Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/LaH40IMVafVvXoJ1LmbxhWPz_CM.roa
File: LaH40IMVafVvXoJ1LmbxhWPz_CM.roa (raw, json)
Hash identifier: K4T9007u1rcL9oHWD9kr/knhxy8v0f09UBFJ1Vw/XpA=
Subject key identifier: 2D:A1:F8:D0:83:15:69:F5:6F:5E:82:75:2E:66:F1:85:63:F3:FC:23
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0183FC099C06260F575B86C8D53CE298B465
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/LaH40IMVafVvXoJ1LmbxhWPz_CM.roa
Signing time: Fri 21 Oct 2022 19:33:51 +0000
ROA not before: Fri 21 Oct 2022 19:33:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 45.151.2.0/24 maxlen: 24
45.151.0.0/23 maxlen: 24
5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2.56.108.0/22 maxlen: 24
45.88.139.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.13.191.0/24 maxlen: 24
45.94.168.0/22 maxlen: 24
45.144.215.0/24 maxlen: 24
45.144.214.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
85.209.123.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
85.209.121.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
77.83.38.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
45.138.180.0/22 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:fc:09:9c:06:26:0f:57:5b:86:c8:d5:3c:e2:98:b4:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 21 19:33:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2da1f8d0831569f56f5e82752e66f18563f3fc23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c4:a7:5f:65:ae:0f:26:cc:bb:d1:4b:05:7a:
01:60:72:8a:78:6e:3d:88:66:dd:c6:90:a0:c7:fb:
fc:95:99:39:b8:16:68:64:fc:35:27:a4:5c:f3:38:
96:98:bf:ec:f7:9c:c9:30:5e:e4:41:2a:90:6e:0c:
10:86:3c:2c:2a:ce:24:26:7d:35:f9:d9:c1:9c:23:
69:f3:92:67:dc:3c:ab:22:05:86:9f:80:0a:5c:f2:
a3:f9:1c:e0:09:8a:66:27:50:60:67:ae:1f:5a:b2:
fb:50:c6:f7:66:83:72:e3:36:f7:e9:1a:22:ab:8d:
17:e9:14:65:d9:61:d0:41:f4:77:63:f5:29:84:e5:
36:7b:df:81:c9:08:56:0b:b0:b1:89:bf:55:55:a8:
3e:fc:4e:ea:41:47:cb:2e:44:4a:f9:ec:a0:e1:63:
3d:64:f2:9f:7f:02:ee:93:da:30:9b:69:82:ea:94:
f3:de:4c:d9:ca:3b:f9:13:48:b7:73:a5:9d:22:31:
61:06:e9:8f:a5:d6:6b:b5:3c:a0:04:4e:b2:80:56:
a3:20:df:1f:68:17:40:83:e9:05:27:c6:21:80:e3:
a3:1c:1a:bf:fe:3f:26:c4:b2:02:fc:ce:4b:a5:31:
7a:db:cb:bb:8c:87:bd:ef:c7:39:00:ab:86:f4:b9:
bb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A1:F8:D0:83:15:69:F5:6F:5E:82:75:2E:66:F1:85:63:F3:FC:23
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/LaH40IMVafVvXoJ1LmbxhWPz_CM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
5.181.87.0/24
45.9.29.0/24
45.13.191.0/24
45.81.112.0/22
45.88.139.0/24
45.94.168.0/22
45.132.181.0/24
45.138.180.0/22
45.144.212.0/22
45.151.0.0-45.151.2.255
77.83.37.0-77.83.39.255
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/22
193.57.41.0/24
193.57.43.0/24
194.242.96.0/22
195.62.24.0/24
195.177.92.0/22
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
9e:73:30:8d:f4:95:d0:f1:73:4c:e7:b7:f1:46:ef:9a:c0:a3:
ed:3c:ef:0c:de:b1:c2:ad:7a:aa:93:8b:a2:10:6b:ba:f6:01:
2e:9a:44:78:c5:cb:ec:04:3e:96:7f:8b:fe:7e:18:bd:c3:8c:
42:47:a5:55:c8:5c:e7:10:b4:53:64:45:8a:fd:95:67:ef:56:
18:22:56:2b:cf:6f:8c:2a:b3:20:bf:e0:12:fd:ab:d5:10:6f:
79:a7:96:77:66:8c:ab:33:51:97:96:53:82:3d:b1:17:25:a6:
13:26:65:b0:31:c9:90:10:8c:15:69:ac:b2:90:73:eb:da:e7:
e3:d3:a2:56:38:42:3b:f6:ac:3a:1a:1c:b0:40:b7:1c:ab:a2:
bc:b0:cb:e3:2e:d7:ad:ce:76:8e:eb:24:c4:00:f0:a3:46:fe:
b1:a5:b3:7c:c7:6d:81:58:e2:1a:6b:37:39:f8:21:06:9d:4e:
bb:22:ee:2a:8c:4a:1b:bc:65:88:7e:21:f5:d0:a7:46:de:3c:
a7:c1:4a:ad:7b:23:35:5e:4e:09:c6:a0:cb:05:6d:75:3a:7d:
3a:b7:6a:dc:b6:73:3d:a4:77:88:7f:b8:f0:a0:19:7c:1c:e1:
cf:06:f9:55:94:08:50:1f:cb:18:1c:f1:88:53:0d:9c:f7:cc:
37:10:98:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:32 2023 by rpki-client on console-fra.rpki-client.org