Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Pvj4kEKg9dAZZ87n3OnA5Ml6zkQ.roa
File: Pvj4kEKg9dAZZ87n3OnA5Ml6zkQ.roa (raw, json)
Hash identifier: 4c+UM+3cIDCjxjOPYDRZpDijQmeOh5+5TH5H1w4PPV8=
Subject key identifier: 3E:F8:F8:90:42:A0:F5:D0:19:67:CE:E7:DC:E9:C0:E4:C9:7A:CE:44
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 192A64F6
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Pvj4kEKg9dAZZ87n3OnA5Ml6zkQ.roa
Signing time: Tue 15 Mar 2022 17:49:35 +0000
ROA not before: Tue 15 Mar 2022 17:49:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140107
IP address blocks: 45.81.236.0/22 maxlen: 32
45.12.234.0/23 maxlen: 32
45.135.220.0/22 maxlen: 32
45.12.162.0/24 maxlen: 32
193.16.8.0/24 maxlen: 24
185.117.23.0/24 maxlen: 24
185.115.129.0/24 maxlen: 24
84.39.190.0/24 maxlen: 32
45.15.36.0/23 maxlen: 32
185.137.183.0/24 maxlen: 24
185.253.249.0/24 maxlen: 24
45.83.252.0/23 maxlen: 32
185.146.195.0/24 maxlen: 24
45.82.204.0/23 maxlen: 32
45.94.164.0/22 maxlen: 24
185.182.63.0/24 maxlen: 24
79.143.50.0/24 maxlen: 24
79.143.57.0/24 maxlen: 24
79.143.63.0/24 maxlen: 24
185.240.236.0/22 maxlen: 24
45.128.28.0/22 maxlen: 24
45.81.10.0/23 maxlen: 32
94.199.100.0/24 maxlen: 24
45.135.100.0/22 maxlen: 24
45.14.47.0/24 maxlen: 32
185.172.144.0/24 maxlen: 24
185.120.33.0/24 maxlen: 24
194.49.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 422208758 (0x192a64f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Mar 15 17:49:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3ef8f89042a0f5d01967cee7dce9c0e4c97ace44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c3:1a:72:a8:55:80:a9:20:2f:f1:7e:95:39:
f2:37:65:59:b3:98:a0:09:3f:c1:da:82:d5:a1:1c:
75:6c:5e:ea:9a:1a:94:bf:61:24:2d:8d:59:aa:6e:
40:c7:96:2e:18:08:c1:82:e3:d2:47:eb:f1:bf:57:
bc:a9:40:15:0a:5b:57:d6:80:55:35:b2:43:a3:7a:
a2:76:d0:40:58:29:03:74:15:72:03:83:60:c3:62:
22:33:f7:1c:fb:db:f8:ca:6f:88:25:24:da:b2:5f:
eb:ba:00:d7:dd:84:8a:68:0f:c3:e6:e5:8e:40:71:
a6:fd:c8:a1:d8:59:c1:de:64:e2:a8:ee:9a:b6:7d:
04:5f:dd:6b:b1:fd:6e:d4:23:1b:33:3b:a0:fb:fc:
0e:2c:bb:d2:ac:06:69:df:5c:4f:b7:5a:b5:88:66:
87:5a:d0:6c:c4:d6:94:00:5a:1f:16:2f:78:89:06:
49:8c:90:bc:7e:1e:99:12:11:eb:40:77:91:84:3f:
91:8b:77:db:a4:6a:56:16:5c:35:5e:ae:25:ee:ea:
c7:3a:6f:c2:dd:44:21:ed:5c:69:36:7d:48:8a:24:
27:34:b0:55:aa:49:5e:bf:dc:6f:d2:dd:0e:ed:32:
a3:c1:b2:ac:25:64:b1:9d:c2:d0:d7:33:1f:5e:b7:
37:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F8:F8:90:42:A0:F5:D0:19:67:CE:E7:DC:E9:C0:E4:C9:7A:CE:44
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Pvj4kEKg9dAZZ87n3OnA5Ml6zkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.162.0/24
45.12.234.0/23
45.14.47.0/24
45.15.36.0/23
45.81.10.0/23
45.81.236.0/22
45.82.204.0/23
45.83.252.0/23
45.94.164.0/22
45.128.28.0/22
45.135.100.0/22
45.135.220.0/22
79.143.50.0/24
79.143.57.0/24
79.143.63.0/24
84.39.190.0/24
94.199.100.0/24
185.115.129.0/24
185.117.23.0/24
185.120.33.0/24
185.137.183.0/24
185.146.195.0/24
185.172.144.0/24
185.182.63.0/24
185.240.236.0/22
185.253.249.0/24
193.16.8.0/24
194.49.113.0/24
Signature Algorithm: sha256WithRSAEncryption
37:ad:1a:af:4d:2f:f9:7b:3e:1f:0e:26:67:d5:13:4d:31:25:
0f:be:d9:58:8f:0a:22:29:20:b7:53:85:48:de:f1:68:3e:4d:
ac:6a:06:4a:a4:47:f5:60:43:44:f2:70:84:b5:b2:e4:ab:8b:
bb:e4:dc:44:60:fe:1f:4e:f8:de:de:1a:89:a0:66:1d:1f:71:
a1:a9:bf:14:7c:cf:01:28:c8:7a:81:cc:9a:2a:cf:90:93:b8:
87:ff:5e:e1:b9:c6:17:f2:2f:81:b0:0c:68:0b:3d:6d:09:87:
c6:d1:eb:96:b5:36:b1:4f:38:62:3a:31:0e:1b:81:a6:56:cc:
7e:57:e0:af:5f:65:e6:99:54:8f:41:58:2f:d6:4b:1e:bd:ca:
62:78:ed:5a:de:ed:71:ca:79:76:17:2b:76:ac:94:29:71:b3:
46:f3:a5:7d:fa:be:12:0c:9a:3a:c3:35:a5:52:53:1b:dc:fd:
db:cf:59:86:d6:73:5f:ff:53:81:bc:28:c0:d1:21:95:57:9b:
64:12:71:8f:91:bd:54:4d:08:6c:52:ff:e8:d6:f6:b5:51:e6:
d1:84:f4:eb:19:c6:8f:c2:8e:cd:2e:48:76:b6:06:1c:39:6b:
81:5e:28:11:89:4a:99:50:6d:69:37:c4:a2:45:84:f3:68:94:
1d:e1:c1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:17 2023 by rpki-client on console-fra.rpki-client.org