Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/HNTaZ9ULVI0fATG1pDgRrv-03hI.roa
File: HNTaZ9ULVI0fATG1pDgRrv-03hI.roa (raw, json)
Hash identifier: 5fhXSVjm0HolAyRIO+yJaJsfG4wxrCezqIQEqZ3/gR0=
Subject key identifier: 1C:D4:DA:67:D5:0B:54:8D:1F:01:31:B5:A4:38:11:AE:FF:B4:DE:12
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0183A273925BB3679584FDA946F76B0ADDB6
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/HNTaZ9ULVI0fATG1pDgRrv-03hI.roa
Signing time: Tue 04 Oct 2022 10:03:46 +0000
ROA not before: Tue 04 Oct 2022 10:03:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 77.83.39.0/24 maxlen: 24
45.9.30.0/24 maxlen: 24
45.13.189.0/24 maxlen: 24
45.13.188.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:a2:73:92:5b:b3:67:95:84:fd:a9:46:f7:6b:0a:dd:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 4 10:03:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=1cd4da67d50b548d1f0131b5a43811aeffb4de12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c1:4a:d3:0d:9b:23:18:bf:55:dc:6a:51:cc:
64:3b:a5:41:df:34:11:f5:8e:b9:5e:c8:7b:5f:a0:
fb:cb:8d:59:98:39:86:49:cd:42:72:d3:39:a1:4a:
32:97:d1:03:54:5e:95:8c:fb:a3:0d:b5:1a:fc:ae:
70:32:76:ef:3b:ef:90:97:cc:d0:cd:f7:06:f0:6d:
9b:18:f1:5c:3e:3e:fc:ce:1a:89:2e:bc:6a:33:f3:
ce:5e:75:06:82:e5:a3:c0:7d:a1:ca:8d:58:24:07:
86:57:b2:c6:38:b8:66:f3:7b:f8:ed:6e:b4:23:e0:
8f:55:56:0b:bf:ec:61:e1:29:c6:f8:f8:89:08:56:
dd:c3:e9:ab:c9:e3:24:ab:22:a3:ea:82:aa:85:34:
ec:9c:7f:3d:02:42:c8:c6:57:96:b7:3b:b4:e5:25:
95:0c:ae:3d:f2:29:6d:ca:28:ff:5e:91:d4:e4:a7:
fe:c4:c7:09:92:55:9c:af:31:e4:d5:95:77:85:3a:
21:fd:ba:31:f6:94:44:f8:d1:8e:26:ce:fe:a7:90:
53:3e:93:ec:24:ec:f1:57:10:d4:d0:2f:78:48:d7:
db:66:56:e4:d2:df:31:4a:0a:24:3c:a1:41:22:40:
11:d7:28:e1:2c:9d:bc:93:47:4f:56:9d:fe:45:fc:
08:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D4:DA:67:D5:0B:54:8D:1F:01:31:B5:A4:38:11:AE:FF:B4:DE:12
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/HNTaZ9ULVI0fATG1pDgRrv-03hI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.30.0/24
45.13.188.0/23
45.132.180.0/24
45.144.213.0/24
77.83.39.0/24
Signature Algorithm: sha256WithRSAEncryption
01:7c:cd:e5:15:cb:cf:11:df:0a:3d:07:bb:ba:7c:bd:68:04:
6b:81:da:66:e3:e9:d8:4a:de:99:92:10:b5:57:3f:fa:38:a7:
46:d4:57:53:b0:c9:04:48:de:d0:76:4e:d6:67:76:41:4c:f6:
1a:cf:f2:c0:6d:72:c2:ff:b8:36:16:53:a3:96:c5:98:b6:88:
a8:80:a3:8f:f6:82:ca:0f:83:f2:96:ab:c2:92:4d:68:26:9f:
3c:0f:65:38:1e:01:3f:3d:33:9e:87:da:24:a8:f0:40:ed:d5:
02:ae:96:44:4f:81:b1:62:bb:39:2c:22:a9:49:1b:60:05:bf:
83:7d:69:ab:bb:84:c9:d4:f3:0b:2f:6e:ba:3f:4e:02:1c:6f:
73:5d:c3:4d:e3:db:d2:e2:37:72:0e:bc:d9:91:8e:93:eb:9a:
3d:2c:05:fa:a0:17:e0:25:32:45:8e:e6:1c:04:e6:25:9e:1f:
53:be:24:09:f9:e0:da:a5:ca:13:b7:86:98:1c:54:6a:86:eb:
44:a1:1b:97:76:e4:c8:63:62:44:2d:c0:79:6e:84:2a:70:16:
64:5a:bc:59:6d:57:a9:2a:a7:31:1a:91:88:b4:bc:4c:33:c5:
b5:4a:83:e1:8f:18:91:bd:1f:a6:b4:29:af:76:d8:f8:2f:2e:
ea:69:62:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org