Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/YWsywX_o6r67XP4s8OTGWWQE21c.roa
File: YWsywX_o6r67XP4s8OTGWWQE21c.roa (raw, json)
Hash identifier: DP5t7K5cBaphT1qa7y4n9aW3+kfph7MN+WM6i+Tomws=
Subject key identifier: 61:6B:32:C1:7F:E8:EA:BE:BB:5C:FE:2C:F0:E4:C6:59:64:04:DB:57
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 07AFEFFC
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/YWsywX_o6r67XP4s8OTGWWQE21c.roa
Signing time: Sun 27 Feb 2022 14:12:49 +0000
ROA not before: Sun 27 Feb 2022 14:12:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 195.211.190.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.13.191.0/24 maxlen: 24
194.15.52.0/23 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
85.209.123.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
85.209.121.0/24 maxlen: 24
85.209.120.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128970748 (0x7afeffc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Feb 27 14:12:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=616b32c17fe8eabebb5cfe2cf0e4c6596404db57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b2:86:e1:bc:a5:f1:17:37:aa:fc:10:38:7b:
42:07:fa:c2:c4:a2:86:10:3e:25:f7:ea:01:fc:be:
c0:42:0f:b1:31:da:a7:26:04:bc:34:19:d7:83:46:
c2:b4:34:a7:46:75:4e:2e:75:55:16:68:67:3c:6d:
a9:26:16:43:e3:b7:38:db:0c:75:c2:4b:18:20:9d:
b5:8c:3b:0c:22:19:64:38:74:4f:ef:9d:73:14:9e:
ac:f4:b3:fa:ad:ec:b6:98:94:d6:9c:27:76:5f:2d:
bb:f9:96:79:60:4b:fc:aa:32:57:4b:b4:8d:9c:36:
ec:77:ec:3f:54:f6:04:b0:44:33:9c:7e:56:a9:7c:
4f:25:d0:60:7d:67:11:8b:a6:e0:c0:41:56:2b:0b:
3a:f2:ac:e9:39:99:5c:1a:c8:33:a5:93:31:23:8b:
ce:e8:cf:2f:f1:1e:35:7d:ff:a7:91:5f:8e:b4:c8:
ba:9d:0b:1f:3a:6c:a2:b0:96:b4:52:b0:3e:be:27:
80:23:bc:cc:9c:fa:75:60:2a:07:15:bf:09:27:d2:
ab:22:8b:29:9d:48:5e:b1:fd:93:1f:25:d6:06:f3:
99:f5:f5:dc:df:aa:cb:e4:52:e6:12:08:9b:f2:58:
64:49:52:99:19:0a:6b:43:6d:93:21:af:69:2f:e8:
a7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:6B:32:C1:7F:E8:EA:BE:BB:5C:FE:2C:F0:E4:C6:59:64:04:DB:57
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/YWsywX_o6r67XP4s8OTGWWQE21c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.29.0/24
45.13.191.0/24
45.88.137.0-45.88.139.255
45.144.212.0/23
77.83.37.0/24
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/24
193.30.240.0/22
193.57.41.0/24
193.57.43.0/24
194.15.52.0/23
194.242.96.0/22
195.62.24.0/24
195.177.93.0/24
195.177.95.0/24
195.211.190.0/24
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
b4:22:8f:4e:b6:6a:1c:b9:9f:02:f8:e9:0d:e1:0d:83:34:58:
8a:26:59:5f:5d:24:a8:f9:5c:e6:9f:ec:4d:0f:e6:1e:5c:d6:
3b:f7:1b:1b:4e:77:a4:30:9c:b9:7e:f9:57:08:63:3e:b6:fe:
e4:61:2a:b3:f6:5c:79:72:da:5a:f0:0b:cb:0a:63:3c:94:cf:
56:c0:92:40:51:41:7f:af:7b:20:34:27:c1:15:a1:23:e3:b5:
3c:77:89:82:0c:8e:eb:32:d0:e6:05:20:25:41:fa:e8:16:f4:
5f:2e:97:75:d8:3f:ef:b6:9d:61:01:d2:e9:b4:c2:b4:9f:6e:
0f:6a:93:8a:66:5a:9b:b5:98:3d:48:8a:0b:61:01:b2:f2:58:
ed:39:6a:aa:55:90:71:61:15:24:a8:7e:2d:65:8c:0f:70:cd:
17:e5:9e:8a:79:4b:b2:c2:3d:12:9a:53:86:e8:73:99:a8:8b:
e6:5d:b1:69:3e:3f:54:a2:d9:65:95:6a:9f:6f:49:ef:a9:ac:
ea:55:f9:88:c7:d8:6d:e4:8b:15:9c:87:56:83:5b:8f:00:3e:
98:da:7b:41:0c:8c:e9:ae:2c:d5:a2:cf:65:5f:9c:01:3d:69:
85:46:7f:ec:e0:cd:69:f3:d1:f4:b5:88:02:f4:5e:f6:d4:0a:
ee:a8:0d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:31 2024 by rpki-client on console-fra.rpki-client.org