Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/ss0BHdEI4iNyTHcKBZlhAMddDZA.roa
File: ss0BHdEI4iNyTHcKBZlhAMddDZA.roa (raw, json)
Hash identifier: LF+OheWHnQixUaE3btIQDTLWDcxbAvrGbhTzGHUKC5g=
Subject key identifier: B2:CD:01:1D:D1:08:E2:23:72:4C:77:0A:05:99:61:00:C7:5D:0D:90
Certificate issuer: /CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Certificate serial: 180BAFCA
Authority key identifier: 44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/ss0BHdEI4iNyTHcKBZlhAMddDZA.roa
Signing time: Sat 01 Jan 2022 05:57:29 +0000
ROA not before: Sat 01 Jan 2022 05:57:29 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 14127
IP address blocks: 185.45.0.0/23 maxlen: 23
185.45.2.0/23 maxlen: 23
193.246.192.0/24 maxlen: 24
193.246.193.0/24 maxlen: 24
193.246.196.0/24 maxlen: 24
193.246.195.0/24 maxlen: 24
193.246.194.0/24 maxlen: 24
193.246.197.0/24 maxlen: 24
89.106.176.0/22 maxlen: 24
89.106.180.0/23 maxlen: 23
89.106.182.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 403419082 (0x180bafca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44a3b43f647e1e7714cd130764cbbc4814e7a148
Validity
Not Before: Jan 1 05:57:29 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2cd011dd108e223724c770a05996100c75d0d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:70:2e:3c:27:c4:d1:d4:c1:5c:e1:ee:37:36:
b3:96:63:5b:62:65:2c:ab:29:1e:e4:aa:27:66:e4:
33:a5:ca:45:be:8a:0d:fc:fc:28:e2:fa:ee:9c:fb:
b5:25:3e:9c:b6:b5:66:92:36:29:0b:50:f9:91:29:
7b:8d:12:eb:c3:2b:a2:05:35:3e:d5:cc:c8:e3:63:
cb:4a:c0:1f:57:17:27:b3:21:8f:6a:ae:b9:a8:fe:
a7:36:0c:82:12:3d:17:43:d7:46:61:a7:fb:39:14:
35:06:ec:64:e4:9d:d0:c1:69:e3:30:38:f4:4f:1d:
f6:15:c9:fd:61:0a:59:c7:39:bb:23:79:43:6e:c9:
57:18:a0:e2:4a:de:8b:d6:a1:a6:f9:70:2f:39:02:
bb:49:8b:59:f4:b9:90:b7:b4:40:95:cb:7c:da:ad:
c9:81:f3:3c:e0:98:b6:a4:48:93:d9:a0:c5:95:2b:
0c:b9:4e:03:a3:fb:29:90:76:f9:ba:c0:a6:49:c4:
b3:87:3a:40:11:86:7a:e0:02:d4:c7:be:5e:32:0f:
ba:da:1a:4b:3f:0d:c9:8f:50:80:fa:e5:01:f0:fc:
78:87:0e:fd:cc:43:5c:ad:75:73:44:6a:da:77:2a:
91:06:d5:68:2e:78:a2:26:52:08:4e:a2:6e:df:3f:
99:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CD:01:1D:D1:08:E2:23:72:4C:77:0A:05:99:61:00:C7:5D:0D:90
X509v3 Authority Key Identifier:
keyid:44:A3:B4:3F:64:7E:1E:77:14:CD:13:07:64:CB:BC:48:14:E7:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKO0P2R-HncUzRMHZMu8SBTnoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/ss0BHdEI4iNyTHcKBZlhAMddDZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e1cee6-dcff-4373-bd88-a3c539f0b6d2/1/RKO0P2R-HncUzRMHZMu8SBTnoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.176.0/21
185.45.0.0/22
193.246.192.0-193.246.197.255
Signature Algorithm: sha256WithRSAEncryption
14:43:1a:29:44:48:f4:31:70:f4:78:9d:46:74:e1:74:6e:81:
42:81:4f:1c:4c:6e:df:fd:04:2d:33:59:87:0d:b1:4b:ce:bd:
02:06:e0:3a:e4:08:84:40:99:83:c4:14:14:23:91:80:92:d7:
55:e9:a1:ab:30:0c:c4:33:87:b4:29:a2:c4:b7:31:a8:5c:28:
67:69:78:1c:53:9e:54:8a:20:97:74:e2:d0:5b:63:b7:f6:40:
67:34:02:22:cc:aa:d8:27:4b:c2:3e:42:fe:e3:d6:f8:2c:4a:
61:e2:81:fa:93:57:d4:e2:7f:c8:f0:b8:82:ad:fd:5d:d9:0f:
f6:0e:b4:f8:6f:e2:8c:83:b9:10:05:91:8b:5f:51:0b:29:c6:
72:91:90:50:a8:77:98:ab:aa:b5:14:40:1f:5f:d3:41:46:59:
76:e2:0a:04:51:45:6e:85:05:95:45:ad:6b:d1:da:33:14:c9:
73:1d:c7:f3:36:36:2a:27:67:38:3c:23:07:7e:77:e9:1c:c2:
4d:35:54:a3:11:81:1d:66:40:72:b0:6a:b6:fb:58:e3:92:34:
19:4f:79:13:6a:f8:8d:12:64:ac:47:99:63:49:0f:d1:02:58:
dc:87:e7:99:52:ec:2e:2e:b8:80:10:b6:f5:63:6f:a9:2f:a9:
58:ce:cc:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:10 2024 by rpki-client on console-ams.rpki-client.org