Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/UfROTs6KOGOLEPyPJBl-itzn13k.roa
File: UfROTs6KOGOLEPyPJBl-itzn13k.roa (raw, json)
Hash identifier: EAs2GpAmIBcfaF41yBe8DcX+wZmhp7YL3Not4IlDqXw=
Subject key identifier: 51:F4:4E:4E:CE:8A:38:63:8B:10:FC:8F:24:19:7E:8A:DC:E7:D7:79
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0762867E
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/UfROTs6KOGOLEPyPJBl-itzn13k.roa
Signing time: Tue 01 Feb 2022 12:24:24 +0000
ROA not before: Tue 01 Feb 2022 12:24:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 195.211.190.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
85.209.123.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
85.209.120.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123897470 (0x762867e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Feb 1 12:24:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=51f44e4ece8a38638b10fc8f24197e8adce7d779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:08:a9:f6:9a:89:95:fd:8f:f9:b9:98:0b:0e:
8f:ca:c4:dc:8d:4e:16:31:ce:25:dd:c5:61:68:08:
80:bb:a1:de:05:ba:81:33:78:9b:28:30:a9:3f:b5:
a5:ed:b5:41:0c:9e:66:83:d5:01:3f:54:d0:d9:c0:
ec:fd:74:78:bd:97:65:6a:db:25:3d:07:99:22:df:
e5:4c:2b:2e:f1:31:5b:b8:67:7c:c8:25:e7:50:a7:
e0:3d:17:59:c1:d2:a6:ed:c9:67:86:bb:a9:af:d3:
c3:bd:59:48:72:a5:52:a2:44:30:c9:d2:a1:d9:b3:
3c:3e:85:96:23:24:9f:fc:e1:96:83:73:b9:72:aa:
54:03:e7:42:87:1e:32:d3:cd:a0:af:90:de:4c:fe:
82:cc:fc:09:12:b3:50:55:d8:b5:c2:46:5e:bf:62:
31:11:8a:35:53:9e:ea:20:bd:72:98:01:b3:a0:d4:
f4:52:b2:db:3e:7f:74:75:a9:41:66:6c:8a:3c:be:
f7:c4:56:76:af:88:a7:8a:bf:27:1e:3e:d7:1f:29:
47:05:1a:31:e9:e1:af:fd:d4:91:8a:cf:aa:ff:d0:
33:d7:67:04:19:e7:3b:f1:80:46:a4:a2:16:0c:10:
a1:c1:ce:f4:d1:a1:69:19:a1:29:fd:f9:38:7a:5d:
c4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:F4:4E:4E:CE:8A:38:63:8B:10:FC:8F:24:19:7E:8A:DC:E7:D7:79
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/UfROTs6KOGOLEPyPJBl-itzn13k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.29.0/24
45.88.137.0/24
45.88.139.0/24
45.144.212.0/23
85.209.120.0/24
85.209.122.0/23
185.43.248.0/23
185.43.251.0/24
185.200.62.0/24
193.30.240.0/22
193.57.41.0/24
193.57.43.0/24
194.242.96.0/22
195.62.24.0/24
195.177.93.0/24
195.177.95.0/24
195.211.190.0/24
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
92:9d:30:b7:a8:00:49:29:ce:bc:54:f5:8f:50:9a:20:bc:ce:
be:79:96:08:36:ef:9f:6d:35:46:72:1a:ca:f3:3f:a7:33:2e:
80:c2:bb:72:8d:e9:03:c7:c1:a4:ab:59:1f:59:6a:f6:07:b7:
35:6c:db:a2:63:a6:2c:b4:2a:a1:97:09:96:ea:55:d5:24:ae:
f8:cd:4d:e3:11:9c:0e:ce:9b:d3:d8:be:f0:12:d3:e4:7b:42:
a5:ba:52:3f:3f:1e:31:6e:1d:3f:84:cb:00:2e:60:18:6a:7e:
38:7b:47:25:04:fd:23:7e:5d:52:c2:56:8c:98:5e:78:0a:f3:
02:8a:64:bc:e4:bd:ec:2e:a2:82:f2:61:66:a6:37:ac:2b:f3:
c8:a2:40:af:35:2a:0a:a1:b6:5c:3d:0c:cc:42:1d:10:d9:47:
de:17:ce:1d:4f:29:73:82:d7:3a:61:51:2d:db:ae:18:b2:57:
21:ed:d5:a9:7c:7b:25:7a:0a:0a:70:21:5e:dc:15:de:ee:28:
74:6f:96:2b:1b:0a:22:2d:9a:0f:71:64:fb:83:57:2f:5f:6a:
d7:1f:59:ba:9d:18:25:3d:be:23:46:0f:61:ff:b1:8d:d9:68:
d8:fa:9d:74:2b:9e:b7:39:32:36:4f:7c:35:5b:f4:dc:44:d3:
af:cc:95:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org