Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/By61Lr_EWocEk6Wh4Xv2hKWS3Jg.roa
File: By61Lr_EWocEk6Wh4Xv2hKWS3Jg.roa (raw, json)
Hash identifier: /0ZIY5mk1RPqvbjhQx9rTb+mYy/GePl1kFqsQWEbqjM=
Subject key identifier: 07:2E:B5:2E:BF:C4:5A:87:04:93:A5:A1:E1:7B:F6:84:A5:92:DC:98
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 17FBCAB9
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/By61Lr_EWocEk6Wh4Xv2hKWS3Jg.roa
Signing time: Sat 01 Jan 2022 04:54:59 +0000
ROA not before: Sat 01 Jan 2022 04:54:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398397
IP address blocks: 194.34.231.0/24 maxlen: 32
45.12.161.0/24 maxlen: 32
45.13.246.0/23 maxlen: 32
185.120.20.0/23 maxlen: 32
185.207.177.0/24 maxlen: 32
195.85.41.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 402377401 (0x17fbcab9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:54:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=072eb52ebfc45a870493a5a1e17bf684a592dc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a0:89:91:53:f6:0f:79:d3:87:ef:57:a3:94:
c5:bc:29:74:ff:2d:e9:73:0a:a9:c4:75:b8:d4:8d:
6d:81:a9:e9:06:4e:17:a7:96:d3:d7:af:dd:10:f2:
14:d4:e1:3b:94:4c:47:78:70:ef:3e:be:5c:16:17:
1a:69:ce:fe:9c:f3:53:cb:9d:ee:c8:51:31:cf:73:
1b:4a:9d:55:bc:aa:8f:0a:25:c1:91:8a:65:00:e9:
e7:41:c3:b3:bc:4b:96:b5:ed:ea:22:ef:cc:42:56:
63:43:c1:77:5b:32:8d:a7:c4:62:62:d4:a8:cf:35:
a1:f4:f6:10:35:aa:50:ac:af:58:b2:c2:60:22:08:
c4:0f:eb:06:c8:87:65:1e:a9:31:e0:b5:ea:d1:34:
7a:bd:57:4e:81:73:99:78:c7:18:2a:6f:d7:a1:a9:
d9:b9:e1:57:92:09:96:d5:4b:2c:e0:6e:d6:f6:81:
34:72:0f:79:fe:14:16:5a:2c:e1:5c:b3:68:d7:dc:
35:34:35:82:5d:c2:13:e6:c4:5e:0b:91:b9:a4:a1:
54:71:fb:18:32:79:9a:b1:da:a7:04:1e:4b:79:35:
a4:b7:d7:49:63:93:d0:5c:b7:08:ce:88:42:c0:e3:
9c:19:7a:f0:d3:d3:81:f9:d0:69:dc:f4:c2:8c:9e:
fc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:2E:B5:2E:BF:C4:5A:87:04:93:A5:A1:E1:7B:F6:84:A5:92:DC:98
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/By61Lr_EWocEk6Wh4Xv2hKWS3Jg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.161.0/24
45.13.246.0/23
185.120.20.0/23
185.207.177.0/24
194.34.231.0/24
195.85.41.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:b2:61:b8:20:5a:d7:b7:68:9d:c6:28:b9:88:51:29:f1:48:
84:03:50:3e:ec:e6:2b:24:36:89:a9:79:f4:41:c0:52:01:2b:
bd:fa:32:80:a8:ba:83:59:0f:bd:d3:e0:0d:bf:35:d6:89:6a:
53:e9:6d:10:cb:a7:78:e3:55:99:27:fd:20:2d:0e:29:c1:3d:
85:40:26:8b:8d:13:c2:89:4a:1d:a9:47:4b:36:d5:88:48:8c:
32:85:07:f8:03:8d:7b:ee:25:c8:24:1f:af:69:cb:1a:af:af:
2f:50:45:47:9d:29:1d:c8:2f:7e:eb:ad:fb:47:4a:02:e4:2c:
65:39:ee:be:cf:67:61:c4:6f:6a:d4:64:7f:ff:4b:16:9b:44:
29:84:dd:b7:0b:aa:d6:65:6c:1a:9e:ec:67:52:68:db:29:a5:
f2:ec:22:53:9f:40:ae:dd:4a:bc:2c:17:8f:60:c0:c3:6a:fc:
37:4b:49:ad:3c:e7:a5:36:ea:82:2e:67:31:70:43:1d:9f:1a:
de:19:4d:52:8e:c2:78:c1:2d:61:94:12:cc:99:ae:e4:41:dd:
50:d7:3b:e2:53:2e:b5:14:77:f1:32:4b:18:b6:a3:9d:03:78:
5b:b9:fc:8a:90:3e:22:1f:5b:35:4f:f0:06:de:8d:a6:d7:aa:
c3:34:b8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org