Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/PXueYNOELPBqA52i-BWntSsgETw.roa
File: PXueYNOELPBqA52i-BWntSsgETw.roa (raw, json)
Hash identifier: jhshLDp6S+OntGL+C5SjF1TpvdrCxgfMYwqTHR3tIZk=
Subject key identifier: 3D:7B:9E:60:D3:84:2C:F0:6A:03:9D:A2:F8:15:A7:B5:2B:20:11:3C
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0184F17A62BE20E2E8F2A9ED574F1EEBD4EB
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/PXueYNOELPBqA52i-BWntSsgETw.roa
Signing time: Thu 08 Dec 2022 11:24:00 +0000
ROA not before: Thu 08 Dec 2022 11:24:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2.56.108.0/22 maxlen: 22
45.88.139.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.13.188.0/24 maxlen: 24
45.13.189.0/24 maxlen: 24
45.94.168.0/22 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
77.83.38.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f1:7a:62:be:20:e2:e8:f2:a9:ed:57:4f:1e:eb:d4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Dec 8 11:24:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d7b9e60d3842cf06a039da2f815a7b52b20113c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a1:72:7c:07:f8:28:11:67:b0:d2:ff:ba:ab:
cc:cd:c4:91:e5:d1:24:00:ac:77:06:eb:fa:84:69:
39:2d:b3:5d:07:ab:8c:b2:38:e8:29:57:53:78:c0:
80:35:c9:be:21:26:46:9b:6a:56:a0:a5:d9:0f:5d:
c2:92:8d:51:75:80:ac:55:77:5c:10:d5:26:3b:4c:
4d:17:73:a7:e3:17:20:97:26:76:f0:19:35:dc:2c:
71:2d:2a:e1:28:b6:ae:1d:09:18:de:a1:6c:f2:c8:
67:18:4b:c8:54:c3:ef:8c:bb:31:b9:f5:1d:53:d7:
c2:90:5f:fe:ff:1d:22:ad:30:60:fc:31:8c:15:73:
a0:9d:0e:68:97:38:8b:90:bb:be:c6:aa:d5:74:95:
62:39:fb:7f:6a:d4:cb:93:f4:77:da:bb:4c:9e:56:
6c:41:02:83:9a:5c:9b:14:88:1b:de:01:d7:56:f9:
01:b6:a7:51:95:15:42:e3:87:3e:bc:30:3a:1d:55:
a6:39:f2:a1:35:50:56:80:96:e6:cd:7a:17:ea:a7:
b6:26:ba:e5:7c:08:b1:a1:3f:a3:de:3b:56:96:61:
5a:7b:ab:de:7f:45:88:a5:97:c8:c0:20:05:dd:6f:
5b:42:34:76:dc:a4:98:ac:fa:ce:02:9a:66:4e:b6:
83:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7B:9E:60:D3:84:2C:F0:6A:03:9D:A2:F8:15:A7:B5:2B:20:11:3C
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/PXueYNOELPBqA52i-BWntSsgETw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
5.181.87.0/24
45.9.29.0/24
45.13.188.0/23
45.81.112.0/22
45.88.136.0/24
45.88.138.0/23
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/23
77.83.38.0/24
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/22
193.57.43.0/24
194.242.96.0/22
195.62.24.0/24
195.177.92.0/22
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
0e:ac:9d:3f:d2:56:fe:d9:84:ed:8b:23:c2:f0:ea:cd:e8:e4:
e8:c2:85:da:13:54:90:8a:80:48:bf:29:15:a8:f4:e9:e3:b8:
99:47:32:20:56:d9:81:a2:d4:0c:19:c0:f6:a8:7a:e7:44:9f:
b8:eb:ec:8f:36:fa:7c:b7:6f:6d:08:5f:9c:22:37:28:4b:cb:
c8:1c:04:0a:67:fc:34:25:72:b0:08:e6:c7:70:57:21:80:8d:
66:fa:9b:b3:f3:76:6e:7d:ea:db:b8:25:af:06:ba:d6:29:6e:
67:5b:9d:ce:ba:b6:16:2e:a5:7f:c4:d1:b2:92:49:53:d6:20:
8a:e4:ed:7a:db:f8:6d:c6:df:64:5d:fe:6a:41:e4:f7:34:a3:
92:2a:3e:67:b2:0c:9b:2b:f8:ab:23:b9:fe:91:e5:b5:97:a5:
df:9b:ff:cb:fd:46:00:95:13:49:14:f7:56:3a:9b:19:94:ac:
0a:f3:8c:62:2e:b0:dc:cc:ee:7d:b9:7f:b1:73:0f:ac:b6:df:
f8:b6:de:97:9e:da:bf:10:8d:e8:a3:85:68:b7:be:4e:7f:77:
0e:57:40:41:82:3c:b2:06:c4:cc:da:7f:9e:2d:ef:8c:a2:46:
e0:51:67:82:9b:50:10:01:78:d6:94:40:bf:e2:03:06:9f:05:
9a:9e:ec:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:18 2024 by rpki-client on console-ams.rpki-client.org