Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/9n7ECDn1zuBWzJTxE7bLd8H0YOY.roa
File: 9n7ECDn1zuBWzJTxE7bLd8H0YOY.roa (raw, json)
Hash identifier: aAAiVGsHKrB6fVOjy6DiN1NMrIKwGYEOqJe9EAzmmhg=
Subject key identifier: F6:7E:C4:08:39:F5:CE:E0:56:CC:94:F1:13:B6:CB:77:C1:F4:60:E6
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 08133F1C
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/9n7ECDn1zuBWzJTxE7bLd8H0YOY.roa
Signing time: Thu 31 Mar 2022 18:23:14 +0000
ROA not before: Thu 31 Mar 2022 18:23:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 77.83.39.0/24 maxlen: 24
45.13.188.0/24 maxlen: 24
45.13.189.0/24 maxlen: 24
45.144.214.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 135479068 (0x8133f1c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 31 18:23:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f67ec40839f5cee056cc94f113b6cb77c1f460e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:bc:c2:7b:62:94:ae:61:dc:09:d7:9f:da:df:
3a:de:f9:27:f3:c6:33:47:99:1f:f6:3d:3e:c9:97:
b6:8e:00:ff:bc:f0:18:ea:d3:bf:67:15:26:3d:99:
bc:1c:50:2d:7d:78:a0:fd:f5:ce:15:78:07:9b:15:
9e:77:5f:ca:b7:8b:de:ca:da:d9:d6:04:47:3d:51:
a5:8c:27:39:7a:c8:00:40:91:02:77:76:c7:b3:a2:
6d:23:ea:eb:f0:d1:ab:64:82:f3:d1:a5:e7:21:37:
7f:cc:c9:bf:6b:22:78:97:15:b3:90:cd:3b:89:bc:
c9:5d:53:34:e9:04:c9:05:23:81:dc:09:7b:ab:61:
f1:1c:67:b5:ff:af:e3:d2:ed:3e:8f:1b:3f:5b:b3:
14:29:51:eb:30:c6:fe:08:53:83:84:8e:22:b4:a3:
60:84:3e:7d:3d:b7:ac:11:d4:49:45:58:19:60:8e:
6d:71:2b:8f:47:ff:35:7e:74:3d:87:0d:98:85:d6:
bc:1c:96:b4:8a:3f:1a:84:35:9b:d0:0f:94:95:25:
b1:7a:70:24:9c:6b:9a:39:88:4b:7e:ef:cd:93:9d:
07:b6:ea:ad:95:cf:1f:77:7c:52:8d:9d:95:60:1d:
b7:81:79:1f:47:c6:a8:9f:ac:fd:0b:1b:ba:db:b3:
59:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:7E:C4:08:39:F5:CE:E0:56:CC:94:F1:13:B6:CB:77:C1:F4:60:E6
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/9n7ECDn1zuBWzJTxE7bLd8H0YOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.188.0/23
45.88.136.0/24
45.132.181.0/24
45.144.214.0/24
77.83.39.0/24
Signature Algorithm: sha256WithRSAEncryption
59:9d:94:a6:43:ba:96:05:d0:29:cf:70:c7:92:0e:b7:61:33:
33:8f:eb:fc:f9:2e:f6:03:78:37:91:cc:65:92:f8:72:87:4c:
d3:eb:11:f0:35:25:2f:21:8a:b8:09:5c:b2:ce:5d:e6:d2:f9:
96:bb:61:92:fc:fe:ef:e2:50:7a:3a:71:a8:43:47:99:7b:45:
