Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/aIkmK8SiOFIGire1RyNe9nqIzZU.roa
File: aIkmK8SiOFIGire1RyNe9nqIzZU.roa (raw, json)
Hash identifier: mGjNTdMivrxxgQz14p/bL8in4zv5cgbhx1Ax9qK5oks=
Subject key identifier: 68:89:26:2B:C4:A2:38:52:06:8A:B7:B5:47:23:5E:F6:7A:88:CD:95
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 0699D4F1
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/aIkmK8SiOFIGire1RyNe9nqIzZU.roa
Signing time: Sat 01 Jan 2022 11:03:19 +0000
ROA not before: Sat 01 Jan 2022 11:03:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204860
IP address blocks: 194.180.110.0/24 maxlen: 24
194.180.115.0/24 maxlen: 24
45.139.64.0/22 maxlen: 22
45.156.44.0/22 maxlen: 22
194.180.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110744817 (0x699d4f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Jan 1 11:03:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6889262bc4a23852068ab7b547235ef67a88cd95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ae:bc:8e:b4:6f:59:69:f3:1d:c1:7c:f0:36:
0e:5f:93:ab:a3:3f:c5:f6:d6:1f:15:28:b4:07:ab:
cc:d8:e3:38:e5:d8:4e:f1:b9:f7:91:05:28:63:59:
d9:7b:09:01:2c:38:9b:9b:f6:b6:4e:f4:76:72:6d:
34:77:e5:b4:e6:56:98:53:12:49:88:ea:a3:1e:94:
ac:14:8f:8d:eb:3e:8a:20:0d:32:fe:78:39:53:75:
d1:84:d6:79:b6:20:59:cb:9e:82:e8:85:30:cc:1f:
6d:a4:42:2c:a1:87:cd:b1:87:31:7f:05:d9:34:b0:
92:07:8a:94:e3:d1:c1:a1:6f:c4:66:11:66:4b:8b:
cd:3b:59:41:70:4b:44:33:b3:96:a2:04:39:14:c1:
4f:dc:89:ec:a2:c1:ac:59:ed:66:ea:78:43:fa:66:
c5:0d:32:2d:5a:b7:30:8f:fa:0f:e9:4a:1c:15:4a:
81:6a:38:de:9d:8f:ad:2f:f7:b3:27:5f:dd:2e:05:
bb:bb:1b:f5:22:8e:5b:48:8a:51:5b:06:fb:4c:5a:
7a:32:b0:7c:85:98:a0:eb:ae:83:1f:37:6f:85:6a:
e1:9e:25:0e:a0:cb:5e:b0:bf:9e:36:66:22:57:30:
90:10:af:00:8a:48:ff:91:94:f0:fa:93:14:74:50:
8b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:89:26:2B:C4:A2:38:52:06:8A:B7:B5:47:23:5E:F6:7A:88:CD:95
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/aIkmK8SiOFIGire1RyNe9nqIzZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.64.0/22
45.156.44.0/22
194.180.110.0/24
194.180.115.0/24
194.180.150.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:69:57:27:4d:19:41:e8:c8:2a:44:68:f0:0c:12:35:49:b5:
b2:fc:13:06:15:05:48:dc:eb:90:e8:b3:83:12:72:96:73:2a:
e6:8a:a3:80:c4:ce:0d:a0:5d:ed:e2:7d:36:eb:bb:da:bc:e4:
6d:49:3f:16:c7:d5:69:33:32:a1:ae:6a:d1:55:78:d9:15:d3:
b3:96:12:1c:9e:56:19:f0:56:16:ce:38:04:61:74:da:19:41:
c1:a5:47:e2:9a:75:73:84:4e:e8:02:e0:75:f7:6a:30:d3:5c:
19:a8:a3:c1:40:ce:be:43:30:32:fb:0d:bd:0e:9e:1c:81:0d:
c7:b9:5a:a4:af:55:7e:13:6a:25:a0:e7:29:5c:86:7d:b9:63:
73:1d:fe:d6:48:20:ba:30:98:bd:ad:60:c9:fd:9c:28:1c:8c:
21:b1:73:1d:f0:c3:ae:2e:01:48:23:6c:31:1d:a9:50:9a:89:
16:7c:e9:49:a8:11:fc:88:09:a0:79:27:46:aa:08:ea:0c:a8:
fa:e6:e4:b7:f1:24:95:0d:03:15:fd:c3:38:dc:3f:61:e3:2c:
7d:30:bb:13:ff:92:ea:60:67:f2:e2:2c:d7:a1:d6:6f:f2:91:
ce:08:bf:3d:5e:3f:61:1d:68:00:75:fa:ee:dd:da:d6:b3:c2:
84:47:04:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:54 2023 by rpki-client on console-ams.rpki-client.org