Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Rd5B_Hn0YuOjyuOxcGtH6yCACsY.roa
File: Rd5B_Hn0YuOjyuOxcGtH6yCACsY.roa (raw, json)
Hash identifier: VHfQq/lXjsaKi8FGQQPtPUvdHbuuHAlrLWN2M+ynNLo=
Subject key identifier: 45:DE:41:FC:79:F4:62:E3:A3:CA:E3:B1:70:6B:47:EB:20:80:0A:C6
Certificate issuer: /CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Certificate serial: 05555A41
Authority key identifier: 5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Rd5B_Hn0YuOjyuOxcGtH6yCACsY.roa
Signing time: Sat 01 Jan 2022 06:56:06 +0000
ROA not before: Sat 01 Jan 2022 06:56:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 140224
IP address blocks: 45.81.128.0/24 maxlen: 24
45.135.116.0/24 maxlen: 24
45.135.117.0/24 maxlen: 24
45.91.83.0/24 maxlen: 24
45.91.82.0/24 maxlen: 24
45.91.81.0/24 maxlen: 24
45.91.80.0/24 maxlen: 24
45.155.222.0/24 maxlen: 24
45.155.223.0/24 maxlen: 24
45.140.89.0/24 maxlen: 24
45.140.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89479745 (0x5555a41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b2dd9fe628b6bc10141de0241766a1b7a63193f
Validity
Not Before: Jan 1 06:56:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=45de41fc79f462e3a3cae3b1706b47eb20800ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c2:6b:a5:81:ca:3f:99:42:54:a0:0b:cb:6f:
63:83:a7:60:ab:ff:a4:e8:3d:c6:ce:28:e3:6e:d9:
90:b9:40:70:1f:a7:b3:f9:55:f3:32:a9:f7:77:0f:
78:05:f2:e2:31:fd:31:88:52:b6:10:f1:60:28:31:
7f:61:a2:16:cd:d3:54:0f:53:74:5b:fb:06:4f:a5:
50:7e:b1:ce:05:ad:ee:94:43:cb:8c:e9:98:be:17:
8f:04:3e:ec:e2:c2:a4:94:77:a8:08:0b:24:d6:32:
bc:77:73:ae:bf:d1:b6:8a:d4:4e:a3:f8:0b:7c:30:
7d:86:0e:3c:5a:42:91:56:99:cb:88:f5:83:2e:df:
92:1f:32:41:7a:aa:f0:12:ea:f5:d7:ed:ef:aa:7f:
11:aa:51:06:b0:68:46:70:a1:5f:76:15:ed:b5:bc:
8d:0e:fb:30:b8:e2:ed:c0:c5:74:0b:07:6f:1d:5f:
7e:c5:5c:2f:16:e2:ef:9a:b4:5a:26:54:0f:8e:cf:
ec:e1:9c:ce:a8:43:55:2b:30:09:80:53:b5:56:a9:
18:6c:a2:12:0a:6a:24:94:64:71:42:5d:d9:51:f4:
a6:9c:b6:4c:5d:09:fb:f8:72:3c:f7:e8:f1:73:c2:
74:ea:86:a0:98:db:88:3d:d1:4e:8f:b1:20:91:fe:
30:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DE:41:FC:79:F4:62:E3:A3:CA:E3:B1:70:6B:47:EB:20:80:0A:C6
X509v3 Authority Key Identifier:
keyid:5B:2D:D9:FE:62:8B:6B:C1:01:41:DE:02:41:76:6A:1B:7A:63:19:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Rd5B_Hn0YuOjyuOxcGtH6yCACsY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4de889-dc9d-41e5-b3aa-0d7b551f828c/1/Wy3Z_mKLa8EBQd4CQXZqG3pjGT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.128.0/24
45.91.80.0/22
45.135.116.0/23
45.140.88.0/23
45.155.222.0/23
Signature Algorithm: sha256WithRSAEncryption
81:97:ab:f2:3b:c5:c5:cb:60:ad:a1:2e:a3:cd:07:21:21:25:
11:f4:6e:f5:d7:96:f5:a9:35:6a:c5:da:e1:a6:93:12:e3:b2:
af:f6:57:84:d8:49:27:2d:d9:13:7d:e1:7f:9b:b1:83:b0:68:
c6:0e:a3:5b:21:59:c9:a0:11:22:c8:61:5d:19:c1:ca:c1:bc:
48:cb:85:c1:e7:cd:80:86:fd:46:af:50:32:b9:a4:bc:02:5a:
cb:20:ec:f7:77:f1:8e:2a:1b:02:a5:e8:4e:9b:63:e1:0b:7a:
28:66:30:93:32:eb:cd:dd:ca:73:39:c5:2d:e2:d2:7a:d3:96:
9c:3a:d7:5e:62:5a:b6:22:6d:62:2c:d1:e4:ce:63:ab:5f:39:
9f:77:4b:b7:35:bf:09:24:42:40:19:20:ac:66:60:c6:4a:b9:
26:5a:1a:6f:f8:cb:27:39:16:f5:38:0c:dd:ca:e1:e5:5a:a2:
1e:5b:23:83:0c:b0:6a:79:df:55:f6:bf:67:a5:51:77:d9:3a:
bb:95:64:2b:4a:56:a7:43:cd:b7:63:c4:d7:fa:9e:77:58:67:
09:2a:db:6e:d5:b4:ae:e1:ea:ac:62:12:73:e0:28:70:bb:85:
cb:88:48:d7:32:59:62:27:0a:12:e8:33:8b:b0:68:b2:86:6e:
13:5a:dd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:57 2023 by rpki-client on console-ams.rpki-client.org