Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/2E0_NVbivBVZQ89WzUcJ-YPpdCQ.roa
File: 2E0_NVbivBVZQ89WzUcJ-YPpdCQ.roa (raw, json)
Hash identifier: EL3iu8NFbbj5WAaf20K6M9rt1eSC7/CSWZ4l+IIADu8=
Subject key identifier: D8:4D:3F:35:56:E2:BC:15:59:43:CF:56:CD:47:09:F9:83:E9:74:24
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0184F36C6DF478528FDA9869A15BBEE8D1F6
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/2E0_NVbivBVZQ89WzUcJ-YPpdCQ.roa
Signing time: Thu 08 Dec 2022 20:28:00 +0000
ROA not before: Thu 08 Dec 2022 20:28:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 45.9.30.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f3:6c:6d:f4:78:52:8f:da:98:69:a1:5b:be:e8:d1:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Dec 8 20:28:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d84d3f3556e2bc155943cf56cd4709f983e97424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:06:e1:08:6a:80:ef:b5:bb:a5:60:8b:51:01:
c9:93:ec:97:55:98:25:5e:05:74:8b:bb:e8:aa:51:
5f:41:b7:20:9a:08:8d:5b:3a:45:f5:05:f7:fd:db:
da:09:b7:a7:cb:d8:63:6b:33:46:8a:b3:1c:49:2e:
1c:54:e2:03:80:35:01:fb:b7:eb:4c:34:fa:49:06:
cb:7d:93:ef:35:40:c1:b3:bd:5d:a2:f1:cc:62:26:
93:66:f6:35:be:08:9f:aa:01:bc:84:bc:4c:1c:ae:
4a:35:9e:ee:0a:b8:0c:d5:2e:5e:8e:7b:be:1f:dc:
ec:ac:91:26:bf:50:cf:32:8e:be:47:9e:87:78:f8:
85:8e:e7:52:85:61:bb:be:54:9a:69:8b:ae:e2:6e:
70:01:92:e4:92:c2:27:ae:d6:07:03:f9:59:70:d6:
aa:64:86:e2:83:a6:6e:cc:d0:94:45:e3:1b:cf:87:
8b:bb:33:a2:95:7c:13:98:29:52:3d:81:a1:0c:2c:
9a:8f:54:88:93:df:46:3f:c7:5a:2a:1a:1e:3e:e6:
5b:5d:5f:d0:82:da:5c:a0:f9:23:86:a8:e9:36:3f:
37:04:8c:c0:e3:b3:a9:ca:d9:af:23:da:4c:9d:09:
3d:93:9a:e6:28:38:af:86:05:7e:39:7e:45:3d:de:
a9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4D:3F:35:56:E2:BC:15:59:43:CF:56:CD:47:09:F9:83:E9:74:24
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/2E0_NVbivBVZQ89WzUcJ-YPpdCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.30.0/24
45.88.137.0/24
45.132.180.0/24
195.177.94.0/24
Signature Algorithm: sha256WithRSAEncryption
28:f9:b2:ae:34:d1:5e:01:89:eb:c2:8c:54:ec:64:d4:43:ad:
2e:b1:fe:27:e1:2b:4e:1c:74:a7:f7:4a:3a:e8:8e:20:6c:40:
2e:ac:a7:d4:72:89:ab:28:71:97:69:ef:1d:42:21:c2:08:fe:
26:d4:2d:24:75:fe:be:0d:32:7f:5f:76:1d:db:f4:7f:c8:56:
bc:04:ff:f0:c4:32:bd:1b:28:79:2d:22:f7:02:9d:21:1a:d2:
f1:da:15:5c:db:be:78:3f:f6:22:30:ac:c3:32:70:9a:59:fd:
8d:1a:7a:40:a0:a9:fc:78:ed:22:0f:2d:78:64:2d:49:07:0e:
5a:d9:44:b9:57:8b:0a:2d:47:b8:94:23:b1:32:7d:67:cb:da:
98:6f:a6:ff:5c:25:37:ac:8d:a9:3e:9b:2c:c1:23:e7:43:fb:
ad:3f:42:30:81:1f:75:aa:14:86:1b:d7:4a:c6:46:29:c9:d9:
6d:8a:2a:9b:14:a5:fb:d1:1f:19:99:7e:44:05:f7:22:f3:fa:
30:52:68:1a:ac:cb:79:1a:03:5b:db:96:eb:d7:e1:aa:f6:08:
11:2f:3b:d2:40:df:3e:09:67:4a:e7:fb:14:36:02:3b:8b:9b:
91:ca:5b:0c:15:a5:ed:8c:36:2f:ba:fd:fe:a9:96:72:20:1a:
40:15:10:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:17 2024 by rpki-client on console-ams.rpki-client.org