c:c9:9a:33:02:00:e8:
65:ab:2a:66:d8:de:ff:b8:f4:35:92:1f:f8:d9:93:6f:b0:38:
e6:81:d1:06:87:f8:b3:1d:65:92:60:dd:63:b0:6a:45:c9:df:
bc:cf:07:f3:2c:f7:f9:fe:55:75:92:8a:b5:8a:10:83:f6:f6:
b9:30:90:7f:1e:21:32:60:20:9b:37:fb:c1:2f:ba:5a:69:9f:
ea:aa:52:9a:76:1d:a1:07:36:b4:ae:ad:42:58:0f:90:95:8b:
ac:a0:db:6c:66:9c:7b:0c:04:0e:31:9f:0a:2c:9d:b6:18:72:
8f:d6:ad:de:93:d7:a6:ae:33:dc:d7:e9:e2:3c:d0:43:eb:61:
a9:35:94:0c:e0:9a:1c:ca:46:78:e0:7a:2e:46:dc:4d:29:c9:
34:d8:10:1c:15:06:5a:a4:38:ec:53:29:5a:20:98:4a:53:77:
2d:f2:31:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:17 2023 by rpki-client on console-fra.rpki-client.org