Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/CY4SnP_D2fGVlswi6pf2D0oryDI.roa
File: CY4SnP_D2fGVlswi6pf2D0oryDI.roa (raw, json)
Hash identifier: HknFKst7ACKFiH+BkjDjbjtavt9clkICblhvCH4rf0k=
Subject key identifier: 09:8E:12:9C:FF:C3:D9:F1:95:96:CC:22:EA:97:F6:0F:4A:2B:C8:32
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0181D8AFB8009CF1282F411D031B6DDF540D
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/CY4SnP_D2fGVlswi6pf2D0oryDI.roa
Signing time: Thu 07 Jul 2022 12:43:23 +0000
ROA not before: Thu 07 Jul 2022 12:43:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 45.13.190.0/24 maxlen: 24
194.242.97.0/24 maxlen: 24
5.181.84.0/24 maxlen: 24
5.181.85.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:d8:af:b8:00:9c:f1:28:2f:41:1d:03:1b:6d:df:54:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jul 7 12:43:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=098e129cffc3d9f19596cc22ea97f60f4a2bc832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:46:14:6e:ea:78:80:da:a3:db:b1:9d:b3:c3:
fa:26:67:ed:0f:bd:1b:04:71:d5:4e:d4:3d:54:5e:
ff:b1:e8:d2:83:4b:a0:9d:fe:d8:f6:29:02:09:93:
2a:0c:15:67:7f:cd:95:fb:a6:9c:eb:18:ea:76:95:
37:0e:44:fb:1e:34:14:8d:94:62:1d:08:05:b2:00:
b1:e1:d8:cd:4d:bf:f4:5c:ea:b6:ab:ca:32:da:99:
fb:a7:ae:04:23:fd:d2:3c:1e:04:36:93:c9:71:4f:
de:f1:bc:72:53:39:1b:c0:b9:25:51:2f:a4:1c:92:
a2:b5:26:66:35:3e:bb:88:4b:e4:35:c1:71:40:57:
04:d1:db:94:7c:d1:6f:bf:1e:40:41:6b:0f:39:d0:
f6:e5:dd:9c:e2:50:62:44:44:7e:d8:3c:4a:6b:01:
67:92:8b:8d:d5:e9:c7:c6:2f:d2:6c:18:ff:6a:1d:
ac:c8:5d:70:26:f2:67:48:80:2f:43:9d:a3:10:5b:
79:44:73:80:83:0e:de:f6:40:cd:67:e9:1d:e0:9e:
21:46:89:7c:db:5a:ec:68:a3:4e:60:55:f1:8d:69:
bb:da:9b:a6:3b:fa:40:b3:58:72:79:f9:12:79:bb:
8d:61:e6:ab:83:2b:3d:35:b9:04:b3:0d:43:ab:52:
ed:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8E:12:9C:FF:C3:D9:F1:95:96:CC:22:EA:97:F6:0F:4A:2B:C8:32
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/CY4SnP_D2fGVlswi6pf2D0oryDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/23
45.13.190.0/24
45.132.181.0/24
45.144.212.0/24
45.151.3.0/24
194.242.97.0/24
195.177.92.0/24
Signature Algorithm: sha256WithRSAEncryption
92:a3:30:e0:14:bf:36:35:74:cd:7f:ea:a7:d3:6e:17:b8:3f:
17:10:5f:11:15:5a:3b:4d:c5:93:36:0e:e2:74:4f:32:ba:0f:
87:fe:0e:2f:c4:ac:03:53:cf:fa:37:ec:b5:e7:90:0b:87:c6:
2f:8e:85:07:80:ae:96:25:2b:64:b6:fe:e1:b3:44:ba:b2:68:
84:ed:61:65:25:81:be:61:6e:32:34:bc:9c:38:25:07:e1:9d:
77:82:eb:81:67:59:4b:08:ea:49:73:ed:d6:55:05:3f:4b:57:
b3:87:22:f6:e1:56:9b:93:63:3f:f6:f6:82:b6:13:61:aa:d1:
df:c8:44:d0:01:17:6b:bc:b0:94:69:98:6b:dd:8d:dc:35:14:
10:9f:cc:6c:2a:13:e2:35:a9:79:c5:8d:4e:93:11:fc:cb:7a:
fd:50:f6:d0:94:9b:bf:e2:33:14:ff:15:96:42:e9:64:b1:e2:
74:34:ce:50:55:23:f0:61:68:d7:bd:58:a1:a5:45:0a:e4:96:
e1:b7:85:0c:89:42:89:7f:83:72:a2:a4:de:f2:af:a3:e9:56:
98:7b:ea:61:c8:09:81:fe:91:b6:fe:07:cb:b5:77:e2:19:63:
20:f5:71:4c:52:6c:f1:14:5d:93:3e:a8:8a:e2:c1:e9:86:f9:
fb:4e:9c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org