Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/3VV7-3IxBYzrejqjT-XRaNRAZyE.roa
File: 3VV7-3IxBYzrejqjT-XRaNRAZyE.roa (raw, json)
Hash identifier: jneTVJmIvtINdQqUDQDvbwOQNT7GCT0xWUA/2GrK5bA=
Subject key identifier: DD:55:7B:FB:72:31:05:8C:EB:7A:3A:A3:4F:E5:D1:68:D4:40:67:21
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01837FFF8499DA17B9DD10D16CAD874EB26D
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/3VV7-3IxBYzrejqjT-XRaNRAZyE.roa
Signing time: Tue 27 Sep 2022 17:29:55 +0000
ROA not before: Tue 27 Sep 2022 17:29:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 45.151.2.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
195.211.190.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.13.188.0/24 maxlen: 24
45.13.191.0/24 maxlen: 24
45.13.189.0/24 maxlen: 24
45.144.215.0/24 maxlen: 24
45.144.214.0/24 maxlen: 24
194.15.52.0/23 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/24 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
85.209.121.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
77.83.38.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:7f:ff:84:99:da:17:b9:dd:10:d1:6c:ad:87:4e:b2:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 27 17:29:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd557bfb7231058ceb7a3aa34fe5d168d4406721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6b:b7:ae:a1:70:70:94:af:78:0e:b9:13:f6:
d4:2e:a0:fc:49:9f:8e:c9:e3:13:9d:4f:d3:65:76:
80:26:73:ec:59:a5:f0:d5:df:ad:70:69:43:46:56:
8c:ec:42:d3:dc:c9:b3:ad:54:56:03:55:30:bb:9d:
ad:20:17:64:1d:3d:e7:db:03:51:69:ac:80:15:7f:
8e:70:d4:aa:d0:a7:b1:25:26:29:44:e6:16:56:0a:
58:91:a9:0e:03:5c:50:98:17:4f:eb:d5:5f:c5:b7:
0f:02:ec:3a:d9:a7:cb:c3:9e:af:29:d1:ea:fe:39:
c2:99:fe:09:10:e6:1f:cf:5c:9f:20:11:0b:fc:17:
70:59:80:74:8f:e6:83:93:6b:8c:ee:7d:6b:7c:5f:
20:78:37:ef:85:d3:3d:f3:33:91:bd:55:93:9b:e5:
0b:bb:e6:e4:01:be:00:6a:1e:41:84:10:38:33:d3:
f2:f6:e7:f0:0f:7d:ad:72:cf:5d:05:ce:52:28:c7:
cf:54:3c:29:28:9f:c8:41:0b:02:10:ff:38:77:f2:
4a:63:32:51:86:f4:a6:ea:01:90:3b:15:63:2f:7b:
7c:c8:10:be:92:4b:a1:2a:1b:f9:3c:30:e4:83:0f:
bc:f2:98:0f:11:04:37:bb:25:30:58:a6:d7:74:e4:
d3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:55:7B:FB:72:31:05:8C:EB:7A:3A:A3:4F:E5:D1:68:D4:40:67:21
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/3VV7-3IxBYzrejqjT-XRaNRAZyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.87.0/24
45.9.29.0/24
45.13.188.0/23
45.13.191.0/24
45.81.112.0/22
45.88.136.0/22
45.132.181.0/24
45.144.212.0/22
45.151.2.0/24
77.83.37.0-77.83.39.255
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/22
193.57.41.0/24
193.57.43.0/24
194.15.52.0/23
194.242.96.0/22
195.62.24.0/24
195.177.92.0/22
195.211.190.0/24
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
10:7f:71:d3:0d:4e:9a:9d:7c:9e:a1:e5:b3:8a:b8:cc:37:f3:
a6:f2:7d:f4:ad:4c:27:f1:33:eb:fe:f1:15:7a:8b:ee:35:bc:
78:7e:f4:69:71:a8:d7:25:d1:3c:1e:d0:9f:6b:e3:6f:48:43:
61:2e:75:7c:80:7e:28:0e:81:ef:38:8e:59:2a:5e:4c:4b:24:
b0:0f:49:68:08:02:c9:51:6d:e2:4b:e8:99:be:4e:db:00:7c:
2d:fe:ea:6c:65:16:65:c1:3e:fd:29:0d:d0:41:68:9e:6b:93:
41:70:87:e8:c6:a6:da:1b:3f:dd:58:27:49:ba:f8:27:fb:dd:
13:02:14:09:37:29:d7:d1:2c:4b:49:47:00:b4:26:8a:99:50:
ad:e0:9a:35:25:32:42:08:2f:a2:78:77:cf:be:79:a8:ec:e8:
b5:e9:07:4f:fe:30:4a:00:a8:4a:e0:42:99:43:0c:f8:07:4c:
da:78:41:11:f9:6f:fd:eb:de:40:5a:87:32:bd:de:1a:71:05:
f4:d6:ba:a3:26:30:23:b9:f1:5c:d3:c8:35:1f:0c:0a:21:82:
31:f5:80:d9:86:fa:aa:c5:1e:e1:a2:a7:47:7a:f2:52:88:e4:
f3:90:2c:5d:0b:6b:a8:2c:08:e9:b2:20:c2:31:47:b4:48:dc:
cd:4a:99:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:17 2024 by rpki-client on console-ams.rpki-client.org