Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Houm_8ognE-XHsQ28Dml8cqY24o.roa
File: Houm_8ognE-XHsQ28Dml8cqY24o.roa (raw, json)
Hash identifier: xmoAGzckqyV42wyi/EWrJutjxk4hD2L9Z2H3yA/rAWM=
Subject key identifier: 1E:8B:A6:FF:CA:20:9C:4F:97:1E:C4:36:F0:39:A5:F1:CA:98:DB:8A
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 17C009B2
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Houm_8ognE-XHsQ28Dml8cqY24o.roa
Signing time: Sat 01 Jan 2022 04:54:18 +0000
ROA not before: Sat 01 Jan 2022 04:54:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 52423
IP address blocks: 45.85.85.0/24 maxlen: 24
45.85.86.0/24 maxlen: 24
77.243.92.0/24 maxlen: 32
185.190.80.0/24 maxlen: 24
77.243.94.0/24 maxlen: 32
185.184.141.0/24 maxlen: 24
185.184.143.0/24 maxlen: 24
185.184.142.0/24 maxlen: 24
91.188.200.0/24 maxlen: 32
185.185.248.0/24 maxlen: 24
2.59.172.0/23 maxlen: 32
185.185.249.0/24 maxlen: 24
45.130.72.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398461362 (0x17c009b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:54:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1e8ba6ffca209c4f971ec436f039a5f1ca98db8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:97:0d:e7:b6:e3:59:fc:fb:dd:7e:f6:42:3b:
6c:d8:76:e8:8d:6f:fd:3e:97:9a:45:dd:1d:88:e5:
9a:63:a5:36:10:3c:4e:55:f5:d9:be:15:a2:e7:ed:
89:b9:e1:f5:d7:1e:84:2e:d8:8f:34:f1:57:0f:a2:
11:77:4d:51:1d:2a:c1:f9:68:fa:cc:a0:cb:44:ea:
f6:a5:46:c0:c5:82:8d:f7:29:35:f7:e3:58:2c:0e:
35:40:29:a7:d0:11:97:97:4a:2a:95:7a:73:54:27:
38:37:d2:fe:bd:c5:e1:a6:8c:7e:a4:b9:78:04:50:
bb:ee:99:83:ac:4b:05:e1:63:c2:06:17:ce:8d:58:
e8:a2:da:b7:50:57:b2:27:7d:3a:ae:6c:57:74:5d:
45:f4:ea:2e:52:b7:40:ea:68:4e:fe:69:4d:77:a4:
92:ff:94:ea:24:6f:d0:a9:1d:65:5b:81:04:6b:63:
f1:4a:6d:21:0b:70:72:73:62:bd:c3:b4:d6:fb:e1:
33:6c:28:ef:99:5e:b8:8d:ff:02:18:42:c4:40:19:
51:ee:04:9f:3e:4e:c6:91:db:03:7c:c2:76:22:54:
b2:7a:0d:75:f5:8a:01:cb:03:f4:22:d7:76:a8:a4:
63:6c:5c:8b:0b:8d:a9:29:9d:31:aa:b8:74:ec:03:
e0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:8B:A6:FF:CA:20:9C:4F:97:1E:C4:36:F0:39:A5:F1:CA:98:DB:8A
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Houm_8ognE-XHsQ28Dml8cqY24o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.172.0/23
45.85.85.0-45.85.86.255
45.130.72.0/23
77.243.92.0/24
77.243.94.0/24
91.188.200.0/24
185.184.141.0-185.184.143.255
185.185.248.0/23
185.190.80.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:64:aa:36:e8:31:2e:be:32:a7:33:ab:e0:cb:29:26:1c:b7:
01:21:d8:1a:f1:7b:12:fd:38:f4:62:06:45:d5:56:17:01:ed:
88:68:ae:46:f7:9f:24:76:8b:a4:03:e6:d2:e0:1e:26:62:ec:
e4:e8:f4:cd:0a:b9:ce:b9:04:bd:ac:47:c2:c9:e1:bc:44:c7:
d9:0a:5d:b2:0d:00:0b:94:ac:fe:b1:8c:d0:1b:5d:0d:4a:6c:
c2:ca:69:57:5b:e9:1e:f2:ed:59:e0:5c:c1:35:e3:cd:e6:35:
2c:8a:4c:b2:fc:0a:d8:9b:2d:a7:41:39:dc:bc:bc:20:b6:f7:
f3:e2:8d:bb:ea:9e:a3:d0:f8:09:f3:11:dd:c1:c2:a2:e9:e3:
13:95:96:e7:ff:be:7f:53:e5:15:d6:95:4c:fa:6b:c7:48:0a:
48:a2:db:20:3a:50:b2:fa:fd:aa:76:70:df:12:46:e5:5a:f3:
bd:e8:c5:5d:95:b3:98:15:81:a1:67:a2:54:0e:8e:f8:e2:47:
4d:cd:0f:6b:13:fe:c3:b6:b7:b1:09:0d:17:ee:07:ff:c1:60:
85:80:48:46:27:bf:bf:87:80:72:66:5a:f4:d7:16:cb:fb:1e:
ff:0d:47:02:65:d8:6e:81:82:00:2e:78:df:d4:12:21:81:df:
fd:2f:b8:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:17 2023 by rpki-client on console-fra.rpki-client.org