Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/REdwK6-s_A2NTr3rW_aidpdyV1o.roa
File: REdwK6-s_A2NTr3rW_aidpdyV1o.roa (raw, json)
Hash identifier: skcevDoRBqYR6Xi1NnFwsZfW9dAOVazvQaf50w6MFeg=
Subject key identifier: 44:47:70:2B:AF:AC:FC:0D:8D:4E:BD:EB:5B:F6:A2:76:97:72:57:5A
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 07954C42
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/REdwK6-s_A2NTr3rW_aidpdyV1o.roa
Signing time: Fri 18 Feb 2022 11:39:41 +0000
ROA not before: Fri 18 Feb 2022 11:39:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 195.211.190.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.13.191.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
85.209.123.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
85.209.121.0/24 maxlen: 24
85.209.120.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127224898 (0x7954c42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Feb 18 11:39:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4447702bafacfc0d8d4ebdeb5bf6a2769772575a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9b:d2:5b:bb:56:53:c3:59:8f:df:4e:bf:6e:
db:6b:b9:b0:6d:c8:60:49:64:88:78:27:21:b8:3b:
d9:f6:0e:07:f6:6e:12:f7:e8:54:e7:b1:d6:b2:e4:
c4:22:12:78:91:f3:d3:a7:1f:dd:2a:0e:9f:74:f9:
e1:5d:41:80:83:88:24:35:c7:58:64:67:5e:85:0f:
b3:e1:d7:2f:b3:54:70:92:f5:7b:4b:a3:a9:fe:39:
11:8e:cf:19:ae:cd:36:0c:22:3f:5b:95:02:bf:09:
55:88:66:97:99:26:5d:f7:29:70:a0:db:30:0b:f1:
ba:d4:01:36:4c:af:55:1a:62:0a:24:ac:37:06:f6:
ef:53:82:6b:66:a6:18:54:17:d1:0a:44:98:8a:3e:
50:0a:c5:a0:ec:d9:57:be:32:ca:45:fa:9f:84:b1:
22:dc:7d:ba:8c:07:e7:5b:78:ae:9f:44:ad:ce:ff:
ff:5b:18:35:1f:e0:4c:4c:5a:89:26:bd:25:7c:3d:
16:e3:2e:c7:6d:67:c8:7f:23:a0:02:40:a1:1e:e0:
96:77:76:96:13:12:d0:41:fb:4a:6c:da:f2:36:a9:
99:08:19:8d:f8:8b:10:30:6d:e0:83:a9:31:c6:93:
7b:a2:36:d7:bc:3e:68:53:86:e4:72:ba:ad:5d:d2:
be:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:47:70:2B:AF:AC:FC:0D:8D:4E:BD:EB:5B:F6:A2:76:97:72:57:5A
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/REdwK6-s_A2NTr3rW_aidpdyV1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.29.0/24
45.13.191.0/24
45.88.137.0-45.88.139.255
45.144.212.0/23
77.83.37.0/24
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/24
193.30.240.0/22
193.57.41.0/24
193.57.43.0/24
194.242.96.0/22
195.62.24.0/24
195.177.93.0/24
195.177.95.0/24
195.211.190.0/24
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
22:25:49:5f:af:be:4c:a5:c5:71:31:45:c4:e5:17:52:1b:25:
eb:28:c6:20:28:88:c9:a3:64:43:5f:9e:75:fe:ce:5c:c0:08:
ae:77:cc:11:c5:77:43:e4:59:da:3e:25:35:3d:3a:46:16:3a:
42:c5:42:a1:96:43:6c:e9:20:a4:ab:fd:f9:ee:de:51:b2:e7:
49:d8:9f:90:0e:17:6a:72:30:fd:57:71:b7:9a:13:32:b0:8f:
f3:3f:b8:50:69:00:62:d1:52:d2:70:d9:c9:a6:d7:a8:ff:32:
c7:b5:55:8b:eb:4c:f0:81:76:27:cb:24:0d:f9:22:fa:4c:0b:
75:40:ee:b6:0a:05:28:09:4d:07:9e:a4:0f:77:e3:73:3d:41:
7f:33:71:b4:ad:8d:7b:e4:42:a7:94:11:0e:e2:ac:a9:f2:e9:
98:b3:b3:d6:ca:97:63:8b:1d:42:0e:2e:83:33:6e:86:91:b2:
56:2b:81:05:5c:76:1c:1b:fc:c2:ff:b3:5e:a9:a0:b5:56:97:
6e:dc:6a:ab:20:23:5c:f9:08:d3:c5:72:23:d5:90:30:cc:f3:
83:89:5c:d9:fc:02:d4:1d:89:bc:db:3a:2c:8d:35:92:69:e5:
40:71:5f:74:7e:b0:fb:f4:47:b2:ae:a4:65:21:17:36:42:78:
4f:78:9a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org