Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/ju6COfk1iAtEDteVnY95AbXVOIw.roa
File: ju6COfk1iAtEDteVnY95AbXVOIw.roa (raw, json)
Hash identifier: bOfZY7cxdR0sqODjYYe53SDE53be0hd+WJoq4aj1q+w=
Subject key identifier: 8E:EE:82:39:F9:35:88:0B:44:0E:D7:95:9D:8F:79:01:B5:D5:38:8C
Certificate issuer: /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial: 082EB905
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/ju6COfk1iAtEDteVnY95AbXVOIw.roa
Signing time: Wed 29 Jun 2022 08:39:02 +0000
ROA not before: Wed 29 Jun 2022 08:39:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 1239
IP address blocks: 45.139.56.0/22 maxlen: 24
45.139.64.0/22 maxlen: 24
45.83.124.0/22 maxlen: 24
45.83.144.0/22 maxlen: 24
45.139.36.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137279749 (0x82eb905)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Validity
Not Before: Jun 29 08:39:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8eee8239f935880b440ed7959d8f7901b5d5388c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:74:f3:83:bf:83:ff:a0:e5:b7:90:0c:a8:84:
10:67:f1:f5:d0:26:c4:5c:9d:b5:0e:00:f4:cf:ac:
59:e9:73:6a:f4:6d:91:95:fa:e7:90:ac:47:4c:e7:
bc:0b:ec:2e:0b:41:07:33:e9:05:69:64:cd:48:b4:
dc:b5:76:3c:a9:29:7f:69:4d:5d:a6:9b:82:a6:8a:
e0:db:6e:28:1b:c7:dd:42:4e:42:33:2a:35:8f:3f:
70:f7:73:dc:f0:f9:71:4a:d1:e8:2d:e8:9a:68:79:
e7:3b:cf:e2:5e:2e:b3:55:c9:8d:ab:aa:ff:5f:9d:
8c:67:cd:7f:50:8b:66:a5:5b:f2:2f:dd:98:e9:91:
89:41:7b:b5:16:1d:1e:df:d6:f9:8a:64:fc:da:b7:
f2:14:36:0f:80:30:12:f4:80:4d:fa:87:a9:43:00:
44:f1:ac:12:56:cc:71:3a:b7:ae:e9:f7:41:3d:ca:
e5:47:47:35:81:c5:da:71:a2:aa:52:48:81:de:c5:
44:e5:5a:07:2d:2c:62:05:d9:07:ac:28:64:cf:f7:
22:5e:3a:f3:fa:ac:9f:b4:1b:31:7d:0f:bb:69:d7:
9b:eb:32:93:97:8b:b6:2c:6b:10:e5:f6:89:e2:ce:
a8:7b:3a:c0:49:3f:ae:65:74:d6:35:d9:d9:45:95:
d4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EE:82:39:F9:35:88:0B:44:0E:D7:95:9D:8F:79:01:B5:D5:38:8C
X509v3 Authority Key Identifier:
keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/ju6COfk1iAtEDteVnY95AbXVOIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.124.0/22
45.83.144.0/22
45.139.36.0/22
45.139.56.0/22
45.139.64.0/22
Signature Algorithm: sha256WithRSAEncryption
72:1d:5d:bf:27:eb:8b:2e:5e:29:c0:c0:93:84:93:d6:65:9f:
04:1c:ad:c9:d1:ec:8d:35:f4:b9:0e:cc:80:bd:1a:e3:38:f4:
37:92:e2:1e:9f:ee:7f:74:a5:88:dd:f4:39:bf:5e:bd:16:00:
07:fe:69:c3:67:84:b3:fd:9c:d3:0c:b8:91:39:bc:94:51:ae:
6d:ed:9f:75:ce:0c:24:7f:0c:f7:65:48:17:97:3e:a6:ee:9a:
20:ce:4d:a6:90:d8:48:dd:37:f6:47:26:15:95:65:15:f1:15:
72:39:3d:92:9b:22:57:39:25:7b:3b:15:13:af:19:ef:c6:11:
9d:90:df:31:d8:44:ef:3f:31:d3:4e:8a:75:85:aa:06:44:30:
ff:c9:01:1d:ce:a8:1f:03:c5:1a:4c:2a:75:99:f0:44:32:f6:
36:32:b9:b8:ed:35:f4:1e:7b:83:53:db:90:06:de:32:92:43:
d2:1e:68:7d:78:43:36:34:8f:aa:87:32:a8:22:ca:b7:75:d8:
6e:8f:06:4b:9d:79:f5:30:2f:0d:50:8f:93:71:63:c4:1b:01:
f0:cf:a2:cf:0d:d3:4b:ce:80:d9:55:0a:58:99:50:53:3a:d9:
a5:70:94:02:77:4a:f4:a2:3b:98:9e:15:d7:ce:84:d5:ea:2d:
0f:26:dd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:05 2023 by rpki-client on console-fra.rpki-client.org