Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/1-dJLVfcixkJOvquIAAmSQ4RKvwg.roa
File: 1-dJLVfcixkJOvquIAAmSQ4RKvwg.roa (raw, json)
Hash identifier: 5z3x8PHv/eJ4oGDzxYV/n9iW5iPz5pShsnUWWztuHjE=
Subject key identifier: F9:D2:4B:55:F7:22:C6:42:4E:BE:AB:88:00:09:92:43:84:4A:BF:08
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0184F6627E9F2684EB42C48EFEBA6B9481DF
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/1-dJLVfcixkJOvquIAAmSQ4RKvwg.roa
Signing time: Fri 09 Dec 2022 10:16:00 +0000
ROA not before: Fri 09 Dec 2022 10:16:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2.56.108.0/22 maxlen: 22
45.88.139.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.13.188.0/24 maxlen: 24
45.94.168.0/22 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
77.83.38.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:f6:62:7e:9f:26:84:eb:42:c4:8e:fe:ba:6b:94:81:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Dec 9 10:16:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f9d24b55f722c6424ebeab8800099243844abf08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0c:dc:c9:a6:7a:1f:e3:e7:f4:af:a2:5a:7b:
3e:2f:2f:42:f0:5b:79:a1:86:18:7c:13:07:bb:d8:
4b:b1:c3:32:cf:36:46:eb:c1:f4:fd:25:f6:20:ce:
aa:03:6f:c2:ae:07:1a:41:9f:9b:aa:b0:0c:d1:87:
6e:a0:b7:5c:86:40:4c:ab:61:40:f2:51:85:24:6a:
a8:53:f2:73:66:2e:5d:eb:bd:ce:26:4c:af:42:c7:
57:96:02:04:82:d8:84:e9:5b:36:51:10:af:cd:7f:
b8:fe:4d:8e:38:f9:7c:95:66:62:23:d9:a2:1c:34:
20:17:ca:bd:b9:b5:d4:41:70:8b:17:57:76:45:ae:
0d:c7:5a:7e:d2:88:94:ac:61:1e:5b:6b:c2:44:8b:
94:56:b0:8e:01:fa:43:3c:88:69:3b:60:59:55:16:
35:7e:8e:b5:4b:2e:4d:d6:f9:e3:0b:6e:fd:ca:8f:
7d:d1:f6:33:f1:f2:d2:97:3c:da:b3:a1:19:1d:a6:
2a:15:63:e1:01:14:d6:10:38:91:c9:f6:ca:41:35:
85:aa:eb:94:68:20:ad:86:14:88:7c:24:ec:47:1d:
e3:24:2b:fc:68:86:02:10:02:8e:a6:d5:17:30:ea:
0e:d3:d8:6f:e9:b9:91:ea:95:ff:e0:fc:37:3d:92:
11:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D2:4B:55:F7:22:C6:42:4E:BE:AB:88:00:09:92:43:84:4A:BF:08
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/1-dJLVfcixkJOvquIAAmSQ4RKvwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
5.181.87.0/24
45.9.29.0/24
45.13.188.0/24
45.81.112.0/22
45.88.136.0/24
45.88.139.0/24
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/23
77.83.38.0/24
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/22
193.57.43.0/24
194.242.96.0/22
195.62.24.0/24
195.177.92.0/22
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
5c:a1:e2:bd:ba:8b:21:a7:8a:78:1d:12:4f:3e:6a:85:9e:db:
cb:a8:cc:a6:ea:d2:40:49:68:67:c9:37:80:9c:47:35:9c:e2:
b7:6d:cc:4d:53:53:8d:ea:0e:99:92:30:0d:65:fe:fc:ad:90:
ce:57:df:bf:0b:06:55:ca:02:93:98:93:1d:c1:95:9d:5d:bd:
34:5f:a6:21:e2:a1:75:93:7a:28:88:b2:11:38:bf:c9:18:78:
bc:4f:7c:2b:ab:3c:e7:44:e6:6f:88:d0:14:63:b7:a2:71:ae:
be:bf:9d:e7:6b:d8:44:62:11:16:46:36:c5:24:3b:6e:1d:37:
32:09:8e:ac:d6:05:95:f7:56:9b:12:ff:73:74:f8:b3:88:45:
56:08:44:d5:ef:20:c0:0e:a2:d3:cd:7c:00:73:46:7c:35:dc:
54:9e:80:3c:14:b2:d0:b8:25:d8:4c:89:bf:27:f8:51:75:cc:
03:a9:64:91:ad:f6:91:bc:b7:84:3c:a8:b1:66:4c:6e:88:f3:
47:f1:be:e4:b1:ca:51:45:52:c0:df:42:95:e6:b5:94:73:9a:
7c:ac:cb:fb:34:29:d2:14:7b:36:7f:dc:e2:f6:a2:7f:b8:c7:
e0:82:eb:79:6b:67:47:f8:23:8f:19:10:41:d2:40:7d:91:ee:
aa:bb:15:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org