Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/GQNZXr_REfKH1g7zuBPrQX_3jsg.roa
File: GQNZXr_REfKH1g7zuBPrQX_3jsg.roa (raw, json)
Hash identifier: 8sGGrRSeaPwmKr7RsVB1Cext/hK9Q02zvi8xwGVg9gw=
Subject key identifier: 19:03:59:5E:BF:D1:11:F2:87:D6:0E:F3:B8:13:EB:41:7F:F7:8E:C8
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0183FB0A3016561F8673FE5DDBBDECD427CE
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/GQNZXr_REfKH1g7zuBPrQX_3jsg.roa
Signing time: Fri 21 Oct 2022 14:54:52 +0000
ROA not before: Fri 21 Oct 2022 14:54:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 45.9.30.0/24 maxlen: 24
45.13.189.0/24 maxlen: 24
45.13.191.0/24 maxlen: 24
45.13.188.0/24 maxlen: 24
194.15.53.0/24 maxlen: 24
194.15.52.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
45.132.183.0/24 maxlen: 24
45.132.182.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fb:0a:30:16:56:1f:86:73:fe:5d:db:bd:ec:d4:27:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 21 14:54:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1903595ebfd111f287d60ef3b813eb417ff78ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f6:02:cd:20:be:7a:57:ba:15:f3:7c:02:f9:
f4:74:f2:1d:95:0e:d6:58:b6:fe:0b:bf:45:d3:e4:
1d:bc:eb:f3:d8:cf:85:71:f3:2c:80:26:4c:f3:1f:
b8:4c:fb:95:8e:5d:99:86:ec:3b:5a:95:db:0a:80:
29:8f:e8:fa:3e:d6:09:9c:e3:66:7b:1d:c7:54:e9:
30:ad:28:1c:10:a0:a1:45:1e:9c:bb:e8:5d:47:f4:
d4:2d:0b:a1:ea:3c:4c:ed:fc:f7:10:66:19:c8:fa:
94:27:9a:55:53:bb:10:06:bf:3d:56:df:d9:20:e7:
2e:e2:8b:69:29:75:d2:e8:1f:1c:30:37:e5:98:28:
c6:61:0c:d6:09:0d:25:a1:ee:b1:1a:5b:bc:50:f4:
e3:ed:6c:9f:05:e9:36:a5:97:76:20:e6:b3:21:5b:
36:3d:62:8c:f4:2e:8f:34:9a:48:f7:61:f3:38:93:
04:1a:c1:dc:97:5e:35:58:1c:a1:b4:35:77:60:bc:
1a:33:de:d4:81:eb:08:45:ac:18:fe:2a:ff:a6:42:
18:fe:70:e9:f6:32:a0:8d:93:fa:32:26:f1:70:a2:
c1:a8:ef:b3:2e:f2:63:f2:fd:6b:5b:93:d2:53:77:
8c:4f:d8:20:12:04:11:61:46:52:54:ec:b6:3b:8c:
da:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:03:59:5E:BF:D1:11:F2:87:D6:0E:F3:B8:13:EB:41:7F:F7:8E:C8
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/GQNZXr_REfKH1g7zuBPrQX_3jsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.30.0/24
45.13.188.0/23
45.13.191.0/24
45.88.136.0/23
45.132.180.0/24
45.132.182.0/23
77.83.37.0/24
194.15.52.0/23
Signature Algorithm: sha256WithRSAEncryption
22:df:ff:47:24:37:d3:59:51:35:7a:71:fd:95:69:6c:4e:c2:
2a:18:c4:21:c3:2f:8a:94:ff:ab:ef:6f:3e:60:dc:ca:e9:9a:
22:fb:0c:ba:f1:5e:40:2c:71:57:66:ee:bc:67:f5:0f:f1:6a:
23:aa:f3:ab:0d:e5:1f:ef:2c:31:fe:9e:68:f3:d0:03:24:a8:
89:2a:25:c0:f6:03:79:a6:d6:df:a0:e6:5e:3e:c7:40:79:04:
3a:7e:65:22:f5:9f:fa:eb:3a:19:df:9e:52:2d:68:50:cc:3e:
c7:fe:c8:21:64:82:c9:6a:a4:ea:f1:ec:53:c0:ac:eb:f3:c3:
93:6c:96:1d:71:49:98:e7:16:b6:7d:6c:22:50:6d:68:d6:21:
1e:0a:1c:e8:05:94:6d:12:e7:66:34:a1:dc:69:4f:31:82:b8:
5d:42:13:a9:79:bd:bf:52:2e:f9:07:5d:e2:27:8d:77:bf:1b:
59:3a:e9:9f:47:98:10:da:44:5b:1a:fd:55:be:9a:ea:c7:a4:
d4:f4:4e:bd:87:76:7c:8d:cc:88:84:22:c0:1b:cf:96:cb:7d:
97:e8:08:15:48:f7:dc:ce:30:9a:91:30:fc:1e:26:dc:27:fb:
e7:ee:ef:2b:bb:b8:e2:bf:30:0a:75:f2:7e:46:83:f4:9f:e9:
17:fe:bd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org