Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/4QUhjhlY3Gtr-rLrXW-mc6MXhdg.roa
File: 4QUhjhlY3Gtr-rLrXW-mc6MXhdg.roa (raw, json)
Hash identifier: hPD1GXnmjN7MHR+Go8sUn2x+VMhMvF1tCbQwEKZLZKw=
Subject key identifier: E1:05:21:8E:19:58:DC:6B:6B:FA:B2:EB:5D:6F:A6:73:A3:17:85:D8
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 07C7412E
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/4QUhjhlY3Gtr-rLrXW-mc6MXhdg.roa
Signing time: Thu 03 Mar 2022 13:40:03 +0000
ROA not before: Thu 03 Mar 2022 13:40:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 45.13.191.0/24 maxlen: 24
45.9.30.0/24 maxlen: 24
45.144.215.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130498862 (0x7c7412e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 3 13:40:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e105218e1958dc6b6bfab2eb5d6fa673a31785d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8c:a7:c3:36:8f:7f:1e:c2:68:bc:be:11:68:
3c:3b:1c:0e:5f:17:2d:c2:e9:0a:8c:9a:e7:a2:c3:
e1:10:e1:66:30:4a:f3:4b:af:ec:79:29:9a:4f:c4:
c4:cc:15:8d:b4:4c:a6:83:08:e2:d2:d5:da:0e:b7:
d2:69:fc:8b:da:60:06:f7:d6:2c:2b:17:6c:3f:a4:
6c:41:81:6b:ac:79:22:e9:c8:63:a6:ad:b4:ac:08:
1e:44:93:f2:12:0e:77:6f:2f:51:1b:79:c1:ed:90:
31:ec:e7:71:b9:72:1c:a9:c0:50:92:43:97:9e:ee:
3a:2a:6f:7c:69:16:00:b7:e9:c9:49:5e:6c:23:60:
b0:f0:7f:11:53:34:51:04:8c:11:03:ea:51:58:31:
c2:67:ee:93:23:ab:9b:9b:45:56:35:36:c2:d1:f7:
d2:23:76:e5:8e:9e:3a:07:68:15:88:7f:da:71:e4:
a1:b0:25:c9:f0:67:8c:22:65:5d:cd:aa:90:f9:7a:
0c:10:07:cf:7d:3a:d7:70:1c:a9:9d:07:c7:1c:11:
49:19:c5:a8:1d:c8:59:01:c9:f2:0c:7b:f0:ad:ba:
37:77:32:b7:26:bf:e8:a1:d4:14:1c:92:44:8b:eb:
59:63:ff:0e:2f:3b:21:bc:db:47:d1:b4:3a:99:41:
b4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:05:21:8E:19:58:DC:6B:6B:FA:B2:EB:5D:6F:A6:73:A3:17:85:D8
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/4QUhjhlY3Gtr-rLrXW-mc6MXhdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.30.0/24
45.13.191.0/24
45.132.180.0/24
45.144.215.0/24
195.177.92.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:32:d4:d2:94:3d:1f:6c:18:06:09:09:77:39:2f:53:0b:4e:
81:4f:75:bd:f1:0b:12:37:dc:dd:48:7c:4c:88:d3:09:82:4f:
e8:21:8f:08:9a:87:47:ac:9f:3e:39:36:d8:e5:ad:d6:01:36:
89:99:7f:cd:c7:0d:53:bd:50:15:a8:0d:ac:53:56:84:95:bd:
8a:6c:71:69:69:b3:17:46:e7:19:62:21:e0:43:4e:3b:c4:3a:
07:d6:21:8c:a4:72:e6:29:3e:b2:ea:30:de:a0:2b:5f:23:d5:
c5:9d:77:29:74:53:f4:19:16:30:fd:0a:6c:b7:a1:00:8a:95:
e7:ed:99:3e:fd:be:d1:88:eb:f7:6c:fb:51:eb:19:1f:60:5b:
3a:4d:00:d1:ad:ea:3b:c2:ce:e8:a9:7f:50:12:41:1c:9e:1a:
a9:51:06:ce:3f:5d:6e:e3:66:49:70:3d:1f:d4:d1:eb:6c:ca:
2f:45:d4:d0:4e:ae:78:c4:ae:77:7d:8a:fe:b3:52:de:17:92:
cb:61:32:b0:3e:fd:4f:73:fa:4f:6e:c7:e8:01:1b:02:7a:36:
32:f1:0b:54:40:96:a0:b1:f6:32:2d:02:3a:9b:e3:d3:05:63:
2e:fc:4e:21:90:1c:e8:a8:c8:11:2c:72:fa:79:e6:ea:89:10:
1c:00:0c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org