Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/GHea1j6VkRUHuf7ujJCmNsSnKG4.roa
File: GHea1j6VkRUHuf7ujJCmNsSnKG4.roa (raw, json)
Hash identifier: LpaorWstwpqLWobtkIuqhVLOo6emdTGg5liH0nGxi9g=
Subject key identifier: 18:77:9A:D6:3E:95:91:15:07:B9:FE:EE:8C:90:A6:36:C4:A7:28:6E
Certificate issuer: /CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Certificate serial: 01835622482F5DF16D6A3CBF376957A7104D
Authority key identifier: 33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/GHea1j6VkRUHuf7ujJCmNsSnKG4.roa
Signing time: Mon 19 Sep 2022 14:23:50 +0000
ROA not before: Mon 19 Sep 2022 14:23:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35251
IP address blocks: 45.145.228.0/24 maxlen: 24
45.145.229.0/24 maxlen: 24
45.145.230.0/24 maxlen: 24
45.145.231.0/24 maxlen: 24
45.138.68.0/24 maxlen: 24
45.138.69.0/24 maxlen: 24
45.138.70.0/24 maxlen: 24
45.138.71.0/24 maxlen: 24
45.158.22.0/24 maxlen: 24
45.158.23.0/24 maxlen: 24
45.158.20.0/24 maxlen: 24
45.158.21.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:56:22:48:2f:5d:f1:6d:6a:3c:bf:37:69:57:a7:10:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=333361fba8409174fb3c482b8ca26f235ebd22c2
Validity
Not Before: Sep 19 14:23:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=18779ad63e95911507b9feee8c90a636c4a7286e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8e:80:5c:8d:38:6a:fe:5c:26:09:2f:48:52:
67:00:5c:8e:be:b6:42:d1:99:52:e9:51:a8:b4:d1:
3d:cd:01:d4:1c:34:98:ac:cd:90:d1:0f:56:c1:80:
c4:b9:20:82:b3:8f:65:a5:6f:3e:83:5a:45:75:f7:
7d:ab:84:9a:db:64:c7:8d:f1:fe:e6:69:4e:d4:84:
2d:5f:59:78:25:04:02:6f:2f:be:7a:a9:4e:fe:5c:
04:e6:01:40:2a:cb:dd:12:2b:b4:31:0c:73:a3:ee:
42:c6:d0:93:b7:87:69:a1:9b:3c:7b:e8:66:ed:48:
ae:b4:ec:4d:23:9c:79:90:61:d1:80:5a:a6:0f:f5:
4c:11:35:e7:59:56:95:29:22:0e:7e:ad:8c:0a:8b:
32:8f:ef:53:45:72:ea:14:af:ea:ea:33:3c:6b:54:
61:9c:6e:8a:46:5a:66:4d:e4:57:f6:20:21:b4:14:
36:f2:db:42:91:9d:db:cf:28:1b:cc:83:8a:5a:d9:
17:7b:2f:42:96:59:e4:91:58:eb:4e:99:a4:e0:e5:
ae:3b:3f:94:37:3d:86:f1:b8:bc:e5:ca:38:d8:71:
4c:52:52:be:97:18:b6:3b:3f:69:33:c7:04:35:02:
4b:cd:2a:13:91:42:e5:84:03:97:80:c0:6a:87:c4:
4c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:77:9A:D6:3E:95:91:15:07:B9:FE:EE:8C:90:A6:36:C4:A7:28:6E
X509v3 Authority Key Identifier:
keyid:33:33:61:FB:A8:40:91:74:FB:3C:48:2B:8C:A2:6F:23:5E:BD:22:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzNh-6hAkXT7PEgrjKJvI169IsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/GHea1j6VkRUHuf7ujJCmNsSnKG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/11e13f-4cea-44af-81f9-b2cccf0eadab/1/MzNh-6hAkXT7PEgrjKJvI169IsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.138.68.0/22
45.145.228.0/22
45.158.20.0/22
Signature Algorithm: sha256WithRSAEncryption
38:74:f7:95:b1:96:d4:5f:7b:ae:68:b7:a6:21:79:e8:95:6d:
a2:34:70:3f:84:6b:75:18:b1:67:39:39:64:7c:b1:a3:05:a2:
59:47:00:f3:42:ca:cb:d7:eb:b3:60:3a:f8:a8:f2:50:b5:6e:
5c:a7:31:8f:a4:87:51:fa:26:08:c4:5c:1a:e7:a3:1b:3c:87:
42:a2:78:cb:94:af:00:b7:90:44:33:6e:dd:47:cf:ca:e7:e5:
77:e4:63:50:3c:cb:08:ef:26:8a:2b:d3:2e:23:79:96:da:6d:
6d:09:6a:81:bf:07:08:6d:00:f7:38:db:15:1c:ca:0e:9e:61:
b9:2b:54:81:6c:58:71:31:56:88:08:49:48:8a:c8:15:19:59:
c4:b9:0e:69:d5:70:df:53:25:3c:e4:74:84:2c:18:b4:6c:eb:
1a:ea:3b:38:e3:22:0d:76:fc:fc:f6:92:ea:08:b2:88:90:9b:
7f:ea:67:d0:68:4e:e5:bf:79:b7:6d:83:d5:b9:2e:52:d2:c8:
b2:d9:26:60:ec:a8:3b:44:5d:96:fb:34:05:38:be:98:7c:87:
a1:bf:5b:12:c1:cc:8e:a3:d1:cd:3f:f6:6d:6b:47:90:f6:06:
e9:10:ab:e0:ee:40:d5:87:f9:52:da:db:97:ce:f4:dd:90:d2:
66:d4:bd:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:09 2023 by rpki-client on console-fra.rpki-client.org