Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/FaC_Wfizm3nDd40dMVgI-1J1gII.roa
File: FaC_Wfizm3nDd40dMVgI-1J1gII.roa (raw, json)
Hash identifier: oBglIsOCf0EJkjxejsfvAbqjO9subh1UCEG/yesj+30=
Subject key identifier: 15:A0:BF:59:F8:B3:9B:79:C3:77:8D:1D:31:58:08:FB:52:75:80:82
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 078CDBA8
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/FaC_Wfizm3nDd40dMVgI-1J1gII.roa
Signing time: Tue 15 Feb 2022 12:34:49 +0000
ROA not before: Tue 15 Feb 2022 12:34:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 77.83.39.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
45.13.188.0/24 maxlen: 24
45.151.2.0/24 maxlen: 24
45.13.189.0/24 maxlen: 24
45.144.214.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126671784 (0x78cdba8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Feb 15 12:34:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=15a0bf59f8b39b79c3778d1d315808fb52758082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:2e:c3:14:98:88:0c:ab:42:ab:b3:c0:d4:
f0:5a:28:4d:a9:96:06:ee:0a:c5:59:e9:9a:1a:b5:
61:0d:3d:ae:29:7e:4b:5c:41:b7:be:99:48:24:53:
70:d6:6f:36:7f:de:73:f9:c4:d4:50:f3:c3:f4:e6:
3b:34:64:b0:1a:67:38:8c:ff:9a:0c:20:a9:18:68:
d6:06:00:d8:73:0c:20:49:6a:ef:6d:64:de:4f:5b:
eb:d4:3e:c5:ca:7e:f0:78:e6:12:ec:35:a9:ee:77:
d1:b8:bd:04:21:50:cb:ff:94:47:0c:13:77:d4:38:
71:ac:08:8c:1e:62:2b:1c:77:9c:04:85:53:f4:d3:
90:f5:72:b4:9b:57:8a:4a:1f:62:d1:8d:e3:71:3e:
47:8c:e0:b7:00:a9:c9:f1:19:37:a6:61:e6:dc:4a:
b7:c3:46:de:be:c9:46:ed:81:5a:d0:9a:fb:d5:3d:
cd:e6:51:5f:3d:93:c2:4c:84:67:44:e8:ca:dd:e2:
7d:06:27:9b:b9:a6:0b:0b:dc:d0:b8:84:6b:81:7e:
cc:ea:3d:04:07:d8:c6:85:19:3d:0a:d5:2e:77:12:
cc:45:e0:6f:30:b5:19:04:2c:7e:95:e3:d4:64:a8:
dd:06:2b:db:ad:c3:9d:b2:b8:70:bb:e2:a0:7d:7f:
e3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A0:BF:59:F8:B3:9B:79:C3:77:8D:1D:31:58:08:FB:52:75:80:82
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/FaC_Wfizm3nDd40dMVgI-1J1gII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.188.0/23
45.88.136.0/24
45.132.181.0/24
45.144.214.0/24
45.151.2.0/24
77.83.38.0/23
193.30.241.0/24
Signature Algorithm: sha256WithRSAEncryption
22:ce:f8:ab:b3:dd:81:38:d6:29:92:74:b5:ea:49:bf:ed:a1:
59:4f:fa:34:d8:a9:81:46:14:d3:e8:64:16:ee:81:b9:13:cd:
4f:c0:4d:72:4f:0d:25:fa:91:54:b3:9a:b9:85:7c:e3:f5:51:
69:64:8c:4f:1c:21:b1:03:71:cb:96:12:78:e4:52:f7:47:a0:
d3:2b:3e:32:08:29:dd:3e:c6:c6:6f:de:06:de:ff:3f:f0:0f:
aa:fb:72:b8:ea:76:24:a3:e6:b5:4f:2a:be:ae:3f:a3:c1:61:
d0:3a:c5:ef:e5:b8:6e:0b:8e:f2:04:a0:37:16:24:57:8d:e2:
db:24:64:04:69:ab:8f:21:65:20:2c:35:47:1f:53:a7:e6:3d:
84:04:a6:81:58:29:f8:41:3c:3f:ef:67:52:71:f7:9a:3a:33:
cb:57:9d:ae:db:66:47:c3:43:2f:ef:ea:88:c5:f8:49:63:ea:
11:cd:86:a6:1c:93:5e:ac:ae:9f:af:28:99:1b:fb:84:ab:18:
0c:20:a0:2e:9d:e9:a0:f2:94:1e:1a:16:44:36:98:21:36:42:
19:c0:f6:47:cf:df:c2:77:5a:87:5b:58:39:18:60:96:73:f4:
4c:88:cc:db:7d:75:ff:f3:18:aa:8c:08:01:7d:45:6d:b9:77:
2e:99:a3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org