Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/C9K2EGp3o1qEkqT9KQ0CDemQu-4.roa
File: C9K2EGp3o1qEkqT9KQ0CDemQu-4.roa (raw, json)
Hash identifier: vOyWLIIzHjJzaVGwHi+O/IpediTFzYRPUblNBcVkmC8=
Subject key identifier: 0B:D2:B6:10:6A:77:A3:5A:84:92:A4:FD:29:0D:02:0D:E9:90:BB:EE
Certificate issuer: /CN=b0758e88c20702131b917a4dfdb2374bc3655587
Certificate serial: 09132AC5
Authority key identifier: B0:75:8E:88:C2:07:02:13:1B:91:7A:4D:FD:B2:37:4B:C3:65:55:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHWOiMIHAhMbkXpN_bI3S8NlVYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/C9K2EGp3o1qEkqT9KQ0CDemQu-4.roa
Signing time: Thu 23 Jun 2022 03:38:32 +0000
ROA not before: Thu 23 Jun 2022 03:38:32 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200793
IP address blocks: 45.149.200.0/22 maxlen: 22
45.149.200.0/23 maxlen: 23
45.149.201.0/24 maxlen: 24
45.149.202.0/24 maxlen: 24
45.149.203.0/24 maxlen: 24
45.149.200.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152251077 (0x9132ac5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0758e88c20702131b917a4dfdb2374bc3655587
Validity
Not Before: Jun 23 03:38:32 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0bd2b6106a77a35a8492a4fd290d020de990bbee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9c:a4:7b:a0:a7:24:4a:cc:bc:01:de:42:60:
13:31:32:b6:02:3d:cb:34:4b:91:2b:6f:11:79:e4:
bd:04:e2:02:50:f0:6f:31:f4:c5:6d:4c:50:a9:06:
56:c5:43:4d:07:5e:b2:fc:f8:e1:77:37:3c:6d:5f:
4a:b0:13:8e:2b:2d:61:47:78:a2:31:a4:c0:46:c0:
fd:52:34:6a:a5:60:73:7e:0b:ca:b0:43:cf:6f:05:
a7:1a:7e:ce:2f:76:c1:77:ea:f7:50:90:6a:d1:8a:
57:cc:dc:46:1e:85:2c:72:68:00:0d:fe:aa:c0:07:
b2:f6:ec:30:59:40:43:89:04:61:ed:86:e9:4b:98:
1e:01:89:51:e4:b8:6a:1e:2e:14:63:c6:d2:7e:7f:
81:80:f5:4a:be:71:63:57:1b:d7:dc:13:49:f5:c1:
7f:7c:96:60:b3:e0:4e:3d:cc:81:79:b1:e4:a9:e8:
cd:89:d6:51:a7:65:8b:2d:c1:2d:f8:a1:66:f5:ef:
86:f6:fa:ec:cc:52:ad:3a:18:52:03:40:60:16:2a:
e3:f2:29:5a:d8:a5:b6:bb:b4:b5:bc:eb:f5:4b:9f:
f4:0a:2a:1d:d7:5e:21:07:da:5f:96:4b:de:ea:cd:
b8:a2:75:83:75:8a:a8:fe:6a:fd:68:e5:5e:25:4c:
e0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D2:B6:10:6A:77:A3:5A:84:92:A4:FD:29:0D:02:0D:E9:90:BB:EE
X509v3 Authority Key Identifier:
keyid:B0:75:8E:88:C2:07:02:13:1B:91:7A:4D:FD:B2:37:4B:C3:65:55:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHWOiMIHAhMbkXpN_bI3S8NlVYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/C9K2EGp3o1qEkqT9KQ0CDemQu-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/071eeb-154a-45f0-8d7b-63873e884413/1/sHWOiMIHAhMbkXpN_bI3S8NlVYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.200.0/22
Signature Algorithm: sha256WithRSAEncryption
77:de:d2:b7:88:c4:6f:9f:3a:22:24:e0:6f:fa:7b:c4:3f:89:
c7:ba:67:88:5b:5a:c0:fc:a3:e3:fe:f4:8f:3a:34:31:8f:ea:
e6:83:62:6a:fd:e0:f0:60:35:97:6f:18:06:fc:d7:61:be:7f:
67:46:c2:fc:3b:05:c3:dd:2c:c5:b6:57:e1:6d:42:f9:c8:2b:
f5:3d:e9:8e:68:ce:d1:85:b5:59:46:5a:a4:7d:42:ba:df:04:
14:64:90:55:3a:b0:d6:f2:3b:6c:32:0c:ff:70:f2:e6:8d:f2:
8b:d8:79:b1:e3:23:39:b9:6f:84:93:bc:49:b4:bc:9b:f6:24:
9d:86:cb:e4:77:40:77:2e:a5:a4:39:3b:c0:a5:e6:86:9b:f8:
68:e7:41:89:6e:e8:70:ed:fc:31:7a:07:14:e8:3f:bd:97:23:
b0:1c:70:91:90:76:90:e1:d0:63:c7:c7:6e:fd:d3:03:e2:fe:
6c:07:69:4c:dd:67:60:1a:d8:9a:2e:c4:e9:ad:4c:ab:4a:f7:
83:03:f1:83:a9:29:5f:3e:da:dd:e2:b3:86:d1:db:25:0f:6b:
c7:60:3e:4c:4c:81:65:93:aa:7a:ec:e6:44:38:8e:f3:2c:7c:
24:d3:ec:e8:cb:4c:93:dc:ef:97:18:f5:04:7c:f4:00:8d:36:
0e:7b:be:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:41:25 2023 by rpki-client on console.sobornost.net