Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/gKdPlMECE7VNPoVMwRTo2A9PNRI.roa
File: gKdPlMECE7VNPoVMwRTo2A9PNRI.roa (raw, json)
Hash identifier: myESosMvRQmWKTohKM8kveKyti00T2k5DuI5IwbMzgo=
Subject key identifier: 80:A7:4F:94:C1:02:13:B5:4D:3E:85:4C:C1:14:E8:D8:0F:4F:35:12
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01841B61496A066BF34D65FA9FCB275C84EE
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/gKdPlMECE7VNPoVMwRTo2A9PNRI.roa
Signing time: Thu 27 Oct 2022 21:37:51 +0000
ROA not before: Thu 27 Oct 2022 21:37:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 45.151.2.0/24 maxlen: 24
45.151.0.0/23 maxlen: 23
5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2.56.108.0/22 maxlen: 22
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
194.15.52.0/23 maxlen: 23
77.83.39.0/24 maxlen: 24
77.83.38.0/23 maxlen: 23
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.13.191.0/24 maxlen: 24
45.94.168.0/22 maxlen: 24
45.144.215.0/24 maxlen: 24
45.144.214.0/23 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
85.209.123.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
85.209.121.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.120.0/23 maxlen: 24
45.81.112.0/22 maxlen: 24
45.138.180.0/22 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1b:61:49:6a:06:6b:f3:4d:65:fa:9f:cb:27:5c:84:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 27 21:37:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=80a74f94c10213b54d3e854cc114e8d80f4f3512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:97:2a:6d:d7:35:be:00:bc:df:c6:8d:7d:dd:
4f:a7:fb:21:f0:1c:03:1f:0b:35:99:e2:6d:2e:be:
d4:54:cd:0f:64:2f:de:ae:c4:56:a6:c2:5d:1a:8a:
d5:20:12:4f:23:b1:a1:64:b5:af:15:22:cc:3b:1f:
2a:8d:4d:a5:36:10:0e:5a:1f:fc:e0:06:9f:be:a7:
2a:36:76:bc:ec:6a:24:54:52:f0:12:8d:28:eb:05:
7b:86:b7:11:7b:5e:f2:fc:de:93:11:47:0a:e8:ab:
19:ab:be:ec:74:39:52:67:b1:2b:47:ba:b2:df:7c:
2a:3a:fd:f7:a8:27:ac:29:04:6c:44:42:16:8c:af:
48:14:31:fa:29:47:ac:87:68:3e:88:c9:57:46:58:
75:d0:41:c5:15:e9:39:e5:bd:8c:fa:f1:67:e4:09:
55:d0:95:7d:b3:30:71:77:99:ed:50:91:4c:2f:62:
b3:1a:ea:32:d0:01:12:1a:40:ab:bb:65:11:6f:3a:
02:90:a0:b9:21:5d:5b:8c:1c:e9:ea:7b:4b:ea:25:
96:5c:f1:3e:a5:9f:82:1e:20:64:a3:a4:91:40:7b:
82:68:ad:50:79:1b:11:fa:14:43:d6:97:f2:f7:09:
5d:26:75:85:a1:7b:94:e3:8d:1d:6d:7e:13:31:cf:
b2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:A7:4F:94:C1:02:13:B5:4D:3E:85:4C:C1:14:E8:D8:0F:4F:35:12
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/gKdPlMECE7VNPoVMwRTo2A9PNRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
5.181.87.0/24
45.9.29.0/24
45.13.191.0/24
45.81.112.0/22
45.88.136.0/24
45.88.139.0/24
45.94.168.0/22
45.132.181.0-45.132.183.255
45.138.180.0/22
45.144.212.0/22
45.151.0.0-45.151.2.255
77.83.37.0-77.83.39.255
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/22
193.57.41.0/24
193.57.43.0/24
194.15.52.0/23
194.242.96.0/22
195.62.24.0/24
195.177.92.0/22
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
b2:f7:20:17:a2:ad:96:84:8c:43:db:94:d5:d1:7c:05:51:7a:
10:68:00:ea:13:37:b7:82:a9:8c:c6:9a:8e:fb:0a:05:b4:0e:
22:ee:a9:f5:b4:8e:04:f9:dc:c9:40:57:80:00:1c:eb:85:ef:
f0:91:7d:d4:4b:0f:79:06:0b:75:4e:35:fd:ed:59:50:4e:cd:
cd:7e:f8:51:4e:43:92:3d:40:05:c8:b3:0f:31:55:eb:60:76:
8b:6e:bf:7f:75:43:c8:c7:50:e2:4c:92:8b:0a:0b:51:90:73:
d3:f1:07:3c:ff:e9:e0:4d:0f:94:9d:47:03:45:4c:c0:e1:30:
c4:70:ef:24:81:6a:4c:b4:b7:d6:6a:43:67:58:41:2a:a4:8d:
6b:ae:da:20:db:a1:51:dc:22:cd:6d:42:11:7a:c9:2a:c5:74:
97:ab:a9:b7:56:a7:b4:45:07:d4:7c:e8:5a:c5:28:66:93:32:
57:a7:4c:f9:c9:2c:af:66:65:01:4d:bf:d1:26:57:5b:ae:27:
ec:81:6a:a3:11:b3:09:53:45:82:2a:bc:05:ba:eb:f6:03:f0:
34:19:56:40:e5:5f:23:3e:71:e6:04:3b:13:a1:79:3d:0e:72:
84:d5:af:c0:db:26:36:9f:e3:b5:d5:a5:f3:5a:b5:39:6a:ce:
8f:b2:ca:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:32 2023 by rpki-client on console-fra.rpki-client.org