Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/9eeFAEqy4zkkWNbEwiBhQRnepO0.roa
File: 9eeFAEqy4zkkWNbEwiBhQRnepO0.roa (raw, json)
Hash identifier: iV7TZRW32P29jB6pw2KfR+stbFd3FLLTjPBNafopC2c=
Subject key identifier: F5:E7:85:00:4A:B2:E3:39:24:58:D6:C4:C2:20:61:41:19:DE:A4:ED
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 08688EF8
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/9eeFAEqy4zkkWNbEwiBhQRnepO0.roa
Signing time: Tue 03 May 2022 13:22:57 +0000
ROA not before: Tue 03 May 2022 13:22:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 45.151.2.0/24 maxlen: 24
195.211.190.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.13.188.0/24 maxlen: 24
45.13.191.0/24 maxlen: 24
45.13.189.0/24 maxlen: 24
45.144.215.0/24 maxlen: 24
45.144.214.0/24 maxlen: 24
194.15.52.0/23 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/24 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
85.209.121.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141070072 (0x8688ef8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: May 3 13:22:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f5e785004ab2e3392458d6c4c220614119dea4ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:e0:36:4d:98:a4:37:0b:5c:06:c5:14:cf:
5a:8c:3a:a0:d6:dc:65:83:64:76:0f:4b:65:aa:7b:
44:6c:f0:01:77:26:e5:f4:df:d8:3c:3b:48:8f:7c:
fa:30:b7:b7:e4:5a:06:00:9c:72:91:2a:88:2f:ce:
52:ba:76:e2:46:f8:b4:11:42:fb:28:24:91:af:e6:
ba:4f:28:eb:17:df:a6:09:0f:e4:d3:1c:f0:4d:86:
c1:42:e3:1e:ee:66:b8:dc:37:32:7d:2f:a8:34:61:
ee:99:b6:f5:74:e5:6e:0f:63:6b:ab:70:45:d4:8c:
1b:3c:5f:25:a3:c6:08:7c:39:ce:5b:fe:28:41:1b:
0a:17:5b:11:ce:35:47:50:b5:e9:52:52:f0:63:44:
93:fd:7f:de:2e:bd:7b:80:6f:c2:82:cc:03:bb:5a:
3f:f5:c6:d5:a5:41:bf:56:54:30:e1:d3:4c:cb:ac:
5a:11:17:06:5d:bd:a4:de:95:46:0b:2b:e2:62:8a:
6c:92:2e:55:1f:c6:40:8d:fc:e8:f3:22:a8:2e:4e:
f1:98:7b:65:03:bf:71:03:ae:49:5d:02:2e:fc:58:
22:9e:72:26:3d:b4:d5:99:d0:2f:99:4d:11:af:6b:
c8:03:8a:af:2c:94:42:fd:4c:04:da:83:d8:6c:28:
4a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E7:85:00:4A:B2:E3:39:24:58:D6:C4:C2:20:61:41:19:DE:A4:ED
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/9eeFAEqy4zkkWNbEwiBhQRnepO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.29.0/24
45.13.188.0/23
45.13.191.0/24
45.88.136.0/22
45.132.181.0/24
45.144.212.0/22
45.151.2.0/24
77.83.37.0-77.83.39.255
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/24
193.30.240.0/22
193.57.41.0/24
193.57.43.0/24
194.15.52.0/23
194.242.96.0/22
195.62.24.0/24
195.177.92.0/22
195.211.190.0/24
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
07:b4:60:77:87:36:68:48:23:d7:28:db:7e:e0:5f:59:ed:4b:
a6:c9:5d:7d:dc:4c:fc:5c:0f:a7:d8:e2:c1:7c:95:97:41:c2:
71:c9:ef:0e:4b:86:9c:2f:19:3e:31:27:34:fe:f8:49:1c:82:
15:f5:73:ce:85:d9:d9:d1:86:62:ba:c9:36:9f:2b:0f:1a:4f:
e9:a6:c1:14:ea:bd:c4:0f:4a:dc:ca:19:95:c3:32:5a:7e:09:
d6:4e:17:f0:66:0e:b4:22:3e:bd:7e:1a:e8:93:66:bc:92:be:
5e:09:f7:8e:ab:6d:a6:88:2e:63:38:93:e2:ca:5e:27:b6:18:
d6:2e:c6:0b:b9:91:5c:50:8c:3e:8d:dd:83:d4:18:ad:55:3b:
e0:bb:08:02:4f:43:ed:b7:e0:03:41:a8:86:d6:54:48:6e:8f:
9b:20:b0:d4:b3:fa:29:e8:a8:d8:bc:d9:41:9e:03:fd:58:5f:
b4:06:65:ea:82:16:02:e1:24:3e:c9:80:19:b4:97:b4:bf:10:
45:0f:30:66:6f:6d:e3:39:eb:c0:46:6f:0d:25:f5:d9:74:2f:
c5:44:78:d7:67:92:7a:d9:c5:44:11:a4:bf:9c:90:00:dd:1e:
a1:2f:b2:15:3f:1a:39:48:45:ad:db:ee:f8:4d:df:01:c9:eb:
11:af:77:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org