Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/xBQCzSMZ1j0PkddbATaBLRw_lqQ.roa
File: xBQCzSMZ1j0PkddbATaBLRw_lqQ.roa (raw, json)
Hash identifier: KbJT0Uyr51pzPOozIJGp31eqr1JfgJmoLfKNTMHHffE=
Subject key identifier: C4:14:02:CD:23:19:D6:3D:0F:91:D7:5B:01:36:81:2D:1C:3F:96:A4
Certificate issuer: /CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Certificate serial: 0525A702
Authority key identifier: 57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/xBQCzSMZ1j0PkddbATaBLRw_lqQ.roa
Signing time: Mon 14 Mar 2022 21:35:20 +0000
ROA not before: Mon 14 Mar 2022 21:35:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14593
IP address blocks: 145.224.64.0/21 maxlen: 24
145.224.72.0/21 maxlen: 24
145.224.80.0/21 maxlen: 24
145.224.88.0/22 maxlen: 24
145.224.94.0/23 maxlen: 24
145.224.96.0/21 maxlen: 24
145.224.92.0/23 maxlen: 24
145.224.108.0/22 maxlen: 24
145.224.124.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 86353666 (0x525a702)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5799b327dd6cda1ad37bc1c224a454b02dea2afc
Validity
Not Before: Mar 14 21:35:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c41402cd2319d63d0f91d75b0136812d1c3f96a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:78:5d:07:1e:af:50:66:85:96:db:8a:c1:4c:
53:c8:c8:0c:fe:bb:1c:ad:c3:0e:02:43:4d:1b:a6:
ae:bf:f0:4a:7e:56:ac:ad:4b:af:ff:df:20:87:a4:
78:03:f6:5d:40:b2:98:60:eb:f7:d3:a3:2e:79:cd:
b6:a5:6c:2b:fb:ea:c4:89:aa:2e:00:9d:3d:b3:a5:
82:02:de:98:7f:fe:0e:b4:8a:8f:97:49:cc:4f:52:
19:13:2c:94:ea:d4:4c:27:45:52:69:bf:6e:12:de:
e3:81:62:66:39:cb:4e:ce:f9:f1:85:25:40:70:c9:
c8:da:72:ac:82:3a:dc:d2:87:c4:da:5a:5e:23:74:
45:20:3a:ea:10:31:1b:42:fc:59:27:d3:3b:1c:f8:
c0:c4:43:5e:1f:af:7c:3c:a5:60:e8:33:49:e1:08:
8f:2a:2f:5a:55:ab:87:ae:9c:03:8e:c9:4b:45:19:
3e:84:51:fc:0b:f0:48:29:5d:0c:56:1c:5d:4e:29:
d8:e0:ed:ac:8e:a6:54:5f:e3:2e:35:c8:b7:ba:b6:
fc:95:ee:64:83:f0:3c:c8:6a:67:32:39:22:f2:d9:
93:35:64:59:aa:6e:5d:1a:c3:fd:d4:67:2b:ab:91:
b3:2d:b1:8b:f5:f1:ea:19:63:e2:3a:4d:66:ef:ef:
0e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:14:02:CD:23:19:D6:3D:0F:91:D7:5B:01:36:81:2D:1C:3F:96:A4
X509v3 Authority Key Identifier:
keyid:57:99:B3:27:DD:6C:DA:1A:D3:7B:C1:C2:24:A4:54:B0:2D:EA:2A:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V5mzJ91s2hrTe8HCJKRUsC3qKvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/xBQCzSMZ1j0PkddbATaBLRw_lqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8c2ae9-0a77-49eb-ad3a-ea150e7638ce/1/V5mzJ91s2hrTe8HCJKRUsC3qKvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.224.64.0-145.224.103.255
145.224.108.0/22
145.224.124.0/22
Signature Algorithm: sha256WithRSAEncryption
41:ff:a0:5c:8b:5e:52:ae:f0:eb:15:c7:9a:dd:eb:f3:0c:d0:
8c:f1:e2:c5:b7:27:73:95:d3:13:6f:92:79:f6:7f:bb:84:12:
8a:f9:73:2e:18:a2:60:fe:c9:42:32:59:49:97:0a:c7:90:db:
3d:64:93:d3:23:22:49:7c:cb:54:a8:af:33:40:21:d4:bf:eb:
fc:47:bf:d4:42:48:0d:1b:b8:a9:24:cc:37:19:47:e4:bf:46:
bd:e6:f1:58:44:83:71:16:41:2d:84:52:cd:d7:2f:77:15:b5:
1d:e0:bd:72:ee:70:63:b7:d6:45:bf:c0:23:cf:4d:68:79:6c:
29:77:ab:73:45:16:6a:c5:b9:08:6d:e7:8c:d7:be:a8:15:37:
0f:07:70:74:45:55:f5:a2:bc:f2:c6:d1:ba:82:3e:bb:ed:46:
f0:40:5a:75:b9:c6:b8:6b:81:aa:7c:66:22:28:a9:69:1e:30:
55:ea:1f:a8:66:21:0c:a9:69:03:7c:ca:4c:d8:9b:1b:fd:e4:
bb:8e:30:a2:63:1a:3c:78:73:d3:38:bf:33:f8:1f:0c:af:d8:
9a:ff:2f:9d:91:c9:1b:00:d4:04:a1:ad:6a:23:73:7b:3d:ec:
fb:f0:b3:11:ad:2b:a5:72:17:7b:cb:50:7a:0e:a5:4a:4c:f5:
eb:7e:a1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:46 2024 by rpki-client on console-fra.rpki-client.org