Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/E4IeQAiJYYAD_5_3oa6gbHCAREw.roa
File: E4IeQAiJYYAD_5_3oa6gbHCAREw.roa (raw, json)
Hash identifier: k713cRaw6DAHcrAJEcGKnj2+P3Snzw6DIp6y/vLgBL8=
Subject key identifier: 13:82:1E:40:08:89:61:80:03:FF:9F:F7:A1:AE:A0:6C:70:80:44:4C
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 07D9A21A
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/E4IeQAiJYYAD_5_3oa6gbHCAREw.roa
Signing time: Thu 10 Mar 2022 07:30:18 +0000
ROA not before: Thu 10 Mar 2022 07:30:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 45.151.0.0/23 maxlen: 24
45.151.2.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
2.56.108.0/22 maxlen: 24
194.15.52.0/23 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
85.209.120.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
85.209.121.0/24 maxlen: 24
85.209.123.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
195.177.95.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 131703322 (0x7d9a21a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 10 07:30:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13821e400889618003ff9ff7a1aea06c7080444c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:07:d5:fe:de:c0:f7:6c:f5:f7:d4:2f:b1:c0:
3d:55:01:18:29:88:36:9e:15:9d:18:d2:a7:9f:51:
9c:37:2a:58:ea:a9:b9:6f:03:10:e0:b3:b5:40:8c:
cf:b0:5a:75:52:b8:39:67:95:fc:fc:53:e4:84:54:
b7:d7:19:f4:39:57:e8:bc:15:a4:48:8b:4a:72:ab:
7a:ef:7c:d6:5b:3e:ef:38:9a:c1:ec:d6:1d:e0:c8:
67:01:21:3f:fa:39:66:5f:4d:36:d9:61:e8:0d:b7:
b0:9a:81:24:d3:c1:64:f0:bc:a4:0c:15:31:e2:40:
c4:86:d6:46:5b:63:93:13:6f:52:21:69:14:f4:05:
ea:e8:0b:05:c4:b3:e2:8c:7f:f6:60:da:d1:88:ca:
75:43:77:36:de:22:11:93:98:b2:72:0a:db:f7:42:
73:31:b8:f2:6b:8d:89:e6:e6:b1:1a:37:2e:9c:23:
ca:ef:28:62:e4:2d:1a:56:42:d3:a6:75:98:d2:e2:
b0:c8:9c:4d:fc:85:9d:6c:ba:6e:b1:4a:8f:ee:3a:
94:cb:59:0b:11:c1:76:8e:d1:44:56:cc:ea:11:8b:
e2:a9:0f:51:72:5e:9b:db:0e:40:04:8e:82:9b:97:
15:e1:15:3e:ca:e7:12:51:19:6b:03:44:97:91:4b:
80:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:82:1E:40:08:89:61:80:03:FF:9F:F7:A1:AE:A0:6C:70:80:44:4C
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/E4IeQAiJYYAD_5_3oa6gbHCAREw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
45.88.137.0-45.88.139.255
45.132.182.0/23
45.144.213.0/24
45.151.0.0-45.151.2.255
77.83.38.0/24
85.209.120.0/22
194.15.52.0/23
195.62.24.0/24
195.177.95.0/24
195.211.188.0/22
Signature Algorithm: sha256WithRSAEncryption
01:07:f1:26:bb:b0:3d:1b:9c:ea:5f:4a:dc:9a:3a:bc:a6:b7:
60:cd:ef:02:ac:4c:26:0e:e6:f7:bb:18:8f:d9:41:8e:ec:52:
c9:a9:a0:d4:7b:05:50:d0:40:8c:f8:0b:2e:86:bd:a5:15:91:
08:ac:c2:29:b8:bb:6a:bc:7e:da:3f:f2:f7:f7:59:96:f8:c4:
5a:6e:1f:4e:35:88:05:e4:21:8d:49:ef:30:fe:15:af:cb:8b:
c4:ff:13:b5:d2:ee:92:3a:9d:44:b9:56:75:4b:30:2c:4f:f5:
44:58:c5:1d:2c:ba:6e:cc:d3:6a:3e:bc:ed:06:7b:22:ec:37:
9e:52:12:1e:4b:9b:79:de:7d:bb:f2:eb:07:9f:91:50:88:ed:
48:ec:42:b6:91:c1:0f:54:99:bd:af:9f:af:26:92:2b:18:c6:
ec:0d:f6:43:f9:ba:3b:01:42:d4:fb:78:8c:a1:a4:27:47:cd:
c0:16:bc:f1:e1:82:a3:a8:32:b6:e8:b3:59:cd:a5:f1:3a:7d:
63:36:d3:76:f3:a2:de:e0:96:8e:d5:44:78:93:69:99:b8:ef:
03:5b:6b:b4:22:18:b1:ac:b6:c1:70:d4:3f:c7:b3:e2:12:58:
d6:a6:99:d7:52:6b:3d:95:20:3b:18:7b:15:7a:68:d8:74:3a:
89:dc:08:c1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:32 2023 by rpki-client on console-fra.rpki-client.org