Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/L2zyjx4FW1JLqYtv7FgrtL4tE3s.roa
File: L2zyjx4FW1JLqYtv7FgrtL4tE3s.roa (raw, json)
Hash identifier: mFFC/zHBXfZ8utAEqbzWGEerf6KWqE+Ze3sdzS7WAQM=
Subject key identifier: 2F:6C:F2:8F:1E:05:5B:52:4B:A9:8B:6F:EC:58:2B:B4:BE:2D:13:7B
Certificate issuer: /CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Certificate serial: 01847DA916049900E7A6A49202D222457D68
Authority key identifier: 02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/L2zyjx4FW1JLqYtv7FgrtL4tE3s.roa
Signing time: Tue 15 Nov 2022 23:39:03 +0000
ROA not before: Tue 15 Nov 2022 23:39:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49870
IP address blocks: 45.95.145.0/24 maxlen: 24
45.95.144.0/23 maxlen: 23
45.95.146.0/24 maxlen: 24
45.95.147.0/24 maxlen: 24
45.80.36.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:7d:a9:16:04:99:00:e7:a6:a4:92:02:d2:22:45:7d:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=025f2a93db10f2dd5f6a55bb2a440f67486cd1a3
Validity
Not Before: Nov 15 23:39:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2f6cf28f1e055b524ba98b6fec582bb4be2d137b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f0:6b:1c:17:b6:9e:a0:2a:c9:9b:ad:cc:73:
79:9a:a0:8e:e7:33:87:75:0f:b5:5c:df:bb:af:c4:
09:4c:ae:fe:93:99:e4:0f:b4:4b:a7:e8:dc:af:08:
8c:28:9e:b6:7f:89:b9:72:5f:4d:0b:a7:4a:31:1a:
32:be:42:dc:73:1d:a0:29:5a:75:95:64:71:21:1c:
30:45:1f:50:20:33:0f:0e:d3:92:e2:5b:43:56:87:
43:94:37:af:71:13:dd:e8:c9:8c:83:59:ef:ad:91:
67:b1:79:24:0c:0b:77:4a:a5:79:5b:0f:31:f3:85:
d5:42:c7:60:b8:b8:6d:af:cd:d5:4c:33:0c:ed:dc:
1c:5f:82:c1:e9:0b:33:39:39:ef:56:d4:4b:a8:d0:
ec:02:e2:8b:a2:7a:04:7d:27:70:4a:9c:0e:b3:5d:
f1:1f:2b:a1:a0:31:ce:33:7e:07:50:8c:16:93:1f:
14:31:8f:5c:3f:43:04:ce:2a:8b:f3:61:c1:b1:10:
40:12:4f:2a:8b:03:55:92:7f:13:0a:99:89:ec:c9:
14:c8:d4:be:e5:bd:f5:4e:a0:02:4e:fa:ca:98:e2:
4f:17:98:34:4e:84:76:27:6b:dd:28:bc:22:bf:f4:
4a:47:4a:b7:ad:e0:33:fa:d7:7e:7c:18:74:0f:f9:
3b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6C:F2:8F:1E:05:5B:52:4B:A9:8B:6F:EC:58:2B:B4:BE:2D:13:7B
X509v3 Authority Key Identifier:
keyid:02:5F:2A:93:DB:10:F2:DD:5F:6A:55:BB:2A:44:0F:67:48:6C:D1:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Al8qk9sQ8t1falW7KkQPZ0hs0aM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/L2zyjx4FW1JLqYtv7FgrtL4tE3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/205d24-009f-486a-976f-2ecda11de153/1/Al8qk9sQ8t1falW7KkQPZ0hs0aM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.36.0/23
45.95.144.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:0e:e7:4d:8c:0b:44:62:fe:b1:f6:18:aa:4b:7f:a6:82:ef:
f2:63:7a:d7:29:e9:42:dd:37:ce:5a:dd:74:b1:ed:11:03:2b:
ca:a7:9c:50:62:9a:3f:08:23:18:ef:64:a5:53:67:9a:73:b9:
d1:cf:16:b7:51:b6:d9:97:18:28:a1:db:e3:d2:25:a3:a3:ab:
90:58:3a:35:c9:03:a2:33:e3:bb:4f:2d:c3:8b:08:f2:1f:8f:
ca:af:98:94:d8:c3:77:27:23:19:9e:3d:f1:ac:80:3a:02:43:
a0:2a:b9:ff:0e:e8:d3:78:a6:35:55:a5:76:3b:80:1c:54:9d:
73:44:9a:47:8e:54:81:0f:b3:61:04:b1:ba:eb:04:97:0e:d1:
fd:ea:25:90:27:17:85:a8:92:9f:0b:b0:2f:4c:5c:b6:48:f8:
ef:a0:ca:95:0d:fa:5f:33:d6:a3:c7:dd:46:c3:97:e7:48:63:
4e:18:ed:a7:0f:65:93:59:1e:55:00:1d:37:1b:1d:87:95:9f:
7e:bc:af:76:a1:6f:3b:0c:65:85:9e:03:94:56:6f:6b:7e:4c:
fd:c4:c1:cf:ba:61:48:cd:12:1f:96:08:4e:21:dd:c3:b9:35:
fb:f8:e6:cb:fb:c8:d9:17:fb:45:ae:52:11:24:4f:52:95:f8:
49:6a:f9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:06 2023 by rpki-client on console-fra.rpki-client.org