Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/6lsPbu-BWpd22Oed0bzj5Uek0Cg.roa
File: 6lsPbu-BWpd22Oed0bzj5Uek0Cg.roa (raw, json)
Hash identifier: 3s4+fyxm5cI7DbAuIfFfNKRZDs478o0wXVkez1xa5GI=
Subject key identifier: EA:5B:0F:6E:EF:81:5A:97:76:D8:E7:9D:D1:BC:E3:E5:47:A4:D0:28
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018379847B05621F1B390C50DD7C709647BB
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/6lsPbu-BWpd22Oed0bzj5Uek0Cg.roa
Signing time: Mon 26 Sep 2022 11:17:48 +0000
ROA not before: Mon 26 Sep 2022 11:17:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 45.9.30.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
45.81.112.0/24 maxlen: 24
45.81.113.0/24 maxlen: 24
45.81.115.0/24 maxlen: 24
45.81.114.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:79:84:7b:05:62:1f:1b:39:0c:50:dd:7c:70:96:47:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 26 11:17:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ea5b0f6eef815a9776d8e79dd1bce3e547a4d028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8b:e2:e5:10:1b:ad:60:9b:bd:6b:f9:f4:9d:
29:95:98:ca:bc:ba:15:ae:d0:4b:58:65:be:b6:bf:
23:d6:b1:44:ba:44:47:97:09:fc:a9:e6:8b:78:80:
4d:1d:99:04:ae:c0:18:7a:d0:02:f0:d8:8c:fd:99:
5d:2d:8f:e2:ad:6b:8d:f9:bf:2d:66:03:dd:f7:fc:
bd:44:c0:a8:ab:37:dd:74:75:05:0f:10:a1:47:af:
a0:e1:19:a6:02:72:6e:ed:0c:f2:dd:4f:2a:12:27:
36:d3:24:cf:3f:f1:e8:88:32:41:7a:6e:b9:ec:88:
e7:d8:d4:d4:70:9d:70:32:39:be:86:8c:57:f0:86:
7b:87:1a:f2:6f:29:b0:19:82:65:7d:cd:e2:81:e0:
1e:f6:86:da:e2:e0:10:72:3b:17:d6:48:7f:cb:23:
e2:0c:40:72:4f:e6:03:e6:56:95:7a:9f:5b:f9:38:
8e:85:c8:2f:11:39:17:59:69:97:4a:a3:3b:44:f5:
b5:50:61:45:be:05:20:df:55:3b:52:41:01:6f:b6:
01:c7:ad:b2:e7:85:61:34:6a:92:ad:98:da:fd:b6:
77:99:7c:04:05:36:71:17:44:0a:4c:88:9e:59:dc:
4d:a7:0b:81:3b:8c:88:c2:86:c9:c0:a9:83:6a:1d:
36:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5B:0F:6E:EF:81:5A:97:76:D8:E7:9D:D1:BC:E3:E5:47:A4:D0:28
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/6lsPbu-BWpd22Oed0bzj5Uek0Cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.30.0/24
45.81.112.0/22
45.132.180.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:ef:2d:6b:3b:0a:26:7a:b0:6b:ba:9d:c6:d7:c1:50:e5:0e:
f4:15:05:c4:09:cd:cc:01:f8:87:c4:e6:b2:d7:2d:18:ab:20:
dc:e4:7a:89:d2:15:c5:45:f3:c2:47:69:87:06:f7:a1:80:1f:
0a:40:6e:d9:f7:58:ee:03:c4:96:f4:1e:d1:16:10:cb:11:62:
bd:6a:65:eb:28:50:a4:8b:8f:1e:19:9e:28:ca:cf:21:87:56:
1e:7e:cc:92:d5:e6:24:84:e4:40:ad:76:9d:c6:e5:5c:bc:66:
83:f4:91:8c:46:cb:5f:88:0d:2d:27:6c:93:f9:4d:b7:41:9b:
02:aa:07:c1:54:73:c1:72:49:7e:3a:a9:b3:67:7d:14:77:ce:
61:a4:cf:0a:21:d6:dd:0a:57:0e:b3:54:3c:d0:ee:f8:07:3a:
bf:08:6d:5f:bb:91:8b:f4:8c:e0:81:8b:64:c2:69:77:49:ce:
b0:aa:84:99:d0:c8:56:fc:45:d4:3a:e8:25:b9:44:ae:b8:b5:
7c:cb:00:6c:2b:e4:b4:c9:d7:9e:95:14:8f:1e:5b:72:a9:57:
49:29:89:a1:18:fd:7c:49:ee:40:b1:da:e4:56:35:b2:3d:12:
1c:6e:3f:ee:38:6b:7c:54:85:f5:fe:1c:9c:93:24:3f:96:0b:
5a:99:31:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org