Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/MlPsl0beKiyPnfnM5N3CVYLlkk0.roa
File: MlPsl0beKiyPnfnM5N3CVYLlkk0.roa (raw, json)
Hash identifier: /fWYl9DmzQ7JUPWkDajliBFIBPyvzMtoxN5bZ/mtwD8=
Subject key identifier: 32:53:EC:97:46:DE:2A:2C:8F:9D:F9:CC:E4:DD:C2:55:82:E5:92:4D
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018408FDA6AA65F1C0F5C2DA89FA0708FF18
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/MlPsl0beKiyPnfnM5N3CVYLlkk0.roa
Signing time: Mon 24 Oct 2022 07:55:51 +0000
ROA not before: Mon 24 Oct 2022 07:55:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 45.13.191.0/24 maxlen: 24
45.151.0.0/23 maxlen: 23
45.151.2.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
2.56.108.0/22 maxlen: 22
45.88.136.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
85.209.120.0/23 maxlen: 23
45.132.182.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
45.138.180.0/22 maxlen: 24
77.83.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:08:fd:a6:aa:65:f1:c0:f5:c2:da:89:fa:07:08:ff:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 24 07:55:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3253ec9746de2a2c8f9df9cce4ddc25582e5924d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:45:da:fc:85:df:f5:b3:8c:18:10:e2:33:17:
5a:11:da:0e:d9:9d:de:c0:d7:49:33:a5:7b:d7:0e:
38:f1:f3:5c:b4:c2:5f:c7:35:6c:ce:d0:28:8e:ac:
aa:12:14:3c:14:90:19:c2:c3:fd:9c:57:ea:12:34:
f3:bd:b0:c0:46:66:9d:24:ab:55:34:77:2c:8f:12:
67:02:c0:31:62:78:8b:51:d1:b9:3d:98:e5:57:55:
4a:cc:13:e3:5e:c1:97:e8:4e:22:89:d8:8b:5c:9a:
fa:7f:92:02:4c:38:d6:6a:ec:8e:c6:7b:33:f9:0f:
ea:3e:47:aa:fe:8f:30:0e:34:80:22:e9:8d:cb:df:
74:f0:51:04:14:a4:f2:61:af:d3:e5:5b:aa:1f:35:
ad:64:22:08:56:ca:9d:2b:20:d2:ec:ea:e5:e4:c8:
fb:d9:3e:c3:26:2c:3a:13:32:bb:db:9f:02:7e:db:
4e:e5:1f:34:ec:1c:a1:29:32:54:8e:44:fb:c4:81:
6b:d6:94:50:92:b4:99:28:28:ea:64:c1:af:bd:8f:
64:ad:07:be:53:bd:4a:f1:55:30:fa:e3:9c:d3:19:
1e:6b:0a:9d:3a:b8:b6:5b:cb:bd:47:e4:37:7e:3b:
c1:5e:11:9d:4b:73:82:c3:0b:41:2c:bd:c8:13:bc:
8f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:53:EC:97:46:DE:2A:2C:8F:9D:F9:CC:E4:DD:C2:55:82:E5:92:4D
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/MlPsl0beKiyPnfnM5N3CVYLlkk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
45.13.191.0/24
45.88.136.0/24
45.88.139.0/24
45.132.182.0/24
45.138.180.0/22
45.151.0.0-45.151.2.255
77.83.37.0/24
85.209.120.0/23
193.30.241.0/24
195.177.94.0/24
195.211.188.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:08:74:00:29:0c:c1:6c:75:cd:14:57:86:d4:9a:d1:79:97:
6d:63:da:7a:c2:e5:33:27:41:a8:61:37:25:5d:31:49:a5:90:
16:6f:f0:41:21:47:10:67:a4:01:27:ed:4f:b3:47:7f:94:7c:
f5:75:3a:98:5d:ed:5f:19:ce:7c:43:37:2a:d0:8a:0e:b0:7f:
08:a5:a3:74:31:01:d0:32:5f:66:ed:f6:1d:c1:d9:f9:1a:e2:
7a:6b:a2:d3:eb:08:38:bc:00:b4:0f:38:01:80:27:c6:48:56:
ae:d3:61:74:a5:88:07:10:80:0e:89:e8:6f:30:83:09:66:c1:
0f:f7:4e:fa:08:da:16:27:b8:ca:0c:40:23:64:fa:81:cb:e0:
e7:9a:3a:d1:fb:d1:d7:e0:cf:2b:6e:a6:6d:83:6f:7a:57:b4:
11:38:83:68:6a:35:3a:26:83:4c:ba:b9:21:25:4e:05:c7:ae:
cd:86:90:cb:1f:63:d6:23:ba:83:f4:25:d4:9d:22:43:ef:e3:
75:c0:f1:ae:0d:4f:4d:32:4f:65:01:c6:fc:a9:ed:2c:e5:4a:
1b:c1:b8:e4:65:a2:22:ce:b5:43:b3:d8:c1:ab:5b:31:30:c9:
35:17:ce:0e:15:6c:77:5e:3d:46:98:cb:b1:bf:40:6e:01:fd:
b5:4d:3b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:32 2023 by rpki-client on console-fra.rpki-client.org