Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/1-i5hAi8_-VmcQwYRBnjPQ_EGSHw.roa
File: 1-i5hAi8_-VmcQwYRBnjPQ_EGSHw.roa (raw, json)
Hash identifier: uWqKV+FMYiiCcQF+7TYFP9+DgNZukb+N3856onVwKgs=
Subject key identifier: FA:2E:61:02:2F:3F:F9:59:9C:43:06:11:06:78:CF:43:F1:06:48:7C
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018438B755A6D2D8CEBB8BFCD3685ED5ABC3
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/1-i5hAi8_-VmcQwYRBnjPQ_EGSHw.roa
Signing time: Wed 02 Nov 2022 14:20:49 +0000
ROA not before: Wed 02 Nov 2022 14:20:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 45.13.190.0/24 maxlen: 24
5.181.84.0/24 maxlen: 24
5.181.85.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.88.136.0/23 maxlen: 24
193.30.241.0/24 maxlen: 24
194.242.97.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:38:b7:55:a6:d2:d8:ce:bb:8b:fc:d3:68:5e:d5:ab:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 2 14:20:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa2e61022f3ff9599c4306110678cf43f106487c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:26:15:bd:f9:6b:13:57:77:89:9f:e1:74:d8:
2d:09:3c:af:77:1a:60:19:6f:c3:d5:9a:a9:47:95:
e6:ac:4c:74:36:64:c9:f1:48:dc:c8:98:80:7d:3a:
42:0b:34:54:13:c3:ad:9e:89:88:6b:e4:1b:c7:b4:
16:a4:63:e7:21:3c:f3:fc:33:6f:e3:78:6e:94:1a:
42:d7:30:7b:b5:49:46:e8:42:8f:34:5f:ff:8b:75:
f3:2a:7c:19:64:88:c5:4f:cd:a9:21:a9:75:17:07:
08:c2:5a:31:6e:01:02:2f:a4:7a:7a:a7:51:a2:7e:
b1:82:f2:88:40:38:96:25:e3:a8:bc:ed:5e:9f:26:
c9:88:ef:6d:94:68:66:7e:af:e1:96:f3:19:80:70:
3c:8a:72:38:33:85:b3:2c:78:04:80:a4:12:be:64:
b2:2b:69:5c:fa:d7:e0:a2:ad:25:5f:14:32:d1:46:
c7:da:16:e8:ad:a9:28:e8:fe:66:d7:af:60:d6:b6:
27:84:66:be:cb:df:a6:29:82:1b:6c:3d:9a:22:fa:
3e:19:50:f1:18:47:ed:87:86:72:54:ba:2b:36:19:
35:94:1c:f4:5d:67:97:58:d6:f4:7d:4f:47:b7:39:
4d:aa:3e:d2:a9:62:c7:5e:b8:d4:c7:ef:32:94:87:
32:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2E:61:02:2F:3F:F9:59:9C:43:06:11:06:78:CF:43:F1:06:48:7C
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/1-i5hAi8_-VmcQwYRBnjPQ_EGSHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/23
5.181.87.0/24
45.13.190.0/24
45.81.112.0/22
45.88.136.0/23
45.132.181.0-45.132.183.255
45.144.212.0/24
45.151.3.0/24
193.30.241.0/24
194.242.97.0/24
195.177.92.0/24
195.177.94.0/24
Signature Algorithm: sha256WithRSAEncryption
41:96:e0:08:91:12:58:71:01:fa:51:f6:a4:63:ba:26:d6:71:
bc:6a:9b:3a:d8:a6:77:6f:38:d2:96:e6:08:ce:fb:6c:e4:40:
c1:b6:c9:da:9a:d2:ea:c2:17:6e:2b:e2:ef:0a:6a:76:1a:d8:
3a:4c:95:0c:67:d3:6b:61:fb:b9:43:f2:43:3e:96:72:4d:7b:
e6:15:25:72:83:5b:4d:05:b4:0a:51:01:b3:42:1c:23:fc:7d:
80:01:3c:a9:e0:77:8d:c4:cd:ce:58:f2:2b:12:4c:72:64:95:
31:7d:5d:b0:a8:67:ff:bb:4b:84:e6:de:43:10:51:01:21:30:
e8:cf:cd:90:70:12:bc:82:3d:ff:0f:88:f3:32:83:10:49:01:
3d:f1:7a:d3:01:b5:df:7a:89:46:0b:8c:a1:43:d9:5a:74:bb:
56:a8:95:0d:a0:27:4f:3b:d5:71:e0:24:28:2a:19:1f:9a:b9:
7c:35:7c:a4:24:49:17:19:3f:a0:32:c4:cd:a7:83:be:3c:14:
fa:04:d1:6d:7c:40:af:93:f4:a0:55:ec:09:14:2a:10:c6:41:
9f:16:a9:9c:dc:7d:93:13:7c:a3:23:35:6b:6f:ef:4b:cf:c8:
f5:ef:b0:1e:77:b8:a1:84:13:fe:6d:32:da:9d:85:6a:fa:ba:
29:fa:dc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:32 2023 by rpki-client on console-fra.rpki-client.org