Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/a-zWYkS-K1g2BZyByYBcBNrinBs.roa
File: a-zWYkS-K1g2BZyByYBcBNrinBs.roa (raw, json)
Hash identifier: wTb25wr3LTTNk+QIM61lyqeyv7jn5LJC4/s8Sx3otGo=
Subject key identifier: 6B:EC:D6:62:44:BE:2B:58:36:05:9C:81:C9:80:5C:04:DA:E2:9C:1B
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 07BDD4D7
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/a-zWYkS-K1g2BZyByYBcBNrinBs.roa
Signing time: Wed 02 Mar 2022 06:45:53 +0000
ROA not before: Wed 02 Mar 2022 06:45:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209371
IP address blocks: 77.83.39.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
45.13.188.0/24 maxlen: 24
45.13.189.0/24 maxlen: 24
45.144.214.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129881303 (0x7bdd4d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 2 06:45:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6becd66244be2b5836059c81c9805c04dae29c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b1:31:69:83:a3:64:c0:37:75:fa:22:0e:35:
45:65:b8:e9:8d:d7:3a:57:93:10:f4:8c:57:07:6d:
88:37:a4:c1:c2:64:f7:aa:08:f3:06:82:7b:df:ce:
a5:48:57:b6:70:eb:0e:26:f6:63:8d:4c:6d:85:48:
b2:90:86:d4:6e:d3:83:93:75:61:67:96:de:65:50:
f8:f0:a0:9e:d8:b2:f8:aa:17:8c:5a:ce:13:b2:dc:
65:18:ea:89:27:53:26:96:f1:ec:2f:21:3b:f2:43:
2f:61:70:9f:aa:87:95:fe:38:3b:25:a3:bf:32:29:
6a:1a:f4:87:e0:da:75:4c:7d:55:3c:ef:0c:91:dc:
0c:8f:40:19:60:36:13:89:05:35:88:72:77:e3:93:
1d:49:99:9e:6d:1d:a3:30:d4:e2:3d:f3:a2:90:98:
29:c4:a5:df:b6:4e:eb:f4:7b:4e:c2:78:2f:97:fc:
81:ba:ae:23:aa:4b:8b:66:b0:48:7e:4b:35:40:49:
1f:4c:97:8c:17:02:55:90:00:f3:c9:c3:82:8d:6e:
2e:18:34:24:29:d0:03:47:53:50:2f:5d:bc:73:0c:
0c:32:93:9b:39:d7:72:66:06:39:77:05:02:2f:fd:
c8:79:3d:c5:db:5c:18:f6:2b:af:ac:66:e2:98:77:
bc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EC:D6:62:44:BE:2B:58:36:05:9C:81:C9:80:5C:04:DA:E2:9C:1B
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/a-zWYkS-K1g2BZyByYBcBNrinBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.188.0/23
45.88.136.0/24
45.132.181.0/24
45.144.214.0/24
77.83.39.0/24
193.30.241.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:6d:30:9e:de:53:0b:56:7a:b3:50:f9:a4:3d:d2:25:30:a2:
22:2c:a8:16:7e:79:61:8b:a5:e0:19:df:4e:39:37:96:b0:89:
6a:1f:e2:8e:1c:95:82:26:31:08:c0:f7:ea:ed:07:ca:2e:ce:
59:52:f3:4f:d6:2a:db:63:a4:1f:18:a3:f6:99:f8:97:b4:fb:
e4:33:b8:4a:a1:1f:d0:a5:64:40:ba:37:a6:45:e4:c7:14:c5:
f9:3c:20:87:7b:ad:e9:ea:b7:bf:bc:b0:18:73:a9:f6:ae:9a:
27:e5:eb:c7:16:12:3c:6d:23:28:4d:96:04:d9:6c:3a:4d:c7:
2e:5d:ce:8f:5a:be:33:47:f1:78:c6:67:e4:9c:26:fb:ab:07:
fd:02:c9:06:79:99:8e:65:12:a6:71:71:2e:e0:65:3c:91:0c:
a6:6e:95:22:e3:79:fe:8e:56:37:6d:e5:a6:04:9d:d0:36:12:
81:b3:02:88:ad:58:30:f1:e3:5c:8e:62:cc:d3:47:4c:65:80:
dd:36:7c:72:45:0d:3f:ba:de:26:b0:a4:6a:1c:47:2d:4e:07:
a9:7b:98:5e:cd:97:3c:23:fb:39:ea:2a:82:5b:e8:d0:5c:ba:
1f:c7:d0:ee:ee:54:03:7d:ce:49:75:fa:3b:af:f1:8b:f6:f0:
6a:de:02:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:20 2023 by rpki-client on console-ams.rpki-client.org