Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/WAtT8YNgOKJX2x62UZz5IxC_ELs.roa
File: WAtT8YNgOKJX2x62UZz5IxC_ELs.roa (raw, json)
Hash identifier: NC9x7Gfrw/M4ovDsuyyC8AH8sbLnYsry8IOy2EH2f20=
Subject key identifier: 58:0B:53:F1:83:60:38:A2:57:DB:1E:B6:51:9C:F9:23:10:BF:10:BB
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0185362FA882F69C3CCC7272B1A6E4CC4176
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/WAtT8YNgOKJX2x62UZz5IxC_ELs.roa
Signing time: Wed 21 Dec 2022 19:36:11 +0000
ROA not before: Wed 21 Dec 2022 19:36:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 45.9.30.0/24 maxlen: 24
195.211.190.0/24 maxlen: 24
195.211.189.0/24 maxlen: 24
195.211.191.0/24 maxlen: 24
195.211.188.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:36:2f:a8:82:f6:9c:3c:cc:72:72:b1:a6:e4:cc:41:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Dec 21 19:36:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=580b53f1836038a257db1eb6519cf92310bf10bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:46:df:c0:a5:cd:94:bd:f2:05:62:bd:c7:2e:
97:cf:c1:a4:c1:ad:0b:66:80:44:7a:26:87:fc:d5:
a5:cd:df:ba:89:cd:af:9a:c5:d3:92:24:55:c8:20:
32:5a:57:53:d5:cb:cd:65:86:9a:90:7c:99:b5:b6:
40:65:ae:a1:97:e5:0c:20:b0:5e:01:7f:d9:88:37:
08:bc:83:4f:96:1e:8f:f5:9b:b3:20:63:f9:9e:f8:
29:c3:fd:8e:b7:f4:c6:b8:12:75:37:c5:c1:0b:78:
31:8c:16:e5:18:f2:0f:aa:b2:7e:49:79:b7:5f:f1:
60:5a:53:a5:e1:ea:bc:2d:e1:02:5a:87:9c:9b:4c:
79:3c:6a:ba:c1:2e:af:88:49:5f:9a:bc:0a:21:1e:
e9:1f:c6:73:04:05:83:d2:03:5e:8b:a6:6e:9a:2e:
24:4f:17:04:47:8e:d2:31:89:8e:c0:a7:ce:17:e5:
84:0d:41:4d:12:bc:80:31:dc:eb:3f:2b:21:bb:f1:
c3:05:b9:c3:04:41:cf:f6:3d:92:82:59:e6:ea:c9:
35:52:27:33:90:20:95:c6:f5:ef:fa:cc:85:8b:ae:
83:81:18:79:50:be:16:dd:60:44:a6:38:3c:db:6b:
5b:56:24:2f:0c:64:7d:0d:42:38:54:ad:de:c4:1f:
23:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:0B:53:F1:83:60:38:A2:57:DB:1E:B6:51:9C:F9:23:10:BF:10:BB
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/WAtT8YNgOKJX2x62UZz5IxC_ELs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.30.0/24
45.88.137.0/24
45.132.180.0/24
195.211.188.0/22
Signature Algorithm: sha256WithRSAEncryption
31:9a:5c:5d:89:7a:9b:60:f0:35:4c:b1:d5:57:00:03:cc:58:
37:1c:12:5f:44:38:4c:e8:07:c4:b7:65:69:a7:33:97:df:eb:
d5:76:98:cb:c9:48:3a:91:e6:ef:0a:2f:dd:62:3b:ce:19:52:
8e:21:55:90:22:c1:be:73:cf:8c:71:76:6d:a1:26:e7:db:bf:
9a:8a:28:82:59:a3:0a:88:f6:6a:cf:4a:ff:9d:b8:e1:55:06:
ab:4f:d5:fb:b0:4c:ba:8a:b9:72:3c:bf:72:58:82:e8:b1:a8:
ea:76:98:26:46:6e:8a:59:95:24:3b:f0:44:46:07:98:b9:bf:
3e:20:cd:0e:3b:fa:f0:bd:19:13:aa:6b:93:eb:b1:74:0d:ed:
7e:2f:1c:82:ed:26:26:97:c9:ac:3d:61:df:85:56:35:10:d8:
55:1c:1e:b2:59:18:96:db:e8:5c:5c:21:04:ad:ad:2d:42:e2:
e8:11:d3:8d:e9:bb:65:5a:1d:21:5f:36:34:2b:d5:1e:e7:18:
b0:bb:05:ab:7e:d3:99:b3:f2:38:5f:eb:a6:f2:18:06:d8:93:
70:67:f0:c3:81:46:be:68:19:4e:1f:71:3c:56:5c:81:b1:d3:
8e:a0:4b:60:17:8d:04:1f:ae:0d:c1:e0:da:a9:c9:51:21:b2:
ec:e0:e9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org