Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/fE48iGMzTJSwZmUOTZtP_jm6xVI.roa
File: fE48iGMzTJSwZmUOTZtP_jm6xVI.roa (raw, json)
Hash identifier: wn+LP+FXy8bQWtmzEENQxOZRKkmZD0k+qTxR89CP4EQ=
Subject key identifier: 7C:4E:3C:88:63:33:4C:94:B0:66:65:0E:4D:9B:4F:FE:39:BA:C5:52
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018432659BF45B002461D6CB7F57DEB1D273
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/fE48iGMzTJSwZmUOTZtP_jm6xVI.roa
Signing time: Tue 01 Nov 2022 08:53:50 +0000
ROA not before: Tue 01 Nov 2022 08:53:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42864
IP address blocks: 178.210.224.0/21 maxlen: 21
193.138.125.0/24 maxlen: 24
178.248.200.0/21 maxlen: 21
45.9.171.0/24 maxlen: 24
45.9.170.0/24 maxlen: 24
45.9.169.0/24 maxlen: 24
178.210.236.0/24 maxlen: 24
77.242.144.0/20 maxlen: 20
88.209.192.0/21 maxlen: 24
88.209.208.0/20 maxlen: 24
88.209.225.0/24 maxlen: 24
88.209.224.0/24 maxlen: 24
92.52.219.0/24 maxlen: 24
45.14.10.0/24 maxlen: 24
45.14.8.0/24 maxlen: 24
92.52.212.0/22 maxlen: 24
92.52.210.0/23 maxlen: 23
92.52.209.0/24 maxlen: 24
92.52.208.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:32:65:9b:f4:5b:00:24:61:d6:cb:7f:57:de:b1:d2:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Nov 1 08:53:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7c4e3c8863334c94b066650e4d9b4ffe39bac552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d3:19:7b:de:51:82:d8:c1:e0:06:9e:fe:bd:
54:ed:56:88:d6:dc:77:d7:05:cf:28:7f:c2:19:db:
a2:d9:af:3a:a8:3a:1e:d5:1d:0b:16:63:2a:65:05:
60:d1:32:a2:e7:ce:a1:14:7d:75:ed:a6:db:7a:74:
71:3a:e7:ae:de:8a:f2:02:ba:8e:b7:b4:71:5e:0c:
a5:12:d3:d3:20:01:05:a6:1f:84:de:ce:ac:5a:99:
a4:5c:8d:80:2e:07:b2:ac:3d:8c:f2:88:34:77:05:
ff:e2:02:86:81:e2:e2:a1:28:94:58:0e:de:22:b1:
67:49:c4:71:4f:7b:b7:cd:b5:3f:44:3b:ad:88:d8:
13:43:e4:6d:ca:75:4f:ac:c0:4d:fa:8a:80:dc:60:
c3:63:a7:e0:6b:90:45:87:52:94:03:f2:b2:dd:54:
a3:7c:cd:02:34:40:fe:b2:29:39:15:de:0d:17:77:
14:81:8f:9d:02:ea:7a:f7:8f:98:26:37:16:6c:2f:
a9:d6:2f:b6:c1:98:f7:29:0b:41:34:bc:62:5e:47:
8b:dc:fe:e1:05:1c:aa:7c:20:a3:8e:3a:d2:45:0d:
44:e9:19:77:1d:0c:91:84:a8:ab:b4:86:2d:ef:51:
95:89:f3:b2:3c:72:d1:20:82:96:87:5b:1c:43:63:
98:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4E:3C:88:63:33:4C:94:B0:66:65:0E:4D:9B:4F:FE:39:BA:C5:52
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/fE48iGMzTJSwZmUOTZtP_jm6xVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.169.0-45.9.171.255
45.14.8.0/24
45.14.10.0/24
77.242.144.0/20
88.209.192.0/21
88.209.208.0-88.209.225.255
92.52.208.0/21
92.52.219.0/24
178.210.224.0/21
178.210.236.0/24
178.248.200.0/21
193.138.125.0/24
Signature Algorithm: sha256WithRSAEncryption
46:f9:4a:23:40:05:cf:51:39:9b:26:c4:65:dc:a6:85:c8:77:
0d:dd:05:29:dc:d1:ba:08:0c:75:12:95:9e:e3:94:bb:7c:23:
e5:61:69:a0:53:b3:21:c8:6c:bd:03:01:d2:38:1c:74:96:07:
8b:da:70:13:3b:31:0f:a3:ab:a4:64:7f:c2:2e:f4:6d:d3:2e:
e9:53:65:8b:b4:52:d1:cf:55:8f:6f:d6:b3:8c:70:eb:fb:14:
d3:51:40:5b:fd:f9:67:36:1a:13:27:8e:80:f5:66:66:81:b2:
53:c2:85:51:9e:0c:b0:71:0a:fa:54:a5:3f:ed:19:92:09:e1:
65:35:69:68:e6:de:26:62:61:85:6a:21:73:38:15:94:1a:e3:
5d:4f:9d:c2:96:4f:d8:9a:f5:75:60:3c:92:bb:a5:4a:c6:77:
69:34:45:98:24:e6:ef:a6:e9:83:aa:62:5c:fc:52:d1:e2:5b:
f6:a4:a3:8e:f8:ac:e1:1d:8a:7c:1e:5f:3e:a8:ac:ee:62:c3:
58:b6:fc:db:7f:79:bb:ed:81:44:4d:c0:25:f6:af:53:bb:c9:
6d:e7:65:b9:7d:0e:9f:e8:48:d7:2e:7b:57:ef:49:33:8c:92:
df:77:a3:1a:b1:0e:b8:7e:f0:fe:98:a1:55:51:c1:7b:88:15:
93:e5:e9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:51 2023 by rpki-client on console-ams.rpki-client.org