Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Gjr-0ktdD3CNN1O8u2SrYRiJlEY.roa
File: Gjr-0ktdD3CNN1O8u2SrYRiJlEY.roa (raw, json)
Hash identifier: d1JRUys/z4WF340XbliLlM2vtfayjDNFBXjNjBfBRFs=
Subject key identifier: 1A:3A:FE:D2:4B:5D:0F:70:8D:37:53:BC:BB:64:AB:61:18:89:94:46
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 079A40F4
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Gjr-0ktdD3CNN1O8u2SrYRiJlEY.roa
Signing time: Sat 19 Feb 2022 18:55:25 +0000
ROA not before: Sat 19 Feb 2022 18:55:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 45.13.191.0/24 maxlen: 24
45.9.30.0/24 maxlen: 24
45.144.215.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 127549684 (0x79a40f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Feb 19 18:55:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1a3afed24b5d0f708d3753bcbb64ab6118899446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:35:87:54:92:10:14:b1:49:06:3a:1d:75:47:
e4:42:65:37:fd:3a:f9:73:d9:54:b2:81:32:6c:07:
80:f2:31:9f:3d:b6:8f:5f:ec:dc:3a:b2:3f:97:37:
50:74:64:d7:4e:83:4f:b9:7c:2f:70:57:f7:8a:6e:
82:ab:34:4e:14:5d:01:78:ee:21:1b:cc:b2:dc:f3:
ff:cb:74:40:27:11:0f:42:65:ee:ee:a5:9e:a4:41:
c7:7a:b5:61:68:aa:67:0f:09:35:6e:f0:49:41:3b:
f6:32:da:ac:54:83:ec:8d:5f:37:6c:38:9a:1e:6d:
ef:74:08:ef:81:64:97:3c:36:e2:07:05:ed:7a:d0:
11:fd:4d:3b:48:1c:fc:00:95:7e:be:08:c5:67:9e:
db:44:8d:2e:3e:e0:ed:2a:d8:02:0b:42:b7:3a:5e:
65:e0:18:5c:c9:5c:ff:b8:22:49:c9:4d:01:1a:0f:
b0:b8:98:85:25:10:74:e5:dd:b6:4c:25:d2:cb:8c:
6e:f4:ad:76:54:80:f7:30:8f:e3:93:b9:cf:45:4c:
97:0f:21:c8:f3:1c:24:b5:eb:3e:1e:e5:d9:64:9c:
98:de:39:a6:1e:74:1b:15:16:82:d1:81:bc:be:08:
d4:78:40:22:14:0e:6e:91:e5:46:51:96:51:51:fe:
92:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3A:FE:D2:4B:5D:0F:70:8D:37:53:BC:BB:64:AB:61:18:89:94:46
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Gjr-0ktdD3CNN1O8u2SrYRiJlEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.30.0/24
45.13.191.0/24
45.88.139.0/24
45.132.180.0/24
45.144.215.0/24
195.177.92.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:66:29:6e:69:c4:d7:3a:72:d5:35:16:b8:58:c0:b3:7a:1a:
96:8c:17:ae:af:a6:e1:19:56:79:8b:af:54:a7:74:7f:dc:f3:
c0:db:67:cd:a3:d6:35:26:70:21:52:a7:83:8f:df:76:11:5e:
82:b5:9a:d1:be:63:ad:05:f4:55:2f:bc:42:e2:59:d4:4f:3d:
c3:11:a3:0c:24:6c:62:fd:81:74:d4:8b:d1:0c:0a:2b:63:25:
43:5a:43:06:6c:8a:9e:0e:48:2d:9d:bb:97:20:e7:09:a2:b8:
8d:41:db:6e:c5:11:a0:b4:a0:fd:af:00:7d:d9:c3:3d:d6:d6:
bf:c0:e7:eb:cb:80:fc:70:34:76:85:d9:79:63:68:ee:44:a9:
fa:ab:b7:c6:37:e2:89:58:49:04:04:bf:d7:06:62:00:77:5e:
aa:d9:67:4e:80:08:71:55:ec:7f:0c:de:1c:89:0c:1a:e5:6a:
d2:a7:ab:48:87:a1:6e:db:cb:65:2d:d4:c3:10:3d:78:30:b4:
82:e7:db:c0:26:8f:44:1d:fb:b7:7b:12:85:70:f9:ed:40:b8:
3e:b2:85:04:6e:ff:2d:d5:98:9c:d6:10:f2:40:9b:b0:9f:83:
c0:a0:41:2c:93:48:4d:0d:d2:fe:9f:13:df:ac:0d:f5:24:02:
72:d3:b3:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:32 2023 by rpki-client on console-fra.rpki-client.org