Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/dRtd5kBUYsVAfdq1a6EP7ihsvOg.roa
File: dRtd5kBUYsVAfdq1a6EP7ihsvOg.roa (raw, json)
Hash identifier: 6yeJdmerZVyp1ekthOpSo5Y3P8gd92oRIN47aSn5YVU=
Subject key identifier: 75:1B:5D:E6:40:54:62:C5:40:7D:DA:B5:6B:A1:0F:EE:28:6C:BC:E8
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 07B60A1D
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/dRtd5kBUYsVAfdq1a6EP7ihsvOg.roa
Signing time: Mon 09 May 2022 20:36:22 +0000
ROA not before: Mon 09 May 2022 20:36:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204860
IP address blocks: 194.180.110.0/24 maxlen: 24
194.180.115.0/24 maxlen: 24
45.139.64.0/22 maxlen: 22
194.180.150.0/24 maxlen: 24
2a0f:5880::/29 maxlen: 29
2a0f:2a80::/29 maxlen: 29
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129370653 (0x7b60a1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: May 9 20:36:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=751b5de6405462c5407ddab56ba10fee286cbce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:29:57:85:a0:1b:2c:bd:9d:a5:45:8f:77:b3:
3c:41:a6:0c:79:b0:88:65:9b:d4:c6:54:9d:3f:17:
f8:cf:3f:4d:21:63:4e:4e:bd:72:0b:f2:36:29:d7:
6d:71:93:d1:27:16:d6:23:32:6f:d4:45:c1:b7:78:
aa:92:6b:47:6d:e0:4b:34:d3:0d:08:bc:25:03:07:
43:d7:5b:3f:65:99:ec:c9:34:6a:22:c4:2d:8d:81:
14:85:15:70:bb:79:aa:2e:7e:35:88:96:74:77:4c:
a7:42:97:a5:c2:f3:c0:31:bc:37:d6:7c:89:78:c8:
e1:fc:53:9e:6c:3b:3e:e5:fb:7d:92:75:41:48:e4:
58:68:5b:0b:c1:45:41:ef:8f:fd:d0:cb:63:10:3e:
1d:71:06:87:fb:0d:7f:a7:70:f0:07:6e:f9:48:0e:
81:25:6d:72:9f:17:2c:db:17:9e:da:3b:5c:06:37:
f1:fe:9a:a1:92:c0:06:8a:a5:40:8f:47:91:66:e1:
4f:ce:d6:d3:5b:90:f2:e9:4e:fe:83:85:e8:0a:55:
61:4b:da:03:b8:02:8c:0d:2d:02:30:4a:02:c5:76:
d4:9e:9d:c7:75:c7:85:3f:46:28:09:b1:f6:9d:85:
c2:0f:c3:47:3d:7b:c6:e9:ec:57:67:90:44:2c:eb:
e5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1B:5D:E6:40:54:62:C5:40:7D:DA:B5:6B:A1:0F:EE:28:6C:BC:E8
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/dRtd5kBUYsVAfdq1a6EP7ihsvOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.64.0/22
194.180.110.0/24
194.180.115.0/24
194.180.150.0/24
IPv6:
2a0f:2a80::/29
2a0f:5880::/29
Signature Algorithm: sha256WithRSAEncryption
52:f6:54:ea:4e:2a:76:13:43:d2:46:86:4f:a5:45:c4:ea:cb:
ef:16:dc:d2:bb:3c:b1:80:ec:d0:6f:4e:18:9e:89:dc:9f:a7:
9a:e7:a5:fb:c5:1e:51:3b:d4:03:ae:96:9c:b1:00:47:39:22:
d9:45:4f:dd:80:4f:97:6d:38:cb:a7:e2:f4:91:75:00:af:a2:
68:66:88:5d:6a:be:9b:57:e7:f6:41:95:54:f1:50:e2:fc:4d:
1d:8e:02:74:50:a6:de:58:3f:94:ed:ba:80:55:18:42:5d:30:
84:0c:3c:e6:30:e5:a6:6f:a6:39:96:2a:c5:05:01:f0:6a:ab:
8c:49:bf:81:43:23:c5:b3:60:0c:36:a5:fd:d5:75:28:89:95:
29:d2:87:da:67:c2:d2:79:d4:61:b0:d9:f4:83:0f:6c:22:74:
af:24:3e:2e:c0:64:f4:49:02:a7:df:9f:cb:38:39:43:11:56:
21:f8:4a:4e:ac:c2:8d:89:50:bb:1b:44:90:f3:50:20:0e:e9:
0d:7b:08:c2:a8:6c:3d:9a:f8:ab:22:d2:86:95:bb:99:62:cf:
2e:f7:72:12:ad:39:3a:56:48:1c:fa:e5:50:af:ac:2d:2c:58:
b5:15:b5:3d:f4:2e:9f:25:18:f0:5d:35:94:b2:e3:cc:a0:96:
c3:e6:ca:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:05 2023 by rpki-client on console-fra.rpki-client.org