Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/P4xs1H5X6f-po7D-I3_y6IMqSzw.roa
File: P4xs1H5X6f-po7D-I3_y6IMqSzw.roa (raw, json)
Hash identifier: rqMDQn2dCuMQBb1WqYnC/RJg1tWiHeK53k1tWuqSg9Q=
Subject key identifier: 3F:8C:6C:D4:7E:57:E9:FF:A9:A3:B0:FE:23:7F:F2:E8:83:2A:4B:3C
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01845BAD7179EA85EDB45E12CA89AE40964A
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/P4xs1H5X6f-po7D-I3_y6IMqSzw.roa
Signing time: Wed 09 Nov 2022 09:16:44 +0000
ROA not before: Wed 09 Nov 2022 09:16:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 45.9.30.0/24 maxlen: 24
45.13.189.0/24 maxlen: 24
45.13.188.0/24 maxlen: 24
194.15.53.0/24 maxlen: 24
194.15.52.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:5b:ad:71:79:ea:85:ed:b4:5e:12:ca:89:ae:40:96:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 9 09:16:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3f8c6cd47e57e9ffa9a3b0fe237ff2e8832a4b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:26:59:2f:d8:78:19:2a:00:5b:38:f8:d3:dc:
4c:f6:b6:61:ed:b9:bf:12:1e:00:e6:64:b2:29:cc:
10:51:42:9c:f0:1c:84:cb:ae:bd:e6:12:bc:a3:d8:
f2:51:57:82:67:5f:2b:c9:7d:81:2c:e7:d5:67:97:
c3:8b:69:64:da:99:1b:81:1d:19:57:51:3b:c7:bd:
4b:69:d9:20:66:0c:0e:75:51:57:66:df:d7:ea:2c:
88:4d:f7:fd:3a:b2:d9:b5:ce:ab:6f:60:c6:15:69:
0d:ab:ef:f3:a1:b4:0e:19:8a:58:1a:61:df:8c:59:
06:d1:11:93:8a:2d:ec:c6:88:02:bd:47:62:ff:60:
9c:56:23:eb:98:02:0d:7f:b7:76:77:5a:2d:b8:1b:
c4:98:9d:f4:86:e8:8a:f7:b5:b2:93:86:e8:d2:6c:
92:4e:ad:9e:ee:f4:5d:79:6b:8d:24:fa:fc:a0:bd:
4b:7a:fd:18:8d:86:fc:dc:b9:42:76:d2:c3:e6:74:
ad:42:c4:93:48:d3:62:77:42:62:85:ae:46:24:2e:
66:42:8f:67:64:df:0c:df:71:c5:2a:2e:43:18:45:
28:36:bf:c6:16:cd:39:a8:79:f1:60:8a:0f:31:84:
80:43:5b:93:99:a0:97:07:f0:e7:c0:6e:31:79:2d:
d9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8C:6C:D4:7E:57:E9:FF:A9:A3:B0:FE:23:7F:F2:E8:83:2A:4B:3C
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/P4xs1H5X6f-po7D-I3_y6IMqSzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.30.0/24
45.13.188.0/23
45.88.137.0/24
45.132.180.0/24
194.15.52.0/23
Signature Algorithm: sha256WithRSAEncryption
95:9b:20:b6:27:4b:40:14:c0:00:69:12:ae:e0:88:78:d7:57:
59:a7:dd:7e:ff:de:ad:73:f2:b5:0f:ca:3e:b4:68:98:1e:20:
53:56:41:87:5d:22:03:fd:15:b5:08:ca:42:63:46:fe:cf:0e:
93:3e:73:1d:33:42:e7:5e:1e:aa:50:77:44:60:03:fb:53:a8:
9a:7e:37:ed:be:41:87:23:7f:a6:f4:cf:f4:d0:f6:9d:b5:e0:
bf:41:97:d7:33:dc:7f:f8:da:87:ad:11:28:4c:19:18:82:4b:
04:a7:a0:89:e1:9d:7b:e6:5d:e5:a0:d3:60:5e:58:bc:15:70:
93:8b:bc:4e:75:e0:8e:9e:57:87:4e:d3:5d:d0:17:c6:08:5e:
ab:76:e1:b8:31:58:3d:aa:da:4b:cd:ef:d7:13:5c:aa:29:82:
20:55:d3:30:29:ab:f8:2a:e0:d8:73:9e:9a:e0:ee:fe:31:6b:
01:1b:88:9c:8a:86:78:0d:3f:2d:43:ef:f8:53:02:98:1e:61:
ba:18:19:32:88:7d:4c:92:a9:24:22:ac:a4:a1:37:c4:0b:24:
10:2c:fc:e6:b8:6f:7c:87:42:58:46:6c:f1:81:d9:8f:cc:cb:
0c:5e:1e:68:b3:2d:8e:0c:86:ce:92:75:ff:80:9b:f2:0b:e8:
21:11:cf:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org