Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/PxUsHUzWCr_jJEWiPssLvpvr8AQ.roa
File: PxUsHUzWCr_jJEWiPssLvpvr8AQ.roa (raw, json)
Hash identifier: pPDq3cT1wnn7UyPYB94vNiHlh1zAIc/euTgZf413mtI=
Subject key identifier: 3F:15:2C:1D:4C:D6:0A:BF:E3:24:45:A2:3E:CB:0B:BE:9B:EB:F0:04
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0183F9AB897D8B74B6C8B7E65B963C4AC5EA
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/PxUsHUzWCr_jJEWiPssLvpvr8AQ.roa
Signing time: Fri 21 Oct 2022 08:31:52 +0000
ROA not before: Fri 21 Oct 2022 08:31:52 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 45.151.2.0/24 maxlen: 24
45.151.0.0/23 maxlen: 24
5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2.56.108.0/22 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
194.15.52.0/23 maxlen: 24
77.83.39.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.13.191.0/24 maxlen: 24
45.94.168.0/22 maxlen: 24
45.144.215.0/24 maxlen: 24
45.144.214.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
85.209.123.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
85.209.121.0/24 maxlen: 24
85.209.120.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
45.138.180.0/22 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f9:ab:89:7d:8b:74:b6:c8:b7:e6:5b:96:3c:4a:c5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 21 08:31:52 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f152c1d4cd60abfe32445a23ecb0bbe9bebf004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:73:3f:34:8a:f2:df:22:73:b3:ad:1a:2f:2f:
c4:3d:41:81:ba:41:6f:55:a8:3b:c6:92:c7:f0:2b:
83:37:34:7e:9d:83:30:4a:c5:60:a9:12:30:e8:e5:
5c:6b:1a:b6:04:38:80:08:ee:63:01:bd:d6:b3:a8:
be:b1:84:01:33:de:37:ce:20:43:0f:ef:bc:ae:74:
92:9a:c3:ed:93:7b:04:1a:a6:aa:c0:d4:0d:58:09:
6a:f9:20:73:0a:15:26:75:44:2f:fc:bd:8a:ed:1c:
9b:a7:c2:e9:be:66:e6:a8:22:03:c2:8a:0a:d0:6f:
a6:1c:52:19:c7:e8:56:c9:72:3d:02:b9:98:a8:aa:
71:e9:47:da:d0:63:38:28:f4:ca:4c:79:d8:9f:74:
ff:7b:97:4a:41:03:a5:3e:f3:e7:d5:93:04:8e:2e:
a3:af:ce:c0:b9:e9:b9:07:c5:25:f0:ea:2f:aa:5d:
e7:97:3b:6b:8f:89:9e:9d:cf:eb:18:0b:08:db:e6:
26:1c:a7:32:57:a3:2d:3b:f8:7d:1b:06:dc:3d:4c:
76:c0:e6:9a:fd:7c:8e:63:ad:58:cd:17:29:3c:bd:
66:93:63:e7:0d:21:e4:ea:2f:ba:25:41:08:b6:5f:
2a:3f:46:fb:f8:81:62:2a:dc:e8:87:f6:74:b4:38:
fc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:15:2C:1D:4C:D6:0A:BF:E3:24:45:A2:3E:CB:0B:BE:9B:EB:F0:04
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/PxUsHUzWCr_jJEWiPssLvpvr8AQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
5.181.87.0/24
45.9.29.0/24
45.13.191.0/24
45.81.112.0/22
45.88.136.0/23
45.88.139.0/24
45.94.168.0/22
45.132.181.0-45.132.183.255
45.138.180.0/22
45.144.212.0/22
45.151.0.0-45.151.2.255
77.83.37.0-77.83.39.255
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/22
193.57.41.0/24
193.57.43.0/24
194.15.52.0/23
194.242.96.0/22
195.62.24.0/24
195.177.92.0/22
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
72:eb:ea:2f:00:d5:a2:dd:37:78:11:4a:42:8f:8d:c8:d7:67:
6e:db:f6:b3:53:fa:0b:0a:9c:70:02:29:50:17:25:b6:63:8b:
e6:24:8d:d4:d7:fb:79:7c:12:61:1a:f0:b9:8a:7b:73:b9:3e:
9c:88:db:5d:ca:7e:1e:ea:12:73:e3:fe:0d:9d:88:6b:25:21:
0f:34:a8:2d:bf:61:93:fa:ee:12:f8:2d:45:1f:14:0f:b7:22:
6b:72:e7:fe:1f:93:45:45:2f:dd:ca:7b:c9:3e:96:87:c1:3f:
c7:c5:97:a9:c2:8f:c9:27:25:3a:9d:a3:2f:7a:61:af:55:db:
07:bf:28:94:79:77:20:cb:9e:6b:4b:34:85:be:ec:75:c4:f0:
fd:71:de:73:3e:4d:20:8e:af:8c:de:8f:7a:8d:7b:e7:12:b3:
48:e8:16:dd:c4:a9:43:ae:b0:48:2a:5c:40:c2:d8:14:05:97:
7e:a5:91:e1:b6:53:5d:a5:ed:ce:08:62:f6:9c:34:5e:03:f1:
43:9e:f1:97:ae:83:2a:c5:10:d1:32:d6:ee:9a:5d:ab:cf:6b:
52:7d:4c:da:05:23:97:7b:6c:49:0b:8c:4c:88:38:3b:0e:41:
b6:07:11:4a:0b:5f:ef:0d:e4:59:3a:86:47:7f:68:73:cc:a3:
e9:0d:3f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:18 2024 by rpki-client on console-ams.rpki-client.org