Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/RtOs4NJoNjeXLw4O4Edqhj_6Yso.roa
File: RtOs4NJoNjeXLw4O4Edqhj_6Yso.roa (raw, json)
Hash identifier: jiRk1yGJ4a2ZU0TaTrhfMtKb8ufm4tk+U7JtP+a1acU=
Subject key identifier: 46:D3:AC:E0:D2:68:36:37:97:2F:0E:0E:E0:47:6A:86:3F:FA:62:CA
Certificate issuer: /CN=2144472d1697369d832ba126e5e17232acd5f5f3
Certificate serial: 07865010
Authority key identifier: 21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/RtOs4NJoNjeXLw4O4Edqhj_6Yso.roa
Signing time: Sat 01 Jan 2022 10:55:48 +0000
ROA not before: Sat 01 Jan 2022 10:55:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51083
IP address blocks: 5.183.104.0/22 maxlen: 22
45.92.252.0/22 maxlen: 22
193.23.246.0/23 maxlen: 23
193.23.164.0/23 maxlen: 23
193.23.164.0/24 maxlen: 24
2a10:a080::/29 maxlen: 29
2a0e:c400::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126242832 (0x7865010)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2144472d1697369d832ba126e5e17232acd5f5f3
Validity
Not Before: Jan 1 10:55:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=46d3ace0d2683637972f0e0ee0476a863ffa62ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:80:7d:78:01:87:ce:3c:c7:56:e5:4f:30:33:
b1:e9:e5:86:85:a8:62:ca:3c:39:50:c6:f1:4f:41:
a0:9c:eb:cc:27:0a:b5:2f:95:c4:b1:70:47:0f:27:
82:a0:61:8d:8b:b4:a8:ac:8a:44:df:0d:20:0a:82:
c2:fc:f5:59:e7:36:73:bf:f0:79:40:65:71:cf:b7:
b5:25:46:f6:de:11:b8:a2:27:dc:8e:e5:e0:22:d8:
b4:09:6c:44:54:6c:87:b5:a1:dd:39:e9:f8:9b:05:
f0:87:35:36:98:ba:0e:84:bf:61:99:10:be:93:d1:
ba:70:d1:fb:f4:5f:55:00:8a:74:91:31:3e:8a:71:
62:18:8f:9d:f9:6a:5e:55:e3:46:62:44:0a:c8:3b:
f3:f3:46:a5:b9:a7:c2:7d:ed:99:74:81:b7:59:ea:
88:65:7e:0f:38:60:15:19:c1:f0:fe:29:e9:9f:e3:
2f:3e:d8:3c:52:5b:07:b8:7f:9c:e0:8a:a5:10:42:
61:a0:e9:c8:0e:be:e4:0c:85:32:1c:3a:2d:94:3d:
78:33:27:ee:31:a2:43:09:b4:23:ee:26:5a:49:4f:
16:77:f4:e4:63:6f:50:53:42:ae:9f:97:0d:eb:cd:
1d:e3:22:4d:3b:c7:45:9f:58:08:87:0c:ee:cd:f5:
d9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D3:AC:E0:D2:68:36:37:97:2F:0E:0E:E0:47:6A:86:3F:FA:62:CA
X509v3 Authority Key Identifier:
keyid:21:44:47:2D:16:97:36:9D:83:2B:A1:26:E5:E1:72:32:AC:D5:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IURHLRaXNp2DK6Em5eFyMqzV9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/RtOs4NJoNjeXLw4O4Edqhj_6Yso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/dc205b-af5d-4dff-852a-877d31c161c3/1/IURHLRaXNp2DK6Em5eFyMqzV9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.104.0/22
45.92.252.0/22
193.23.164.0/23
193.23.246.0/23
IPv6:
2a0e:c400::/29
2a10:a080::/29
Signature Algorithm: sha256WithRSAEncryption
51:ac:80:c4:93:19:4b:03:00:26:e0:7b:d7:40:17:d3:56:82:
8e:51:be:77:85:da:8c:36:9e:b9:3c:47:26:dc:a4:9c:5b:7b:
3a:58:5f:53:03:0b:3b:1e:e9:90:c1:8a:00:d1:43:80:95:ac:
aa:25:e6:df:45:50:92:1f:cc:52:35:1d:fc:1c:43:c2:5f:1c:
ac:95:92:6d:d7:f4:21:5a:0d:07:4a:ee:7d:97:b1:f5:43:89:
4a:fa:a4:80:86:05:3d:a3:f1:78:13:34:e8:31:36:8c:06:6f:
1d:b5:da:3d:e4:1d:36:50:76:91:b8:c9:15:a1:e7:d2:a3:70:
ee:a6:66:64:f2:71:b4:a1:ef:55:50:b9:18:53:77:0b:96:73:
52:05:5a:5b:6f:e4:8c:ff:b6:98:48:0d:d0:62:d1:82:46:c1:
0e:a9:4e:07:50:2b:c1:d6:8e:3d:a2:ab:48:e5:b1:c9:4f:65:
f4:6a:4c:1c:67:17:9d:ee:e5:59:5d:f0:b2:56:1f:27:c7:1d:
82:8f:15:23:dc:43:8f:39:bb:e3:c7:dd:1f:9f:d5:05:c9:18:
58:df:fa:3a:7d:76:ac:e6:27:58:db:f1:b8:18:dd:12:4c:7b:
74:4c:14:52:2d:06:15:6c:df:58:80:69:ee:fd:41:25:6f:ca:
fe:a2:c6:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:26 2023 by rpki-client on console-fra.rpki-client.org