Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Y-j3P0ks9U1S94ozC4eyX1DdQAA.roa
File: Y-j3P0ks9U1S94ozC4eyX1DdQAA.roa (raw, json)
Hash identifier: AkhR5IC87w8Cp3xCMxkBxAY2+WNqdjNr1rJ6Zw5dIaE=
Subject key identifier: 63:E8:F7:3F:49:2C:F5:4D:52:F7:8A:33:0B:87:B2:5F:50:DD:40:00
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 078F7F06
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Y-j3P0ks9U1S94ozC4eyX1DdQAA.roa
Signing time: Wed 16 Feb 2022 13:25:05 +0000
ROA not before: Wed 16 Feb 2022 13:25:05 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 45.13.190.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
5.181.84.0/24 maxlen: 24
5.181.85.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 126844678 (0x78f7f06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Feb 16 13:25:05 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63e8f73f492cf54d52f78a330b87b25f50dd4000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:10:30:ae:44:cd:f7:99:f0:ff:58:49:73:c1:
db:b2:a2:67:86:a8:df:f2:68:d2:fa:e6:77:a0:ce:
1d:bb:5b:c0:ec:ef:65:7b:5e:e2:5b:1c:6b:3a:54:
14:60:5f:2c:5a:94:05:d2:59:07:67:fe:48:4f:d8:
5a:fd:91:f6:de:f9:b7:fe:29:41:2d:88:64:ac:b1:
a4:d3:8a:b0:d8:87:cc:6a:4b:8e:4e:25:71:ca:08:
69:43:c6:b0:04:b9:45:00:b7:23:fc:a6:ad:ce:1d:
c1:66:ac:2c:d0:b5:97:5f:e1:e0:33:0e:e2:ee:63:
c5:e4:bb:8b:6a:64:18:30:50:81:fa:b3:5b:5a:e5:
68:77:51:46:fb:ee:e7:29:33:fc:1d:f8:30:ee:02:
32:a1:92:48:db:60:07:f7:e0:b9:a6:48:7f:c9:16:
8e:0c:60:d4:6f:31:c5:84:0d:a3:64:a9:98:ca:2e:
81:53:4d:d3:9e:d5:31:4e:eb:23:aa:5d:9f:03:34:
1f:bb:ed:82:25:e5:40:be:5a:e3:51:e6:b4:d2:ce:
b1:a0:c1:44:4b:16:30:db:af:4c:2b:e4:b9:b8:03:
66:7f:e3:f5:7d:e3:2e:3f:85:9b:d9:38:01:a7:97:
42:15:04:f5:f7:e8:15:aa:76:78:9a:7a:53:a1:e8:
f6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E8:F7:3F:49:2C:F5:4D:52:F7:8A:33:0B:87:B2:5F:50:DD:40:00
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Y-j3P0ks9U1S94ozC4eyX1DdQAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/23
45.13.190.0/24
45.144.212.0/24
45.151.3.0/24
Signature Algorithm: sha256WithRSAEncryption
84:f9:10:c9:20:12:65:6e:dc:e5:e1:bd:0a:9d:21:47:4c:4a:
03:f3:ee:60:34:cb:bf:f7:e2:ab:15:34:04:35:aa:cc:2c:7a:
80:cc:33:41:9f:d2:cf:f4:84:76:c9:5c:3a:15:ac:30:d4:07:
9b:e8:5b:bd:0c:3f:f8:03:44:e3:11:75:d8:85:c1:83:a7:aa:
34:06:42:4a:c0:28:a6:1c:ba:40:a9:1d:77:28:c0:53:a2:7c:
eb:43:99:69:fc:93:79:63:c7:86:82:af:86:e1:1b:8c:51:fa:
8b:e7:e3:f5:85:c9:43:91:dd:4f:78:6b:f6:13:54:29:50:6e:
69:ab:3c:f3:a9:5b:e7:e6:44:33:34:9d:a6:4f:6c:3f:c1:8e:
94:9d:2f:68:c9:48:7a:ac:b5:d7:a5:57:5f:11:c0:56:2c:86:
5a:05:e9:1f:c5:4d:12:9c:96:b6:18:44:b9:e5:dd:cb:51:ad:
5c:51:3b:40:03:9e:19:3d:a0:e3:90:6e:f4:7e:e3:08:1d:73:
fc:ed:45:5f:48:79:c9:bb:84:74:62:e4:b8:86:99:0e:f2:1d:
5d:b2:d2:85:68:84:8e:a9:52:a9:06:fb:ab:f8:e5:29:b9:f3:
f7:e0:3b:d4:d4:93:c9:b0:ed:6b:5d:59:74:22:0b:89:85:da:
4e:00:9c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:32 2023 by rpki-client on console-fra.rpki-client.org