Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/2Phdt27jimJaB_LA8pSRH2G2TWM.roa
File: 2Phdt27jimJaB_LA8pSRH2G2TWM.roa (raw, json)
Hash identifier: +fPHm2JfsiRr8hzN24rZVGOPnVHyyTQNr7zFtNti4pM=
Subject key identifier: D8:F8:5D:B7:6E:E3:8A:62:5A:07:F2:C0:F2:94:91:1F:61:B6:4D:63
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0183C1D2A4BC6DC7AC83EB1E8BC4424FA314
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/2Phdt27jimJaB_LA8pSRH2G2TWM.roa
Signing time: Mon 10 Oct 2022 12:15:50 +0000
ROA not before: Mon 10 Oct 2022 12:15:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 45.9.30.0/24 maxlen: 24
45.13.189.0/24 maxlen: 24
45.13.188.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:c1:d2:a4:bc:6d:c7:ac:83:eb:1e:8b:c4:42:4f:a3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 10 12:15:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d8f85db76ee38a625a07f2c0f294911f61b64d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:f6:12:a0:9c:3c:28:c4:8e:b1:21:a6:18:
bc:03:42:f6:17:20:03:5a:0b:66:3b:21:42:83:8e:
b0:ed:27:47:87:88:9b:0a:af:4e:f7:de:a8:58:30:
69:d0:7d:7c:40:07:55:74:8b:aa:89:b3:46:ad:9b:
cb:ad:0d:55:54:9c:b7:3c:83:21:56:1e:e6:f8:9b:
3a:b6:97:e7:56:77:d1:96:91:5b:c7:1c:36:4f:39:
e3:da:73:4a:2b:19:d3:2c:9c:7f:36:c0:2a:42:75:
b8:c7:67:1f:20:fa:72:9f:e1:ea:bc:15:9e:6e:e7:
ef:a4:6f:b4:c6:d6:da:65:b1:a6:3f:29:d0:76:a3:
3d:9f:8a:8f:29:7b:27:ba:47:25:07:64:91:a7:6f:
88:e4:47:3f:31:43:16:aa:da:00:6c:57:cd:af:e5:
c6:84:1a:c8:b7:ab:df:ac:96:21:db:97:06:5d:42:
1d:25:59:f9:9d:9b:f3:e6:e7:73:49:1b:44:19:25:
7a:99:cb:b8:19:9b:31:27:c8:c8:7f:f7:64:84:66:
f6:a3:a2:a4:61:b5:bd:d4:d5:c3:cb:17:ac:81:66:
36:72:01:17:bd:3f:13:f9:5c:0e:40:95:7a:35:c2:
a5:1a:79:7b:de:9a:37:9c:94:06:ea:25:76:0d:de:
7b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F8:5D:B7:6E:E3:8A:62:5A:07:F2:C0:F2:94:91:1F:61:B6:4D:63
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/2Phdt27jimJaB_LA8pSRH2G2TWM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.30.0/24
45.13.188.0/23
45.132.180.0/24
Signature Algorithm: sha256WithRSAEncryption
86:43:11:91:22:5c:12:e1:fc:f8:89:4e:d1:30:34:fb:25:c0:
7f:2f:54:de:4e:c9:a8:39:b2:29:de:2a:b3:64:98:0a:29:f7:
81:ac:24:58:c7:fb:30:d6:a0:91:a4:60:35:8e:f1:a6:a9:95:
60:96:08:42:20:b5:c7:83:d0:c5:68:92:8c:c2:a7:1f:d3:7f:
9f:04:5d:7e:45:8d:9d:0c:52:d9:0a:4e:3f:ca:58:23:db:78:
c3:76:e7:5a:a0:3e:d1:3d:6c:28:e9:a0:61:38:b9:cf:9f:72:
0b:66:7f:63:1a:d4:e0:91:14:1e:6a:4d:dd:01:8e:6b:71:a0:
8c:53:94:ca:9b:ca:ab:1a:4d:61:fa:eb:17:2f:95:aa:a9:75:
fe:8e:b0:b0:b3:0a:1b:9e:a1:a1:84:c9:14:64:63:d2:76:e7:
bc:66:d2:c8:b3:2e:07:22:ec:ae:b6:03:d7:6a:bd:f4:03:f2:
74:ab:08:21:9d:ea:02:e7:d0:d3:98:2c:e2:e3:4d:e3:a2:0c:
ce:05:de:1f:47:a4:7f:04:c7:ad:5b:8b:f3:ea:2d:5f:b6:c3:
7d:40:91:a7:65:8e:d2:2f:80:7f:db:e9:7d:2d:5f:c7:9d:6a:
ed:fb:6f:cb:66:62:f7:8c:26:5c:8d:ce:51:1a:1d:4e:35:89:
4a:c6:74:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:32 2023 by rpki-client on console-fra.rpki-client.org