Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/NeuZxTrwI3SW8oT7Vv1-T0D_P6Q.roa
File: NeuZxTrwI3SW8oT7Vv1-T0D_P6Q.roa (raw, json)
Hash identifier: ZKi8NZbPHpelrfyd9cuo8GF28BWr7ljBv4uvDiQhRXk=
Subject key identifier: 35:EB:99:C5:3A:F0:23:74:96:F2:84:FB:56:FD:7E:4F:40:FF:3F:A4
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 07224EAD
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/NeuZxTrwI3SW8oT7Vv1-T0D_P6Q.roa
Signing time: Sun 09 Jan 2022 19:30:16 +0000
ROA not before: Sun 09 Jan 2022 19:30:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43260
IP address blocks: 45.88.138.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119688877 (0x7224ead)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 9 19:30:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=35eb99c53af0237496f284fb56fd7e4f40ff3fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:66:12:ee:de:ae:5e:01:28:7d:12:6b:5c:28:
ed:7b:de:f8:d7:66:c4:e0:37:e5:73:5c:14:a1:94:
f3:35:10:15:11:9b:de:d1:39:fe:3b:34:a8:b0:79:
ea:de:b8:5d:a4:9d:b3:13:2c:59:4f:b0:94:31:e0:
57:98:f7:cb:c1:53:96:70:dd:fd:ef:48:05:76:9b:
9b:43:eb:1e:52:10:bd:63:97:18:9e:da:8a:94:05:
b3:2f:d4:03:b9:b0:21:8a:38:12:b0:43:8f:3d:bd:
2b:35:46:a0:c0:f2:78:f1:00:4b:6a:eb:4b:6b:01:
96:01:c8:6c:da:e5:0c:1d:59:4f:1e:e6:c2:36:4d:
79:1a:ee:50:c3:86:0a:2a:a2:67:36:fc:ec:8f:d1:
2f:ff:7b:20:30:f1:e6:ca:be:b1:45:02:71:52:a8:
d6:5e:34:0b:f1:1a:f2:4a:b8:1f:41:aa:6a:3e:50:
7c:fc:df:8f:fe:1a:a4:c1:44:21:f0:c3:4c:21:0f:
26:f5:4c:43:2c:7e:2b:7e:c3:4c:56:0d:b2:a9:c2:
a8:33:05:e1:ca:e2:85:41:75:0b:7f:0f:58:4d:f5:
fb:b4:70:25:79:da:71:89:c6:5f:31:da:32:98:0f:
cc:d8:78:b1:67:53:d0:f7:6b:77:b7:6e:d3:bc:a7:
98:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EB:99:C5:3A:F0:23:74:96:F2:84:FB:56:FD:7E:4F:40:FF:3F:A4
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/NeuZxTrwI3SW8oT7Vv1-T0D_P6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.138.0/23
77.83.37.0-77.83.38.255
Signature Algorithm: sha256WithRSAEncryption
84:79:55:22:c5:6d:b3:e9:03:ea:f2:59:f9:ec:af:ff:16:d8:
65:0f:94:16:6b:f1:53:fa:63:f2:2a:f4:28:7b:d1:ce:4c:5c:
eb:cc:fb:00:2b:7d:de:20:2e:7e:4d:af:02:de:a8:89:0d:00:
66:31:b3:04:9d:b0:0b:8d:e4:48:c0:30:91:d3:c6:d6:fd:3b:
41:44:53:40:1c:9a:b5:74:f8:0e:c5:82:63:af:af:99:64:6f:
4c:b1:b2:7f:16:17:81:14:30:80:27:93:e4:d2:40:6a:de:a6:
25:91:e5:7e:72:03:6e:ae:d4:b6:db:71:a7:b9:50:06:e2:3a:
a7:2b:06:40:e6:52:5d:70:7c:fd:2c:6e:c0:7f:08:38:d9:4a:
ea:da:e0:ab:67:c5:6c:f0:6f:94:10:43:ff:68:c5:9b:ea:05:
2a:82:05:93:73:8b:57:2d:8d:34:97:12:68:13:fa:97:eb:a4:
ae:1e:bf:46:26:09:6a:e9:03:19:73:a2:2f:95:aa:8f:3d:af:
43:d0:16:7b:1c:3d:3f:5d:e8:01:64:30:a7:78:c5:39:1c:1d:
22:62:8e:8e:91:47:f7:04:12:d9:fa:17:3c:d9:1e:20:93:8c:
be:86:da:be:e9:5d:82:a6:26:51:7b:0e:4a:a4:ea:6c:f7:8e:
c5:db:25:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org