Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/bXqgjsiRpDyOe4pp8v5Jh1_v850.roa
File: bXqgjsiRpDyOe4pp8v5Jh1_v850.roa (raw, json)
Hash identifier: 5+6qt/EKTZkoDcmC7p2PFbWnVSmcWAcdWUR9HHAB7Oo=
Subject key identifier: 6D:7A:A0:8E:C8:91:A4:3C:8E:7B:8A:69:F2:FE:49:87:5F:EF:F3:9D
Certificate issuer: /CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Certificate serial: 0AE59F41
Authority key identifier: CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/bXqgjsiRpDyOe4pp8v5Jh1_v850.roa
Signing time: Thu 12 May 2022 12:51:02 +0000
ROA not before: Thu 12 May 2022 12:51:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 203101
IP address blocks: 185.98.100.0/22 maxlen: 22
45.56.224.0/22 maxlen: 22
45.56.224.0/21 maxlen: 22
45.56.233.0/24 maxlen: 24
45.56.232.0/24 maxlen: 24
45.56.228.0/22 maxlen: 22
45.56.238.0/23 maxlen: 23
45.56.236.0/22 maxlen: 23
45.56.234.0/23 maxlen: 23
45.56.240.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 182820673 (0xae59f41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cac21641bdbcfac24c54b6a4859483c5e41640b6
Validity
Not Before: May 12 12:51:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6d7aa08ec891a43c8e7b8a69f2fe49875feff39d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:25:82:52:2d:24:26:22:5c:49:c2:d9:cc:a6:
6a:ee:2d:19:58:1a:eb:2d:be:1a:0d:b1:db:91:31:
97:77:57:c5:43:54:19:08:60:17:ee:16:40:65:08:
ee:57:57:ff:ec:d6:6f:34:8e:15:34:0e:55:a0:5e:
46:2d:35:f8:ef:7c:0c:51:cb:e6:62:7a:dd:6f:d2:
2d:db:a5:02:9d:10:54:e0:b1:d7:65:1c:c5:1f:57:
7f:71:8c:93:b9:12:1b:f5:73:84:b7:49:a4:e7:4a:
56:a6:bc:25:f8:c1:01:6d:fa:b3:54:35:9c:88:8a:
af:12:a8:04:6c:22:73:40:09:a7:db:af:a4:4d:e3:
bf:49:5b:61:4f:5d:3e:db:fa:09:9d:f3:d3:14:d4:
36:9e:09:51:cd:22:81:1e:64:b1:13:ea:c4:5e:ce:
d2:27:47:6f:95:2a:f6:79:80:7c:c0:28:a3:fb:a2:
4c:7a:df:2b:2b:f6:67:bd:1e:1a:7d:e7:a1:88:40:
f4:38:78:2e:61:09:a4:15:55:94:86:27:48:8d:b7:
df:fa:b8:9b:44:ff:34:0c:4a:e1:5e:fe:28:1e:3e:
d8:63:30:2e:42:ac:7c:2e:3c:18:33:e6:9b:f6:f6:
1a:92:bb:d4:0d:48:e0:2d:b0:20:37:8b:1b:2b:26:
ba:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7A:A0:8E:C8:91:A4:3C:8E:7B:8A:69:F2:FE:49:87:5F:EF:F3:9D
X509v3 Authority Key Identifier:
keyid:CA:C2:16:41:BD:BC:FA:C2:4C:54:B6:A4:85:94:83:C5:E4:16:40:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysIWQb28-sJMVLakhZSDxeQWQLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/bXqgjsiRpDyOe4pp8v5Jh1_v850.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/877e40-6ca1-4a2b-89a5-8abf5ee6c4ad/1/ysIWQb28-sJMVLakhZSDxeQWQLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.56.224.0/19
185.98.100.0/22
Signature Algorithm: sha256WithRSAEncryption
92:92:09:07:92:dd:87:80:2d:69:04:4d:32:5e:1b:94:50:a3:
25:e4:32:b3:6f:ca:d2:ad:04:59:88:b1:3d:bb:d2:29:24:7a:
cb:5f:8f:12:25:55:36:02:75:72:11:b5:9f:ba:78:28:20:4d:
26:0b:8f:62:0e:40:f0:3b:6d:f0:89:14:07:26:aa:a0:b1:5a:
45:c6:f9:fe:04:1d:08:53:de:e7:89:b3:e7:cd:f4:ce:5b:ca:
26:ae:28:19:1a:30:42:d1:86:1a:30:0d:1f:79:13:55:fa:21:
d9:bb:d3:53:37:fc:a2:5a:c0:09:6b:fb:51:0e:f1:24:e1:3a:
fc:31:e3:b6:30:cc:0e:13:84:72:80:44:08:e9:0d:a9:c2:89:
f4:5c:3d:86:ba:22:c6:61:c3:90:b8:07:cf:4b:c6:b6:b4:b8:
6f:05:3c:ef:82:27:f0:0e:55:b5:63:9a:74:88:28:66:98:c8:
db:74:3a:3f:c3:81:79:f6:fd:b4:7e:2d:83:ab:0f:80:89:51:
67:43:12:d1:d7:5a:04:fd:49:ca:23:d4:51:51:70:f5:ee:46:
56:01:20:3b:e3:bc:48:f0:3d:7a:f0:25:ac:6f:6f:29:82:3e:
ba:23:ac:81:85:41:18:ed:64:d6:14:1f:1c:14:01:24:66:ea:
a7:20:41:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:57 2023 by rpki-client on console-fra.rpki-client.org