Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/TRFpzKY2UXX3bmJffUUr9zgXLRA.roa
File: TRFpzKY2UXX3bmJffUUr9zgXLRA.roa (raw, json)
Hash identifier: UrY2ZfXV+T6xVW5eSnJgK4Gw98Ng6eYEQKhHalvVPtI=
Subject key identifier: 4D:11:69:CC:A6:36:51:75:F7:6E:62:5F:7D:45:2B:F7:38:17:2D:10
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 075870DA
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/TRFpzKY2UXX3bmJffUUr9zgXLRA.roa
Signing time: Sat 29 Jan 2022 20:47:42 +0000
ROA not before: Sat 29 Jan 2022 20:47:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 77.83.39.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
45.13.188.0/24 maxlen: 24
45.151.2.0/24 maxlen: 24
45.13.189.0/24 maxlen: 24
45.144.214.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123236570 (0x75870da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 29 20:47:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4d1169cca6365175f76e625f7d452bf738172d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b7:a9:1b:a4:0e:b5:3a:1a:fa:8c:d9:a1:75:
05:f8:52:53:44:a1:23:44:89:cc:2f:a9:7f:5f:98:
ab:e2:cd:6b:82:b8:ac:80:d0:07:17:85:77:e3:4b:
2d:08:54:75:1d:0b:a5:fe:d0:37:32:ce:60:39:6b:
ea:c0:3c:48:41:4d:f5:1f:e2:f7:24:2b:7c:24:69:
aa:35:13:a2:44:9c:11:38:48:8f:f2:2b:27:76:66:
f5:d6:9f:c8:52:ec:28:d9:83:95:1f:91:80:46:1f:
23:0e:ba:2f:b6:67:9a:d0:02:86:8a:d4:8b:e2:06:
6a:52:93:46:3e:a9:a7:5e:ec:dd:72:f6:7e:7e:19:
0a:0c:e2:db:0c:c8:ad:93:5c:d6:a5:18:83:fe:aa:
6d:af:51:77:08:17:4e:9e:86:ed:bf:63:ea:08:4e:
10:77:17:32:60:29:6a:56:4f:01:dc:d2:07:72:22:
eb:85:0c:26:64:35:f3:3e:8a:29:a2:e0:c4:d2:c3:
c8:9b:97:02:02:be:3c:06:6b:50:6d:ad:51:0b:a4:
16:38:1e:07:0d:91:df:c7:87:39:d6:50:a0:bf:97:
3f:23:db:1b:2e:c8:fb:cb:8f:51:67:f7:3c:c8:9f:
c5:7e:bd:dd:dc:0e:64:79:73:bb:5c:12:55:25:de:
0b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:11:69:CC:A6:36:51:75:F7:6E:62:5F:7D:45:2B:F7:38:17:2D:10
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/TRFpzKY2UXX3bmJffUUr9zgXLRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.188.0/23
45.88.136.0/24
45.132.181.0/24
45.144.214.0/24
45.151.2.0/24
77.83.38.0/23
85.209.122.0/24
193.30.241.0/24
Signature Algorithm: sha256WithRSAEncryption
78:96:38:bd:bc:ff:45:c5:ee:fb:0f:98:2c:2e:b5:a7:d9:7a:
1b:5d:d3:df:ac:88:a3:c5:48:5b:55:25:bf:27:2d:93:ae:92:
30:99:85:e9:00:76:1e:1f:74:f0:c7:aa:7a:84:fd:bf:24:f4:
24:19:44:20:c4:2c:47:89:cb:5c:3b:83:a3:63:37:50:62:19:
bd:28:73:c0:18:fb:9c:2b:80:e4:8a:df:c4:2e:9f:e3:fb:42:
d3:43:2a:d9:60:ca:50:37:40:86:35:04:de:21:37:a7:86:76:
c5:93:63:04:3b:69:7b:24:07:ef:0b:b0:d6:6c:d5:9d:ee:4e:
9c:a4:6c:51:e9:1e:15:00:b0:1a:41:43:55:a3:31:b6:ae:43:
3a:2c:83:59:aa:38:bb:b6:0b:c3:88:db:06:4e:51:93:10:f7:
9b:8a:30:d8:5f:55:4d:a9:80:5d:da:42:67:1c:82:aa:62:af:
85:bc:9d:4a:d7:57:a3:e9:19:4a:37:4a:29:0d:e7:8a:82:f7:
51:75:ca:9c:76:5e:5a:df:e7:e8:9f:5e:ec:c4:de:8d:cb:b9:
f9:a6:f8:2b:65:69:c4:3e:ca:dc:96:9c:43:ff:28:02:5c:4d:
db:22:15:df:0d:7d:01:5e:1a:cc:73:32:65:ff:2a:d4:ce:ce:
c7:68:95:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:18 2024 by rpki-client on console-ams.rpki-client.org