Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/diFldA2l6ulyhiUd1FuzSCxsFYg.roa
File: diFldA2l6ulyhiUd1FuzSCxsFYg.roa (raw, json)
Hash identifier: aj2k3wvf3KOEpwzStQI/gfjMZnHUMxEm8Vmeqop9KPY=
Subject key identifier: 76:21:65:74:0D:A5:EA:E9:72:86:25:1D:D4:5B:B3:48:2C:6C:15:88
Certificate issuer: /CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
Certificate serial: 059C3BE1
Authority key identifier: 06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/diFldA2l6ulyhiUd1FuzSCxsFYg.roa
Signing time: Sat 01 Jan 2022 08:53:33 +0000
ROA not before: Sat 01 Jan 2022 08:53:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208925
IP address blocks: 45.14.250.0/24 maxlen: 24
45.14.249.0/24 maxlen: 24
45.14.248.0/24 maxlen: 24
45.14.251.0/24 maxlen: 24
45.14.248.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94125025 (0x59c3be1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
Validity
Not Before: Jan 1 08:53:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=762165740da5eae97286251dd45bb3482c6c1588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0e:e4:5a:1d:4e:93:a1:c7:b5:ca:29:69:b2:
7c:0a:33:10:37:e0:8e:56:cc:f8:e3:5f:8d:35:4e:
ff:0e:ec:16:bf:0b:3d:b1:d4:99:3e:15:8b:ce:6a:
a6:90:c0:7b:0e:f7:4a:34:ed:50:b3:8e:b7:6e:de:
c1:36:42:42:bf:bc:08:8a:e5:0a:c9:18:9f:a1:40:
04:35:5b:0f:c6:71:d7:a0:d7:b0:24:cf:63:dd:4b:
a1:9f:ec:3e:b9:fb:dc:a5:4f:28:b4:00:77:a8:1c:
ae:7c:20:56:2f:0b:e6:9e:34:a4:ed:3e:dd:79:98:
da:b3:91:5c:f7:df:c4:d8:aa:98:cb:a2:c5:c9:dd:
52:88:a0:0a:4a:5c:3e:12:5a:b9:37:cd:08:b2:39:
0b:8d:b6:73:76:21:8f:b5:5e:af:e7:5f:aa:a1:cf:
f2:e8:44:07:71:99:60:10:82:fc:f6:5b:9d:ae:a6:
fc:37:f8:11:75:cc:18:e3:57:87:c3:a1:da:89:c9:
52:a0:59:8e:99:27:39:70:06:cc:ec:2d:74:3a:bf:
29:fc:e1:95:d6:f8:f9:f3:b2:70:00:2e:5f:cb:2f:
28:e2:7c:c8:08:7c:2d:3f:1a:b5:19:cb:f4:40:09:
35:9d:1b:c5:37:6b:53:cd:f6:d5:12:9e:d2:02:fc:
e9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:21:65:74:0D:A5:EA:E9:72:86:25:1D:D4:5B:B3:48:2C:6C:15:88
X509v3 Authority Key Identifier:
keyid:06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/diFldA2l6ulyhiUd1FuzSCxsFYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.14.248.0/22
Signature Algorithm: sha256WithRSAEncryption
03:d6:79:06:bf:a8:d8:07:a3:87:48:ad:02:95:87:3f:ad:f1:
09:8e:d6:42:34:9f:da:6a:6d:29:f7:8f:7b:0c:ba:66:11:ad:
42:ec:9b:a0:bb:2c:ff:e2:b4:36:87:37:13:66:42:72:b2:9a:
65:18:2e:2f:d6:9e:54:d0:3d:93:9e:b9:57:a9:b6:b2:ee:8e:
8c:4d:25:7b:bf:cb:8b:14:c8:11:d6:2e:84:bf:27:84:36:5d:
c9:d5:a0:ab:e7:36:ab:76:ac:de:bf:6b:03:d7:86:ee:a7:48:
13:9f:ee:d5:f3:8d:39:04:25:a6:51:12:a7:e5:7b:94:53:ad:
88:db:27:57:e8:2a:15:d3:14:27:5c:f4:e4:7b:25:28:32:1c:
22:65:0e:63:aa:87:aa:79:01:1b:7f:67:0d:26:dc:1c:c7:36:
2f:c0:ca:b2:d5:65:3a:90:d1:ef:8e:da:15:d7:33:22:03:dd:
6b:72:88:fa:7f:df:68:c9:5e:ff:9b:dd:d8:dd:af:1d:9d:08:
a9:a2:d0:7f:af:a6:ed:55:6b:ab:22:63:27:47:6f:c1:15:2d:
4a:d4:1e:06:17:cd:85:e6:2e:00:d2:82:91:d4:e0:30:d6:0a:
34:c4:aa:26:8a:37:9a:67:b8:40:d3:53:66:c1:6c:1b:96:81:
c5:7b:28:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:56:12 2024 by rpki-client on console-fra.rpki-client.org