Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/daBkySQRDPz9KtXiv0wvyyzR7mc.roa
File: daBkySQRDPz9KtXiv0wvyyzR7mc.roa (raw, json)
Hash identifier: fDR1hCf3sWQF1zptd7tCYZuuXowJlLjndgRv+1uwDWg=
Subject key identifier: 75:A0:64:C9:24:11:0C:FC:FD:2A:D5:E2:BF:4C:2F:CB:2C:D1:EE:67
Certificate issuer: /CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
Certificate serial: 069B6150
Authority key identifier: 06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/daBkySQRDPz9KtXiv0wvyyzR7mc.roa
Signing time: Wed 27 Apr 2022 13:59:25 +0000
ROA not before: Wed 27 Apr 2022 13:59:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208925
IP address blocks: 45.14.250.0/24 maxlen: 24
45.14.249.0/24 maxlen: 24
45.14.248.0/24 maxlen: 24
45.14.248.0/22 maxlen: 22
45.14.251.0/24 maxlen: 24
2a12:d340::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110846288 (0x69b6150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
Validity
Not Before: Apr 27 13:59:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75a064c924110cfcfd2ad5e2bf4c2fcb2cd1ee67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2d:ee:c9:be:00:37:9d:fe:2c:cc:b9:92:11:
6c:3c:ce:58:a0:9b:59:45:d7:93:0d:ff:16:73:07:
ed:89:49:c6:9e:ea:00:61:d7:06:74:2d:f0:eb:cf:
2e:92:6a:92:1b:14:b5:a5:b0:33:94:79:c9:ab:06:
99:c8:8f:20:91:21:0f:d5:83:02:ad:43:49:5f:04:
e6:87:3e:cc:8e:c9:01:25:b1:82:e8:68:81:93:a0:
7f:ac:fe:44:09:fa:9e:21:71:02:17:a2:3b:34:81:
90:e9:fa:8e:75:98:e1:f8:4a:35:49:ae:bc:07:d5:
48:3b:ab:93:04:e6:06:d0:a5:4a:d8:53:9e:46:55:
e5:43:76:14:c3:fd:7e:de:d2:81:72:76:92:c5:24:
24:db:1f:24:26:4d:a1:6b:d4:2c:36:95:a8:2f:f1:
b7:56:32:93:28:1f:d1:37:65:e6:13:31:86:be:97:
e1:a0:01:7f:3b:c5:35:5d:90:71:fc:47:94:c9:50:
7c:47:10:39:10:8b:02:24:40:42:da:bb:9f:c5:27:
12:3c:e9:d9:9a:dd:9b:f6:61:ab:19:d5:ca:9d:f0:
5a:3d:b3:1a:f0:fe:7c:58:eb:eb:a6:ac:78:82:f7:
d4:6e:da:8e:5d:b7:09:d6:1c:90:65:f8:d5:cd:fa:
80:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A0:64:C9:24:11:0C:FC:FD:2A:D5:E2:BF:4C:2F:CB:2C:D1:EE:67
X509v3 Authority Key Identifier:
keyid:06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/daBkySQRDPz9KtXiv0wvyyzR7mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.248.0/22
IPv6:
2a12:d340::/29
Signature Algorithm: sha256WithRSAEncryption
9d:50:0a:31:41:db:c4:ed:6c:41:4d:f4:0e:aa:ea:e7:e9:64:
f4:60:19:ab:a6:c8:9d:51:60:21:87:d0:54:c2:a4:4d:eb:a7:
9c:4b:b9:8a:87:f9:ee:dc:49:65:32:bd:de:7c:73:b7:09:11:
99:41:60:f4:fd:00:71:0f:35:1f:61:86:85:1a:74:ca:3c:0d:
9f:25:d8:bd:92:77:bf:75:54:45:f5:06:76:5c:5a:98:16:5b:
90:73:63:14:59:95:17:43:2f:bd:41:ad:0d:8b:b5:84:02:39:
10:17:93:0a:2f:6f:a2:70:56:31:5e:09:0c:7f:7f:23:ac:68:
97:37:9e:e1:61:04:04:df:c5:19:d1:9b:60:c2:e2:6c:ec:2a:
6d:6e:71:23:cc:f8:ba:94:49:db:04:7d:2a:56:c8:c3:06:88:
2e:9a:be:98:a2:9f:77:a2:e4:88:e5:4f:e2:10:15:d5:0e:62:
06:8d:65:08:bd:3f:f5:34:be:19:40:42:d0:b7:f4:4e:4e:fa:
a2:e7:e0:49:34:f9:ea:15:f6:b0:5d:f8:ed:4c:98:e1:29:b7:
db:4c:e2:c2:82:a1:95:ce:e2:07:87:6c:30:18:36:f7:70:c8:
8d:c0:d0:5e:2c:dc:55:6b:81:f5:df:b9:07:b8:0c:e6:bf:b1:
06:f7:5b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:36 2024 by rpki-client on console-ams.rpki-client.org