Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/AuGmI7KlGgReYRyGrko6y0YEenQ.roa
File: AuGmI7KlGgReYRyGrko6y0YEenQ.roa (raw, json)
Hash identifier: WZNEJq20aw3HFe1VLzYFJCBURL39/OSab47CE2WMe6k=
Subject key identifier: 02:E1:A6:23:B2:A5:1A:04:5E:61:1C:86:AE:4A:3A:CB:46:04:7A:74
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 1889CA6C
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/AuGmI7KlGgReYRyGrko6y0YEenQ.roa
Signing time: Tue 01 Feb 2022 01:57:13 +0000
ROA not before: Tue 01 Feb 2022 01:57:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 46261
IP address blocks: 45.12.232.0/24 maxlen: 32
45.138.210.0/23 maxlen: 24
45.10.3.0/24 maxlen: 32
45.10.2.0/24 maxlen: 32
185.182.60.0/24 maxlen: 32
193.160.212.0/24 maxlen: 32
185.226.75.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 411683436 (0x1889ca6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Feb 1 01:57:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=02e1a623b2a51a045e611c86ae4a3acb46047a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5b:7f:a8:2c:fa:ac:9e:2e:60:24:a7:ec:4c:
a7:85:f9:72:e1:c9:07:15:97:cc:b9:01:8f:f5:20:
53:bf:3c:69:75:d0:62:71:a2:54:a1:5b:38:36:32:
d8:06:72:5d:ea:d7:a6:07:0e:3b:b6:13:ab:8f:71:
5e:08:ee:c3:b0:cd:44:cd:bc:2c:f6:ba:5d:b0:5f:
e5:9d:88:f6:a3:31:34:fc:57:fe:bb:c9:54:48:e4:
17:19:87:44:39:6e:e3:5b:c8:bf:17:66:13:37:93:
72:cf:20:c8:7e:e4:c1:ba:36:ec:b6:cb:33:a0:6b:
f0:0f:cc:9c:9b:e2:65:98:e3:cb:ba:93:d1:6c:5d:
85:f5:22:21:d2:14:f7:c3:22:eb:e8:05:30:45:ac:
29:1a:39:61:82:4b:79:b6:07:2f:69:0f:8c:2c:2d:
ed:1f:b4:49:3b:af:ad:ea:4a:24:0a:97:1a:8c:eb:
bb:9e:1a:87:76:fe:4f:c1:0d:20:37:45:f3:14:89:
53:20:23:7b:64:06:f2:de:eb:9b:03:0c:53:1a:53:
e6:fe:9b:ac:13:a2:34:c5:d6:e6:b1:5c:2e:29:7d:
c9:ee:dd:64:15:be:48:74:84:59:c2:2a:d6:ee:ea:
77:55:94:42:8d:6f:96:9e:c2:19:af:df:d3:26:5d:
48:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:E1:A6:23:B2:A5:1A:04:5E:61:1C:86:AE:4A:3A:CB:46:04:7A:74
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/AuGmI7KlGgReYRyGrko6y0YEenQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.10.2.0/23
45.12.232.0/24
45.138.210.0/23
185.182.60.0/24
185.226.75.0/24
193.160.212.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:95:1b:cd:a8:a1:03:c9:e2:d0:ae:c5:88:8e:65:99:79:55:
ff:ba:79:49:41:b7:78:94:e3:a2:50:b2:3d:cf:ef:63:f8:f9:
a7:a2:20:c7:31:1e:2b:21:4b:96:d4:c6:de:9b:9b:89:37:20:
a9:0a:16:fa:3e:64:4f:27:18:a3:af:52:ac:71:64:a7:61:83:
c3:a2:5f:5d:0e:2e:7d:43:19:6b:22:97:c5:a9:26:bb:96:31:
90:43:b8:e0:7c:a5:2d:cf:90:c9:7c:da:5e:0b:e0:31:80:2a:
d9:42:93:7d:b6:80:dc:81:11:81:a1:90:f2:21:78:13:07:a8:
0e:f7:05:16:5c:20:20:ce:4d:4d:48:9a:a6:92:9a:11:ee:68:
33:0d:99:d6:a8:1b:4a:3f:17:c3:e2:5f:21:9c:a9:25:71:0b:
6f:55:ed:a4:9b:53:36:53:30:2f:42:12:63:c5:06:8f:c7:47:
f9:d2:96:2e:6c:d7:68:1f:13:5a:6b:ef:fe:e3:71:fb:04:a8:
e3:44:73:b6:63:96:ba:2b:32:04:1e:33:04:7e:db:56:a3:82:
65:4e:d0:9c:5c:1c:27:df:e3:d7:0d:e3:6c:23:d1:8a:01:67:
9f:fe:d0:47:9c:64:40:2c:18:e3:76:f6:8a:66:fd:9c:e3:5c:
06:9c:67:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:17 2023 by rpki-client on console-fra.rpki-client.org