Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ezxjTlCvxM0oRwLE6T3EdHJ85Lk.roa
File: ezxjTlCvxM0oRwLE6T3EdHJ85Lk.roa (raw, json)
Hash identifier: B6LGufD9PqH7l5xzwLovqhY9hD57RA7fbN28z5GqJQU=
Subject key identifier: 7B:3C:63:4E:50:AF:C4:CD:28:47:02:C4:E9:3D:C4:74:72:7C:E4:B9
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 082FDB15
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ezxjTlCvxM0oRwLE6T3EdHJ85Lk.roa
Signing time: Tue 12 Apr 2022 17:03:35 +0000
ROA not before: Tue 12 Apr 2022 17:03:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 45.13.188.0/24 maxlen: 24
45.13.189.0/24 maxlen: 24
45.13.191.0/24 maxlen: 24
45.151.0.0/23 maxlen: 24
45.151.2.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
45.144.215.0/24 maxlen: 24
45.144.214.0/24 maxlen: 24
2.56.108.0/22 maxlen: 24
194.15.52.0/23 maxlen: 24
45.88.136.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
85.209.120.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
85.209.121.0/24 maxlen: 24
85.209.123.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
195.177.95.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137354005 (0x82fdb15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Apr 12 17:03:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=7b3c634e50afc4cd284702c4e93dc474727ce4b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:98:4a:4a:7e:14:9e:02:ab:8b:b7:de:dd:4e:
ea:07:0c:21:69:ef:2b:02:66:f5:42:ae:4b:48:40:
a6:ec:38:dc:f4:16:9a:05:b6:01:db:a1:0f:46:8a:
6e:ee:97:3f:fd:48:5f:f5:10:bc:df:5f:27:3e:0b:
64:e1:de:74:f3:02:46:2f:c8:67:eb:24:8f:d5:ae:
3b:da:05:86:43:1b:86:14:e4:d3:bb:e6:76:12:78:
3a:ff:32:de:86:e1:32:22:e7:09:6c:0d:fc:86:58:
dc:c0:5b:62:9b:fb:3f:f1:b3:f8:6a:46:c5:9d:22:
f3:28:82:70:c2:ef:1d:f1:17:75:04:24:0d:cc:16:
2d:57:29:e3:c9:80:b6:0f:4c:ca:25:a7:32:fd:e5:
60:d8:65:df:60:89:ae:e6:dc:37:d1:90:93:b5:d8:
ae:a1:cd:0e:5e:85:34:91:d0:e9:a0:16:eb:0a:7c:
d0:6e:c8:d6:b1:8d:fb:55:33:23:c5:cb:d1:33:08:
0a:97:d1:36:1a:1a:d6:87:6d:59:6e:0c:f6:a7:35:
dd:fa:51:c5:a3:b4:ca:6f:f2:67:e7:f0:fb:df:75:
3f:9b:f5:a7:97:f3:e9:52:17:34:db:d6:dc:0c:d1:
8a:74:90:cf:b9:65:00:7e:57:c1:61:84:11:45:5e:
6b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:3C:63:4E:50:AF:C4:CD:28:47:02:C4:E9:3D:C4:74:72:7C:E4:B9
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ezxjTlCvxM0oRwLE6T3EdHJ85Lk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
45.13.188.0/23
45.13.191.0/24
45.88.136.0/22
45.132.182.0/23
45.144.213.0-45.144.215.255
45.151.0.0-45.151.2.255
77.83.38.0/23
85.209.120.0/22
194.15.52.0/23
195.62.24.0/24
195.177.95.0/24
195.211.188.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:1e:2b:70:3e:b7:b2:15:64:50:81:88:c3:41:4e:89:77:3d:
27:eb:2d:8a:83:56:3d:3a:96:d3:58:5d:90:06:42:2c:cc:49:
19:b8:c7:e6:d0:41:1c:b9:12:98:44:75:78:1b:60:75:e9:c5:
b5:c4:fb:a2:71:ef:8b:5f:7f:ca:2c:b0:d5:bf:68:03:1c:32:
ca:58:4a:33:49:c5:19:d9:ea:89:56:52:3d:49:18:40:df:4d:
b6:b6:8b:ad:d8:ac:50:b2:de:79:7a:37:75:10:3e:8d:9d:c1:
ed:e5:75:06:1a:64:aa:75:1d:c3:c0:59:96:24:d3:ad:84:8f:
4a:a4:fd:63:26:35:d8:0b:c2:51:c1:e4:46:a2:bd:cf:0b:19:
3b:a1:cc:d9:d5:02:5e:09:83:9b:2f:cc:6f:74:d7:6b:f5:ad:
3d:4e:c3:72:53:8a:4b:e1:45:ce:45:24:43:41:a7:34:30:d9:
f8:0a:31:ce:b0:9a:f1:0f:ba:ea:fc:08:04:f3:11:d5:f3:fa:
07:d3:a2:4c:dd:88:c6:ed:3e:c9:7d:c7:9d:ea:65:be:ca:55:
1c:1c:b1:31:ed:e7:df:d1:ef:62:5b:31:45:d3:a9:53:d4:46:
2f:fe:fc:18:8a:14:19:f1:dd:b0:0d:d9:03:23:72:ec:d1:4e:
88:ea:d8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:21 2023 by rpki-client on console-ams.rpki-client.org