85:f0:e4:bd:c3:19:53:38:c2:fd:88:38:92:2e:f1:c9:a9:eb:
cf:35:ba:f9:f6:54:f7:0c:84:8f:64:a0:43:b0:5b:f1:95:2e:
a1:eb:00:eb:dd:77:cd:1a:62:25:c2:d1:6f:d4:f0:c1:b5:8a:
7d:7b:82:2b:04:c4:ed:33:03:7e:4b:d0:66:d6:a3:ee:1b:a2:
e7:63:db:12:27:81:e5:56:76:39:ff:3f:22:06:bc:7c:0e:17:
cc:0a:c4:cb:2b:b3:7f:67:ca:41:34:0a:5a:3d:a3:2c:17:a3:
53:78:f1:71:a5:d6:0f:1f:04:db:ee:fe:ee:87:82:49:ef:be:
82:87:33:b5:95:d9:23:e6:2d:56:96:b6:9e:cd:87:92:e9:32:
38:b3:eb:61:82:11:3e:38:b9:e8:a3:d2:cf:14:24:ec:49:46:
79:6e:bd:60:50:b4:89:6b:b9:25:1a:2c:1c:9b:ba:37:02:89:
f5:6f:92:a8
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIECBM/HDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZDJhNDc4YmIwYjA4ZTY2MWIwYjJmOWZiZTg5MzViYzljMmEyOGExMB4XDTIyMDMz
MTE4MjMxNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZjY3ZWM0MDgzOWY1
Y2VlMDU2Y2M5NGYxMTNiNmNiNzdjMWY0NjBlNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMi8wntilK5h3AnXn9rfOt75J/PGM0eZH/Y9PsmXto4A/7zw
GOrTv2cVJj2ZvBxQLX14oP31zhV4B5sVnndfyreL3sra2dYERz1RpYwnOXrIAECR
And2x7OibSPq6/DRq2SC89Gl5yE3f8zJv2sieJcVs5DNO4m8yV1TNOkEyQUjgdwJ
e6th8Rxntf+v49LtPo8bP1uzFClR6zDG/ghTg4SOIrSjYIQ+fT23rBHUSUVYGWCO
bXErj0f/NX50PYcNmIXWvByWtIo/GoQ1m9APlJUlsXpwJJxrmjmIS37vzZOdB7bq
rZXPH3d8Uo2dlWAdt4F5H0fGqJ+s/QsbutuzWa0CAwEAAaOCAiEwggIdMB0GA1Ud
DgQWBBT2fsQIOfXO4FbMlPETtst3wfRg5jAfBgNVHSMEGDAWgBSdKkeLsLCOZhsL
L5++iTW8nCoooTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25TcEhpN0N3am1ZYkN5LWZ2b2sxdkp3cUtLRS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMTYvNjYzZGY1LTU4MGMtNGYyYy1hNjZjLWVlZjM1MTFmNmM2MC8x
LzluN0VDRG4xenVCV3pKVHhFN2JMZDhIMFlPWS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMTYv
NjYzZGY1LTU4MGMtNGYyYy1hNjZjLWVlZjM1MTFmNmM2MC8xL25TcEhpN0N3am1Z
YkN5LWZ2b2sxdkp3cUtLRS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA3
BggrBgEFBQcBBwEB/wQoMCYwJAQCAAEwHgMEAS0NvAMEAC1YiAMEAC2EtQMEAC2Q
1gMEAE1TJzANBgkqhkiG9w0BAQsFAAOCAQEAWZ2UpkO6lgXQKc9wx5IOt2EzM4/r
/Pku9gN4N5HMZZL4codM0+sR8DUlLyGKuAlcss5d5tL5lrthkvz+7+JQejpxqENH
mXtFhfDkvcMZUzjC/Yg4ki7xyanrzzW6+fZU9wyEj2SgQ7Bb8ZUuoesA6913zRpi
JcLRb9TwwbWKfXuCKwTE7TMDfkvQZtaj7hui52PbEieB5VZ2Of8/Iga8fA4XzArE
yyuzf2fKQTQKWj2jLBejU3jxcaXWDx8E2+7+7oeCSe++gocztZXZI+YtVpa2ns2H
kukyOLPrYYIRPji56KPSzxQk7ElGeW69YFC0iWu5JRosHJu6NwKJ9W+SqA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:17 2024 by rpki-client on console-ams.rpki-client.org