Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/M9mj3BqVttIhuK5ExsndOOcgdz8.roa
File: M9mj3BqVttIhuK5ExsndOOcgdz8.roa (raw, json)
Hash identifier: j/ClM7pFtGoUacn8JGMZZqXIobj2sndnR7UEJg7fvx8=
Subject key identifier: 33:D9:A3:DC:1A:95:B6:D2:21:B8:AE:44:C6:C9:DD:38:E7:20:77:3F
Certificate issuer: /CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Certificate serial: 0182891DB54E5EFBBC3D7D535CDC4FBEEB7F
Authority key identifier: 17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/M9mj3BqVttIhuK5ExsndOOcgdz8.roa
Signing time: Wed 10 Aug 2022 18:56:41 +0000
ROA not before: Wed 10 Aug 2022 18:56:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60664
IP address blocks: 145.14.130.0/24 maxlen: 24
153.92.124.0/24 maxlen: 24
157.97.78.0/23 maxlen: 23
153.92.64.0/24 maxlen: 24
153.92.66.0/24 maxlen: 24
153.92.65.0/24 maxlen: 24
153.92.68.0/24 maxlen: 24
153.92.67.0/24 maxlen: 24
153.92.70.0/24 maxlen: 24
153.92.69.0/24 maxlen: 24
153.92.71.0/24 maxlen: 24
153.92.162.0/24 maxlen: 24
153.92.161.0/24 maxlen: 24
153.92.164.0/24 maxlen: 24
153.92.163.0/24 maxlen: 24
153.92.165.0/24 maxlen: 24
153.92.166.0/24 maxlen: 24
153.92.160.0/24 maxlen: 24
153.92.167.0/24 maxlen: 24
153.92.169.0/24 maxlen: 24
153.92.168.0/24 maxlen: 24
153.92.170.0/24 maxlen: 24
153.92.172.0/24 maxlen: 24
153.92.171.0/24 maxlen: 24
153.92.174.0/24 maxlen: 24
153.92.173.0/24 maxlen: 24
157.180.192.0/24 maxlen: 24
157.180.193.0/24 maxlen: 24
157.180.195.0/24 maxlen: 24
157.180.194.0/24 maxlen: 24
157.180.197.0/24 maxlen: 24
157.180.196.0/24 maxlen: 24
157.180.196.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:89:1d:b5:4e:5e:fb:bc:3d:7d:53:5c:dc:4f:be:eb:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1778cfc09a363a73cc8dda362a2c9e8223d7dad6
Validity
Not Before: Aug 10 18:56:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33d9a3dc1a95b6d221b8ae44c6c9dd38e720773f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b6:15:5a:3e:8f:cf:95:45:9e:09:35:bd:2d:
70:e1:e2:1e:19:df:de:9f:f7:63:5a:73:d4:28:60:
6a:c4:61:85:61:05:18:e8:e3:d3:19:82:fe:50:af:
ee:a0:49:a5:28:b0:e6:fc:f7:84:bc:28:eb:36:58:
10:67:7a:ed:b1:85:13:f3:6f:2b:35:c6:ef:f1:03:
ed:01:88:e3:92:ca:e2:8c:a7:e8:d9:5b:d2:59:84:
2f:4c:9a:c7:69:97:e5:25:c4:29:3c:8a:16:e8:25:
4e:ff:49:ee:33:da:e2:78:1b:7a:b4:b7:6b:43:e6:
8e:6b:a4:c5:86:05:2d:31:da:a0:29:2f:d0:8b:12:
3c:fa:c3:b8:8b:27:88:e9:84:c0:8c:1e:76:d3:f5:
84:71:71:8d:e7:4b:08:27:89:ed:e8:db:7f:fd:1a:
61:8d:b2:e4:11:05:0c:78:67:9c:67:e9:e1:0d:ff:
4c:e4:7d:12:3f:a9:69:51:22:95:10:29:ca:2c:4c:
ab:bd:7a:73:cb:77:be:a4:cd:aa:9b:61:6f:7d:70:
87:bd:fe:2d:33:b4:01:5e:b9:8d:bc:84:74:cc:ea:
2e:56:f6:d2:b5:f2:f6:dc:de:21:48:d2:c8:04:e6:
9e:da:d5:46:b5:db:7e:a2:7e:6a:aa:93:00:35:91:
cb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:D9:A3:DC:1A:95:B6:D2:21:B8:AE:44:C6:C9:DD:38:E7:20:77:3F
X509v3 Authority Key Identifier:
keyid:17:78:CF:C0:9A:36:3A:73:CC:8D:DA:36:2A:2C:9E:82:23:D7:DA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3jPwJo2OnPMjdo2KiyegiPX2tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/M9mj3BqVttIhuK5ExsndOOcgdz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/09012f-b4f6-4df7-b562-010cf2dd40af/1/F3jPwJo2OnPMjdo2KiyegiPX2tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.14.130.0/24
153.92.64.0/21
153.92.124.0/24
153.92.160.0-153.92.174.255
157.97.78.0/23
157.180.192.0-157.180.197.255
Signature Algorithm: sha256WithRSAEncryption
86:c2:cf:fc:df:93:5e:da:1b:01:5d:86:2d:0b:ba:ed:15:e2:
a6:69:42:6a:46:8a:d9:84:92:bc:8d:4b:34:db:4d:0e:6e:93:
59:67:22:09:60:59:f5:9a:92:ac:21:f5:db:e8:e2:d4:c0:0c:
0f:3b:94:da:e8:31:4e:29:11:f4:5b:95:78:cf:82:a2:5b:5b:
a8:2d:dd:d4:a6:8f:14:7d:05:e6:b2:18:48:f7:0e:4f:5e:40:
42:c4:e9:8a:a9:c1:7c:20:dd:da:6f:b0:58:b6:12:da:a8:06:
68:93:fc:15:75:31:f4:d7:ef:fd:de:36:06:7a:b7:39:5b:a7:
05:54:57:b3:b6:40:a7:4e:91:57:61:45:98:2c:26:12:85:56:
49:a5:26:32:f8:29:a4:91:31:95:46:e7:be:7a:2e:fb:a5:c9:
47:17:4b:7c:da:39:82:25:4b:82:e3:2f:cc:37:cd:f0:90:c0:
fd:01:88:ac:c4:7d:31:3b:1e:7b:eb:a1:c0:92:a8:e5:9d:1e:
2d:47:e6:ec:a0:6f:a6:86:db:63:5a:1b:b0:82:ec:58:05:99:
67:ee:3c:d7:38:7a:de:91:d8:69:93:e2:36:2a:7a:f4:19:bd:
63:38:0e:a1:9f:a1:63:c9:48:92:29:9d:29:a5:70:39:55:a7:
50:4d:59:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:34 2023 by rpki-client on console-fra.rpki-client.org