Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/0eZexeFVbQxQChCm5hTbW6Zn7DA.roa
File: 0eZexeFVbQxQChCm5hTbW6Zn7DA.roa (raw, json)
Hash identifier: lfPPayoRcYhfCTh58uDyevJ2VkdgkUPYt3OpovQu2AE=
Subject key identifier: D1:E6:5E:C5:E1:55:6D:0C:50:0A:10:A6:E6:14:DB:5B:A6:67:EC:30
Certificate issuer: /CN=6d42cff18334b2ff76b15ad944a8a9135e90568c
Certificate serial: 014438
Authority key identifier: 6D:42:CF:F1:83:34:B2:FF:76:B1:5A:D9:44:A8:A9:13:5E:90:56:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bULP8YM0sv92sVrZRKipE16QVow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/0eZexeFVbQxQChCm5hTbW6Zn7DA.roa
Signing time: Thu 17 Mar 2022 11:42:59 +0000
ROA not before: Thu 17 Mar 2022 11:42:59 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198507
IP address blocks: 45.14.176.0/22 maxlen: 22
45.81.192.0/22 maxlen: 22
37.143.55.0/24 maxlen: 24
37.143.52.0/22 maxlen: 22
185.132.72.0/24 maxlen: 24
185.132.75.0/24 maxlen: 24
185.132.73.0/24 maxlen: 24
185.132.74.0/24 maxlen: 24
45.9.196.0/22 maxlen: 22
2a06:e040:7601::/48 maxlen: 48
2a06:e040:5901::/48 maxlen: 48
2a06:e040:3501::/48 maxlen: 48
2a06:e040:6900::/40 maxlen: 40
2a06:e040::/32 maxlen: 32
2a06:e043::/32 maxlen: 32
2a06:e040:3502::/48 maxlen: 48
2a06:e044:10::/48 maxlen: 48
2a06:e040:7603::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83000 (0x14438)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d42cff18334b2ff76b15ad944a8a9135e90568c
Validity
Not Before: Mar 17 11:42:59 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d1e65ec5e1556d0c500a10a6e614db5ba667ec30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6e:b0:83:f0:82:66:59:e4:e1:3b:88:7a:c8:
6a:c6:c3:cf:62:05:f9:7b:87:bf:d1:a5:a2:3e:ed:
2c:c7:51:09:66:92:0e:59:2d:c0:a6:84:d5:93:d5:
e2:16:92:35:8d:22:fb:21:6b:17:96:6a:b6:76:0e:
4b:e4:23:4f:58:7e:f5:e2:27:c0:b9:f7:a0:a7:6a:
9d:ff:e9:8b:35:60:a9:a0:d6:1a:d4:cb:63:1b:ab:
e9:8c:e5:66:0e:04:8f:cb:ef:96:9c:a5:6e:9f:52:
c7:71:35:46:86:17:a6:58:d2:bf:10:88:5b:a7:0a:
8c:33:b4:af:b4:72:98:42:6e:41:df:13:f8:76:56:
33:d2:c4:8b:5c:78:53:a8:5d:1f:4e:9b:4e:05:88:
be:3a:b7:5e:d4:45:dc:62:fc:74:ec:07:16:81:c5:
03:6b:8a:43:fc:94:33:14:84:e9:08:f6:b9:eb:37:
9e:34:d2:78:ef:b7:5f:26:fd:c0:22:f4:b6:42:d1:
16:e5:ba:e5:2e:3a:f8:e3:0c:da:90:36:2d:e9:2a:
c6:da:2e:d9:52:16:5b:2b:37:9d:37:b4:0f:5a:93:
ca:fe:78:d0:f3:76:95:4b:86:5e:21:6d:7b:d2:ab:
60:14:f7:bb:f9:c0:1e:1e:09:72:0f:da:6e:7e:61:
c8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E6:5E:C5:E1:55:6D:0C:50:0A:10:A6:E6:14:DB:5B:A6:67:EC:30
X509v3 Authority Key Identifier:
keyid:6D:42:CF:F1:83:34:B2:FF:76:B1:5A:D9:44:A8:A9:13:5E:90:56:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bULP8YM0sv92sVrZRKipE16QVow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/0eZexeFVbQxQChCm5hTbW6Zn7DA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.143.52.0/22
45.9.196.0/22
45.14.176.0/22
45.81.192.0/22
185.132.72.0/22
IPv6:
2a06:e040::/32
2a06:e043::/32
2a06:e044:10::/48
Signature Algorithm: sha256WithRSAEncryption
1c:31:4e:7e:fd:7d:6a:50:5c:91:32:2a:44:e4:a2:86:3b:35:
4c:f7:07:84:64:c0:39:34:6c:20:61:ae:ba:b4:1d:6e:65:2d:
9a:6f:7e:05:6f:e4:1b:65:1e:b3:9f:f5:e6:be:d5:80:be:e4:
97:e8:c0:f9:b1:9e:87:ca:54:53:10:28:a3:3c:09:2e:60:77:
f8:63:ff:a0:26:d7:b4:8a:50:93:00:d4:e2:21:cd:c1:a3:dc:
c1:ee:54:48:65:89:b0:56:fd:68:9a:52:fe:ad:ce:d2:09:4a:
40:97:13:82:c7:da:2d:3b:ce:86:8f:87:9c:c5:46:0f:5f:24:
f2:c0:6a:88:9c:b3:2e:8a:11:42:d1:d1:96:aa:8f:50:e1:3c:
9d:de:31:20:81:3d:a4:a3:4a:9d:3c:65:21:5a:af:be:c0:bc:
bb:54:33:5d:56:06:75:b2:2e:56:59:7c:60:d9:6d:98:37:49:
0d:60:33:48:39:81:b8:13:b0:87:25:10:96:fc:ec:86:6d:db:
f5:d9:20:03:5d:e1:bd:c7:51:c8:f2:8b:50:f9:c2:d1:33:bd:
2f:34:52:2d:6c:73:22:8f:77:e8:9f:fb:83:b8:b5:9b:e5:b3:
4b:26:8c:4c:4c:64:df:5d:8d:d5:d4:9b:79:4e:79:3b:4c:b0:
91:a4:c6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:20 2023 by rpki-client on console-ams.rpki-client.org