Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/M0EB7_eMJoDKnAQiERr4ClIzhVI.roa
File: M0EB7_eMJoDKnAQiERr4ClIzhVI.roa (raw, json)
Hash identifier: HinzBh6TTPbYkoA5dlG4Ft03mzYDdrT9JFm/ttVae54=
Subject key identifier: 33:41:01:EF:F7:8C:26:80:CA:9C:04:22:11:1A:F8:0A:52:33:85:52
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 17B53213
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/M0EB7_eMJoDKnAQiERr4ClIzhVI.roa
Signing time: Sat 01 Jan 2022 04:54:13 +0000
ROA not before: Sat 01 Jan 2022 04:54:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48024
IP address blocks: 45.136.2.0/23 maxlen: 32
45.136.2.0/24 maxlen: 32
45.136.1.0/24 maxlen: 32
45.136.0.0/23 maxlen: 32
45.136.0.0/24 maxlen: 32
45.136.0.0/22 maxlen: 32
45.136.3.0/24 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 397750803 (0x17b53213)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 04:54:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=334101eff78c2680ca9c0422111af80a52338552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e9:d8:76:80:7f:13:54:c6:85:f5:25:f1:52:
4b:7c:8a:f4:8b:08:cf:cf:f2:11:50:c8:8f:f6:6e:
f5:28:01:c6:c9:86:a3:fa:a4:9b:1f:7b:02:a6:b7:
17:6f:a7:9a:03:85:5d:53:8a:15:c1:1c:8f:0a:29:
9c:5b:18:03:4c:f0:f1:f5:bb:07:8d:08:02:e2:5a:
d8:89:ef:de:0f:0d:dc:48:8c:8b:2e:3f:37:73:df:
32:a6:a7:8c:56:41:f2:2f:23:cd:b0:fd:f2:d2:a2:
6a:ad:ed:60:f1:1f:ed:bb:68:18:d5:09:ce:0e:8e:
35:52:89:72:15:a3:19:ec:d3:38:df:0d:68:92:5b:
77:ec:a2:37:86:ec:87:ca:3c:8b:e1:de:5b:56:75:
cf:a2:69:64:c2:cc:82:3d:4e:95:d9:99:49:b9:d8:
04:b1:d5:ed:7e:30:b8:55:e1:17:86:42:b0:9e:64:
bc:b7:cb:b8:47:4a:25:00:d2:65:60:53:f7:dc:af:
38:cd:db:db:8d:d4:50:90:6a:cd:3e:eb:90:70:78:
ef:a7:8f:04:cb:07:ef:14:e5:a8:f5:1a:4a:5f:44:
cb:1e:ac:52:c5:12:e7:b2:d5:97:09:6c:92:de:a9:
de:22:27:77:a9:be:1d:b2:0b:04:22:2d:90:4f:2e:
c1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:41:01:EF:F7:8C:26:80:CA:9C:04:22:11:1A:F8:0A:52:33:85:52
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/M0EB7_eMJoDKnAQiERr4ClIzhVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.0.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:91:5e:50:a0:fa:04:4d:12:8d:84:b8:91:d2:47:aa:aa:90:
16:f1:c7:33:1e:f5:80:5d:61:cc:0a:22:2e:5c:53:79:7d:db:
0a:cc:d5:6c:5e:6d:7b:e0:28:8c:c8:90:0c:c5:4b:9d:3f:ed:
c9:fe:48:d3:34:d0:33:99:fd:66:73:fe:f1:0b:ce:db:cd:1a:
2a:1b:df:39:60:b9:d5:68:89:86:c2:3d:d8:a2:2d:9a:cc:6d:
c8:79:a5:81:a8:96:d6:f5:c1:2d:27:08:09:97:d5:fc:94:3c:
b9:c9:a2:90:78:5a:38:7c:f6:c9:2b:71:b9:46:10:4d:79:b6:
11:de:c2:e4:f2:61:df:ed:03:94:28:c8:9d:33:a3:4c:94:3e:
85:e3:f5:26:df:aa:04:b4:f0:f8:0d:a7:e3:73:13:f3:d9:40:
24:10:ae:70:3b:3e:8d:a7:c9:89:40:d1:aa:5d:83:c7:85:28:
55:f7:64:72:15:db:45:28:4a:67:f3:2d:db:1d:eb:d4:4e:3d:
0c:a9:ee:ec:05:55:fb:ed:3c:a8:77:c6:a9:e0:08:85:df:f0:
d7:f5:25:fd:dc:2d:70:47:23:40:42:f0:cc:80:3b:e7:ae:0d:
e2:67:4f:b9:4f:26:9a:54:07:e5:95:90:27:20:13:dc:df:12:
eb:b1:bc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:17 2023 by rpki-client on console-fra.rpki-client.org