Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/4NafDAE8pVcE08yKBCDJ6Rf71Jw.roa
File: 4NafDAE8pVcE08yKBCDJ6Rf71Jw.roa (raw, json)
Hash identifier: S/0tZR67ZL3YnMjbe45ETKBydO7XAf9mbZQ6IdkCVvw=
Subject key identifier: E0:D6:9F:0C:01:3C:A5:57:04:D3:CC:8A:04:20:C9:E9:17:FB:D4:9C
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01849F0BB98540289C20E91A182524A43EE8
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/4NafDAE8pVcE08yKBCDJ6Rf71Jw.roa
Signing time: Tue 22 Nov 2022 11:14:16 +0000
ROA not before: Tue 22 Nov 2022 11:14:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2.56.108.0/22 maxlen: 22
45.88.139.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.94.168.0/22 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
85.209.123.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
85.209.121.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.120.0/22 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
77.83.38.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:9f:0b:b9:85:40:28:9c:20:e9:1a:18:25:24:a4:3e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 22 11:14:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0d69f0c013ca55704d3cc8a0420c9e917fbd49c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9c:b3:b2:b0:93:2a:1e:90:5a:1b:6f:d4:94:
d5:ab:24:40:2a:70:e9:ef:07:66:a8:7a:30:6e:87:
6f:d0:47:74:ab:04:91:28:b0:45:51:13:2c:7e:e6:
79:ca:46:af:b3:2c:df:f9:61:9c:29:cb:3a:43:74:
5a:b5:6a:f5:c8:1b:ce:8d:6f:6c:79:54:e8:82:e6:
07:b3:63:f8:12:df:ed:85:ff:87:53:1b:8d:cb:f4:
6b:65:3b:44:63:bf:5a:83:5f:a0:a8:31:62:5c:dc:
d1:7d:60:46:d7:26:67:0e:ab:c3:03:0f:2c:d3:91:
e3:25:72:b6:4c:42:50:6d:f5:78:a4:3c:73:59:7f:
cf:57:c5:cc:08:6f:21:e2:2d:dc:ac:49:35:99:aa:
66:33:d0:10:3c:d9:1d:de:54:4e:1c:42:93:2d:42:
20:70:8a:af:eb:c4:9e:d1:33:29:f6:93:10:8b:28:
da:b4:83:27:92:6a:cf:f6:06:a7:fb:9c:84:0c:0e:
ba:9b:72:ff:56:67:aa:2d:45:e5:1e:f0:4e:05:79:
b8:cd:f0:2d:ce:6a:bc:41:d7:b8:79:cd:c4:02:3d:
ec:6c:96:48:02:89:04:07:35:04:7f:f6:4a:48:4c:
ec:f3:73:eb:b0:a5:ac:32:f2:4a:b8:ca:38:39:51:
3e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D6:9F:0C:01:3C:A5:57:04:D3:CC:8A:04:20:C9:E9:17:FB:D4:9C
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/4NafDAE8pVcE08yKBCDJ6Rf71Jw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
5.181.87.0/24
45.9.29.0/24
45.81.112.0/22
45.88.136.0/24
45.88.139.0/24
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/23
77.83.38.0/24
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/22
193.57.43.0/24
194.242.96.0/22
195.62.24.0/24
195.177.92.0/22
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
3d:41:10:10:ca:b9:17:ff:c3:71:80:66:c3:2f:43:82:16:a8:
60:66:6a:87:62:ab:8d:a1:ae:2f:ad:3d:82:5e:32:fe:5a:00:
39:b8:2f:eb:f1:e3:3f:1a:bf:12:bf:a9:f9:eb:04:ff:07:14:
73:fa:02:52:cc:dc:ed:63:3e:1c:fb:b8:5a:76:1a:64:a3:a2:
45:97:6a:67:93:73:87:7e:d3:53:2a:f8:42:e9:3d:59:a6:e3:
5b:14:e2:4b:08:c3:c0:69:5c:19:67:8a:fd:d2:04:6c:ca:f2:
10:cf:d9:51:fe:e5:6c:8b:ff:54:02:da:bf:dd:81:d0:0c:c2:
90:60:57:07:9d:25:41:42:d1:cc:55:4c:d8:d0:60:e8:79:c3:
24:cb:fe:5e:ca:99:9f:92:d2:08:72:21:7b:1d:3c:4c:0c:4e:
76:03:62:c7:0a:0a:a4:f0:e2:d7:d8:37:0d:1e:60:54:bd:9c:
2c:a0:08:e1:c0:48:46:11:ac:af:4b:10:6f:27:ab:5f:dc:b7:
48:91:5a:5a:cb:38:1f:d4:60:f7:45:a5:75:fc:b8:7e:4e:26:
b7:fe:d3:9f:0d:31:c3:4e:e7:19:51:df:c4:28:d1:cb:5e:8e:
a2:ff:a6:e3:07:08:96:a9:10:6b:fd:59:05:c0:65:78:72:7c:
4b:99:e4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:17 2024 by rpki-client on console-ams.rpki-client.org