Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/GG7Skh63FD_6zpbh598-mAAe4_Y.roa
File: GG7Skh63FD_6zpbh598-mAAe4_Y.roa (raw, json)
Hash identifier: e52lozQDZ4bKKiN/HcAZF1NtTL+cH2BMA9djxY3VaCE=
Subject key identifier: 18:6E:D2:92:1E:B7:14:3F:FA:CE:96:E1:E7:DF:3E:98:00:1E:E3:F6
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0184CDB98F2D21BC1FBBCA0432BE0E2A8F1F
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/GG7Skh63FD_6zpbh598-mAAe4_Y.roa
Signing time: Thu 01 Dec 2022 12:46:40 +0000
ROA not before: Thu 01 Dec 2022 12:46:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 193.30.241.0/24 maxlen: 24
45.9.30.0/24 maxlen: 24
45.13.189.0/24 maxlen: 24
45.13.188.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cd:b9:8f:2d:21:bc:1f:bb:ca:04:32:be:0e:2a:8f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Dec 1 12:46:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=186ed2921eb7143fface96e1e7df3e98001ee3f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:00:d6:e6:a9:9f:4c:86:5c:c6:3b:c6:12:51:
50:7f:9b:7a:cd:5a:3e:49:06:58:f4:5a:03:af:58:
ad:25:a8:47:7f:11:e9:98:aa:b1:d0:c0:a1:de:89:
4d:c7:d0:ff:b5:f7:94:e3:5f:44:40:98:c9:06:68:
24:34:67:9b:de:3c:b1:15:ae:99:bd:26:6b:61:9d:
fc:3f:3d:82:d5:e3:1a:a5:21:7c:8e:9b:54:f6:62:
34:a0:28:54:e5:e3:e4:f5:56:6a:0d:a1:54:f7:63:
02:80:6a:dc:8e:65:cc:1e:b1:f5:52:fc:b9:46:64:
ec:cd:8a:d9:ef:3e:99:ad:28:6d:be:ac:98:b0:94:
10:af:92:28:70:d1:af:ec:96:64:6e:92:29:45:45:
43:21:f2:40:fc:7d:2e:d9:17:ff:6d:6e:2c:0a:d2:
38:0d:56:59:a5:de:cb:fb:dd:b3:3b:a1:d6:b9:e0:
96:31:9f:bb:f5:cf:1b:f7:83:bc:c9:7e:98:4d:f2:
e6:b7:4c:74:02:85:ba:8d:6d:3c:a2:c4:86:25:5f:
25:8c:67:75:1f:f1:f6:30:63:3a:6b:fa:d1:ef:2e:
15:75:cd:7e:d1:96:9d:f0:c3:a9:79:f9:f7:1c:03:
1f:93:38:9b:82:b2:d8:17:54:58:38:67:fa:7d:0b:
ec:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6E:D2:92:1E:B7:14:3F:FA:CE:96:E1:E7:DF:3E:98:00:1E:E3:F6
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/GG7Skh63FD_6zpbh598-mAAe4_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.30.0/24
45.13.188.0/23
45.88.137.0/24
45.132.180.0/24
193.30.241.0/24
195.177.93.0-195.177.95.255
Signature Algorithm: sha256WithRSAEncryption
ae:53:52:fc:70:04:5c:b9:20:7e:63:87:04:3a:b3:77:30:c0:
25:31:13:a0:1e:b5:be:59:10:bb:50:cb:90:ef:d3:2a:86:fd:
a0:7f:18:0e:c0:68:6b:25:8e:87:87:7b:4d:e7:bd:ed:0f:b8:
0e:62:53:ff:f5:ed:44:dd:36:89:e3:27:a2:e5:e1:d5:c5:7b:
b1:67:24:47:1e:87:2d:0a:21:43:7e:3c:37:db:09:5a:dd:9d:
6d:68:16:5c:6a:a3:a9:68:3b:a4:93:46:ed:52:fb:6a:67:e7:
7d:50:3c:bf:46:a3:03:af:c7:e6:83:54:36:b9:ad:82:a9:55:
f4:80:06:36:c8:5e:80:4c:1d:1a:d0:c2:de:fc:ab:65:de:a2:
38:d6:80:88:47:ef:57:5f:6c:05:37:4a:ee:c4:af:bc:15:84:
d0:88:47:4e:96:02:0e:3a:36:d7:a2:8e:c0:47:f5:01:25:00:
09:ab:54:6e:99:17:06:b3:0b:92:8d:25:15:b5:81:66:c2:61:
01:1c:eb:9d:58:c2:63:fe:b0:20:78:05:63:c7:b3:33:83:be:
e1:39:49:4d:56:17:49:87:4d:fc:28:f2:e1:c5:1a:e8:20:a6:
b1:60:ff:cd:95:46:45:f7:5c:53:2d:f2:83:d5:e2:ed:95:76:
bf:5d:b9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org