Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/6q2TxCM0t1dvxxdRMELK3jrWn1Y.roa
File: 6q2TxCM0t1dvxxdRMELK3jrWn1Y.roa (raw, json)
Hash identifier: abgHQ3VVqno3ixMcKIGnCtTiUmN1V+wARqN6cEJw8Bw=
Subject key identifier: EA:AD:93:C4:23:34:B7:57:6F:C7:17:51:30:42:CA:DE:3A:D6:9F:56
Certificate issuer: /CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Certificate serial: 06C2A81E
Authority key identifier: 5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/6q2TxCM0t1dvxxdRMELK3jrWn1Y.roa
Signing time: Wed 01 Jun 2022 12:48:45 +0000
ROA not before: Wed 01 Jun 2022 12:48:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 8796
IP address blocks: 45.81.128.0/24 maxlen: 24
45.135.116.0/23 maxlen: 24
45.91.83.0/24 maxlen: 24
45.91.82.0/24 maxlen: 24
45.91.80.0/24 maxlen: 24
45.91.81.0/24 maxlen: 24
45.155.222.0/23 maxlen: 24
45.140.88.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113420318 (0x6c2a81e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Validity
Not Before: Jun 1 12:48:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eaad93c42334b7576fc717513042cade3ad69f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b4:12:00:0b:ef:f6:53:3e:f5:99:6f:17:c7:
e3:79:9f:cf:ae:5f:cb:56:e1:41:79:b7:95:86:f9:
e3:a7:22:5e:98:72:ee:b8:77:e2:1a:da:34:c9:e7:
0f:77:f5:4e:3c:49:11:e6:10:ef:5a:ce:08:65:5f:
ec:20:55:42:90:53:4d:46:af:6a:b5:45:83:e9:b8:
f0:6f:6d:2e:e8:5d:31:50:e6:76:05:0f:f0:ce:95:
4a:c5:ed:70:97:f1:d2:02:ac:3b:ea:f9:03:cf:ac:
d4:9d:56:b7:0a:41:58:06:a5:a0:16:d0:e0:31:6e:
ed:57:54:b3:da:e4:e5:be:b0:a2:d7:e7:20:dc:36:
ff:d2:f3:96:15:52:13:47:bd:9a:e9:f3:2c:59:50:
85:8a:a1:cc:09:df:8c:90:cd:52:99:ba:78:9a:34:
07:47:b8:67:06:a9:7b:ac:83:b3:48:0f:68:43:91:
d4:e3:a7:5f:31:27:41:4d:c1:dd:9a:fc:44:cd:59:
e2:51:ea:6d:76:7c:a7:63:64:01:81:3a:06:fc:2d:
05:2f:02:58:c0:83:80:00:83:88:10:6b:38:e9:6f:
0d:5e:39:18:24:01:df:ff:22:0e:ef:0b:12:2c:45:
53:c6:0b:ef:ec:2c:60:ab:b2:36:fc:40:fe:1c:08:
9b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AD:93:C4:23:34:B7:57:6F:C7:17:51:30:42:CA:DE:3A:D6:9F:56
X509v3 Authority Key Identifier:
keyid:5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/6q2TxCM0t1dvxxdRMELK3jrWn1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.128.0/24
45.91.80.0/22
45.135.116.0/23
45.140.88.0/23
45.155.222.0/23
Signature Algorithm: sha256WithRSAEncryption
40:e5:d6:d8:8b:f7:64:d5:44:80:94:0a:a7:82:d4:e0:90:36:
c0:ce:84:91:f3:52:3f:38:47:ea:6f:56:7e:ec:38:35:ad:c4:
65:d4:ff:6f:a7:5b:e3:a3:9d:71:a0:08:b2:1c:02:d5:23:d4:
6a:4f:a4:eb:b9:44:35:b9:c2:97:a3:df:87:71:22:60:25:c6:
d8:18:97:07:57:b9:80:25:91:53:50:c0:b3:31:6d:f4:17:d2:
b0:44:aa:fc:1c:56:b1:9a:6b:12:bc:95:eb:14:06:87:6c:70:
bc:24:0a:72:af:69:5b:98:a8:e1:c9:b1:18:9f:f7:39:5e:47:
a4:4c:28:d7:17:8c:e7:5e:d7:09:5c:17:9d:5b:72:0b:51:d8:
c1:02:fa:b1:13:1e:1b:33:c9:bc:2f:42:e5:dc:03:8d:2c:1e:
86:b5:e7:21:e4:31:d3:ac:1f:6f:5d:9d:e2:19:59:08:82:ee:
a6:a7:87:3c:42:55:a9:71:e2:4a:15:a5:ad:75:00:19:40:e9:
37:63:c4:8d:22:f1:a4:d9:1c:7d:ba:08:83:e6:fa:47:95:bc:
fe:76:62:0f:e5:94:c8:56:76:20:60:c8:ed:29:ad:89:53:1d:
0f:19:38:e4:c9:9e:fc:ed:85:a8:84:3a:82:ea:9a:40:95:9e:
e1:de:7d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:14 2024 by rpki-client on console-ams.rpki-client.org