Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Zj2FYefQxbgGxDIaOmPkfNJ_CGQ.roa
File: Zj2FYefQxbgGxDIaOmPkfNJ_CGQ.roa (raw, json)
Hash identifier: ArrN2pzZccdDQtZAneSLr54206QViw1M/R9ie692Jb0=
Subject key identifier: 66:3D:85:61:E7:D0:C5:B8:06:C4:32:1A:3A:63:E4:7C:D2:7F:08:64
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 018558B121114201E944632732F9F51CA7AF
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Zj2FYefQxbgGxDIaOmPkfNJ_CGQ.roa
Signing time: Wed 28 Dec 2022 12:24:41 +0000
ROA not before: Wed 28 Dec 2022 12:24:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 45.13.190.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
5.181.84.0/24 maxlen: 24
5.181.85.0/24 maxlen: 24
5.181.87.0/24 maxlen: 24
45.88.136.0/23 maxlen: 24
85.209.122.0/23 maxlen: 24
194.242.97.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:58:b1:21:11:42:01:e9:44:63:27:32:f9:f5:1c:a7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Dec 28 12:24:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=663d8561e7d0c5b806c4321a3a63e47cd27f0864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:06:1b:09:98:b8:04:6b:55:30:2c:1d:12:71:
7c:f9:34:a7:44:69:55:b0:3b:cf:98:f2:ab:57:90:
ab:1b:0d:b8:b3:02:21:70:a9:b5:5b:34:29:82:ed:
0b:2e:a6:4d:f8:4a:cc:04:c8:ec:a9:b2:b6:9a:7e:
a3:c6:e8:eb:21:51:1c:ea:ca:a2:ab:aa:17:26:ea:
e0:15:06:6a:33:ed:62:98:31:34:96:ab:b0:dc:2c:
69:24:aa:fd:38:77:10:80:36:be:d4:37:8d:45:5a:
21:51:89:43:9a:47:c7:b3:e6:48:17:d0:0c:08:6a:
d1:de:b1:1b:2e:6e:48:66:27:f2:b9:8b:2a:3f:b4:
74:73:23:10:37:cf:e5:55:f6:23:15:75:31:63:19:
a1:7c:7d:3e:d5:ac:d4:b4:d3:cb:1e:94:7d:e3:bf:
e8:74:0e:43:a0:48:1f:ce:da:80:a6:34:ff:2f:13:
28:0d:e5:3e:f4:92:81:82:43:1c:f0:e0:99:10:7d:
c1:05:56:9c:8e:ac:dd:d1:c6:2f:63:56:61:63:6c:
a6:e7:f0:1a:7a:1e:b1:1a:93:a1:0a:89:4e:d3:e0:
cc:21:36:e9:04:94:32:21:19:c5:40:44:7d:1f:77:
90:f7:db:f3:f5:76:48:11:e7:f5:f9:32:03:2b:a3:
22:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:3D:85:61:E7:D0:C5:B8:06:C4:32:1A:3A:63:E4:7C:D2:7F:08:64
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Zj2FYefQxbgGxDIaOmPkfNJ_CGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/23
5.181.87.0/24
45.13.190.0/24
45.81.112.0/22
45.88.136.0/23
45.132.181.0-45.132.183.255
45.144.212.0/24
45.151.3.0/24
85.209.122.0/23
194.242.97.0/24
195.177.92.0/23
Signature Algorithm: sha256WithRSAEncryption
54:a1:04:6d:35:c4:b2:aa:4f:29:23:db:7c:c6:b4:2c:e8:29:
a2:ae:9f:e1:9c:08:e7:fa:85:bc:16:bd:67:77:bb:ff:cf:b1:
a9:8e:0e:ac:90:9f:88:1b:9a:a6:4b:af:04:5b:ff:14:54:66:
6f:c5:aa:53:d6:85:75:04:b3:e3:94:bc:5b:5a:9e:75:2c:90:
db:e4:40:b7:a1:05:d5:39:d1:ec:00:e9:de:0e:4e:b3:ff:6a:
da:b5:82:6d:c8:dd:7f:42:07:ee:48:6d:60:d4:8a:3a:bd:b3:
b4:4d:ac:99:53:18:3c:9d:91:96:5f:b3:40:52:5c:21:3a:30:
cc:65:27:a7:2d:d4:cc:ce:18:81:fd:6b:78:d5:ea:1d:bc:9e:
e5:07:ba:a4:b1:0d:fc:84:1a:ec:e7:7b:4b:46:50:2c:36:00:
b8:85:7c:29:ca:00:09:64:9a:7a:26:0e:4f:fb:06:37:14:af:
6b:0c:40:93:d4:8c:8a:df:9f:af:56:c8:4b:f5:38:cf:c4:17:
ec:42:ed:d5:0b:19:1b:3f:bf:ae:f5:a6:10:1b:e6:b6:30:a2:
78:d4:24:8b:c1:bd:3d:f4:78:5d:3c:37:c6:5d:b4:a6:56:29:
69:fa:78:84:22:c5:c7:39:8b:2a:ea:e5:f2:ef:8e:0e:59:e1:
c3:3d:26:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:32 2023 by rpki-client on console-fra.rpki-client.org