Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/XvipQZ5Mu0CTrFvlpHiDaP3e5gc.roa
File: XvipQZ5Mu0CTrFvlpHiDaP3e5gc.roa (raw, json)
Hash identifier: PdyQQs/dEGXnejYfvifqxS6uw4JIh/gWF2fW6BNki4E=
Subject key identifier: 5E:F8:A9:41:9E:4C:BB:40:93:AC:5B:E5:A4:78:83:68:FD:DE:E6:07
Certificate issuer: /CN=377c264d388333d342372931aa0d192b0fba62c1
Certificate serial: 073F9260
Authority key identifier: 37:7C:26:4D:38:83:33:D3:42:37:29:31:AA:0D:19:2B:0F:BA:62:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/XvipQZ5Mu0CTrFvlpHiDaP3e5gc.roa
Signing time: Sat 01 Jan 2022 16:03:25 +0000
ROA not before: Sat 01 Jan 2022 16:03:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208108
IP address blocks: 45.159.232.0/22 maxlen: 22
45.159.232.0/24 maxlen: 24
45.159.233.0/24 maxlen: 24
45.159.234.0/24 maxlen: 24
45.159.235.0/24 maxlen: 24
2a0f:8780::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121606752 (0x73f9260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=377c264d388333d342372931aa0d192b0fba62c1
Validity
Not Before: Jan 1 16:03:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5ef8a9419e4cbb4093ac5be5a4788368fddee607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f7:b7:c3:5f:b4:7d:57:d6:43:71:68:57:68:
7e:e1:e8:75:3f:17:d3:7b:58:dd:ae:76:dc:ee:66:
52:4d:7c:50:70:37:dd:5e:2f:14:25:c9:f8:41:68:
55:e3:59:e3:d2:db:3a:7b:e9:0c:c1:cb:37:69:82:
6a:3e:4c:1b:c3:44:93:de:68:49:ba:f2:c1:5f:c1:
88:ff:b1:ec:86:b9:34:7c:15:22:2f:1a:8a:af:32:
73:eb:72:cd:08:7e:8a:f4:2f:17:fa:7a:3f:39:63:
80:2a:33:4c:21:fd:e6:b5:84:95:f2:18:23:e9:6f:
c6:23:4b:26:fa:e1:6f:6e:3f:20:ea:db:f0:be:a3:
86:67:73:08:09:49:b3:13:fd:40:12:d6:7e:61:d7:
1c:e9:a2:4f:37:9a:03:ba:df:df:1d:76:90:00:4b:
3b:c6:49:31:88:ba:7c:0c:d8:f7:7e:98:cb:c3:49:
5c:f2:06:58:e5:61:16:b2:10:6e:38:82:4a:26:b1:
ec:ae:26:1a:36:c0:7c:d2:8b:7e:d6:21:fb:e1:9b:
e3:15:96:d9:ed:d2:76:44:9b:cb:e8:b8:d7:13:3d:
13:be:65:e1:ef:19:c0:ed:51:bd:26:79:3c:e4:0e:
6e:99:d5:58:de:eb:e2:75:81:8e:61:12:1a:10:ea:
c9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F8:A9:41:9E:4C:BB:40:93:AC:5B:E5:A4:78:83:68:FD:DE:E6:07
X509v3 Authority Key Identifier:
keyid:37:7C:26:4D:38:83:33:D3:42:37:29:31:AA:0D:19:2B:0F:BA:62:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3wmTTiDM9NCNykxqg0ZKw-6YsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/XvipQZ5Mu0CTrFvlpHiDaP3e5gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3252a9-2e42-4228-b540-e6064efce2ac/1/N3wmTTiDM9NCNykxqg0ZKw-6YsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.232.0/22
IPv6:
2a0f:8780::/29
Signature Algorithm: sha256WithRSAEncryption
b3:e8:d8:7f:ce:aa:fa:da:44:73:dd:27:ed:07:16:ad:e6:07:
7d:97:18:e5:44:f3:f9:90:67:12:49:d6:34:53:d5:72:8f:df:
fe:26:5a:3b:b1:87:d2:8a:2b:e5:86:cc:d8:0b:cf:1b:db:a5:
0a:08:f5:40:f8:0b:5b:f8:7f:02:77:37:0e:47:fb:5a:12:77:
3d:0f:a0:df:71:93:89:26:97:d9:b1:7c:39:0d:89:9b:67:50:
59:2d:cb:b1:93:8b:8c:ae:45:50:3e:0b:d1:5d:58:4e:07:5a:
57:87:02:f1:72:bd:fb:4d:ac:ca:ef:c4:59:2f:dd:ee:ab:8a:
44:93:f5:5d:e0:32:11:23:3f:07:8d:83:f0:be:09:07:29:cf:
af:e6:b4:88:b6:56:b1:73:03:92:ff:88:bf:49:ac:bf:67:da:
19:4a:69:f2:31:51:cb:77:4b:a0:87:94:d0:fb:30:81:e8:bb:
bd:a9:f0:e8:3f:48:70:57:73:b3:74:4f:c9:6d:aa:97:ea:21:
e2:ab:48:38:b5:6f:25:e7:9a:94:14:6d:b0:21:ef:68:59:4c:
9b:a0:06:53:cb:46:fc:f9:1a:62:6f:9b:e2:e0:7e:eb:1c:c2:
79:a9:ca:1b:fa:9e:a7:8e:37:e7:54:54:94:c1:b7:f7:0d:7b:
81:e9:af:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:50:51 2024 by rpki-client on console-ams.rpki-client.org