Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/hCw8mAJ1XoB8ZZ0YWwlJanCVods.roa
File: hCw8mAJ1XoB8ZZ0YWwlJanCVods.roa (raw, json)
Hash identifier: wSxpdo2C2TfnjQwFL4oN0iJBOYMWOJsH1P/HAb891h8=
Subject key identifier: 84:2C:3C:98:02:75:5E:80:7C:65:9D:18:5B:09:49:6A:70:95:A1:DB
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0188AECF3045FC81D94B6687CB3E3DEAE21B
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/hCw8mAJ1XoB8ZZ0YWwlJanCVods.roa
Signing time: Mon 12 Jun 2023 08:53:13 +0000
ROA not before: Mon 12 Jun 2023 08:53:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62206
IP address blocks: 5.181.87.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
195.211.190.0/24 maxlen: 24
2.56.108.0/22 maxlen: 24
45.88.139.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
45.132.181.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.94.168.0/22 maxlen: 22
45.94.170.0/24 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/22 maxlen: 24
85.209.120.0/23 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
77.83.38.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ae:cf:30:45:fc:81:d9:4b:66:87:cb:3e:3d:ea:e2:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jun 12 08:53:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=842c3c9802755e807c659d185b09496a7095a1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f3:9b:2e:50:5e:9b:92:05:db:5e:b5:d0:13:
62:92:37:40:2d:20:d4:77:55:e0:cd:27:86:6a:1b:
2d:36:70:b5:53:57:b4:d6:97:9e:38:9f:21:7c:38:
92:7b:c0:fd:47:95:43:77:07:d7:78:49:76:36:08:
f8:7c:20:cd:e2:82:b4:b0:c7:ba:13:72:70:2e:77:
75:85:8e:80:80:b8:9e:90:a0:4b:da:ab:fd:fc:7c:
e8:f6:c9:f9:52:bc:1d:b2:7d:59:77:8b:f9:44:cf:
7f:dd:f2:1e:79:be:45:2f:16:4e:ae:4e:9e:90:b1:
02:19:8a:cf:a1:d6:46:b3:fb:f2:9f:2b:ee:53:d8:
0a:b8:e7:a9:af:87:34:07:cc:03:81:fd:f2:08:f2:
ca:fc:12:34:62:96:f0:ec:c2:22:2b:42:4d:eb:c8:
0f:a4:5c:3a:f6:dd:cd:9f:21:99:77:4c:c1:7a:ba:
2d:19:d5:4f:bc:9a:68:6e:80:cd:99:22:9a:28:80:
2c:04:bd:d4:af:5b:eb:d2:a9:7a:48:7f:e9:e4:4e:
6c:54:5f:a3:b0:8b:95:e1:39:70:09:d3:4d:10:18:
dd:8c:88:23:09:56:02:33:0f:bc:55:ba:80:ed:c2:
16:f2:45:8a:86:70:06:e5:05:a1:f8:b5:0e:37:27:
fc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:2C:3C:98:02:75:5E:80:7C:65:9D:18:5B:09:49:6A:70:95:A1:DB
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/hCw8mAJ1XoB8ZZ0YWwlJanCVods.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
5.181.87.0/24
45.9.29.0/24
45.81.112.0/22
45.88.136.0/24
45.88.138.0/23
45.94.168.0/22
45.132.181.0-45.132.183.255
45.144.212.0/24
77.83.38.0/23
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/22
193.57.43.0/24
194.242.96.0/22
195.62.24.0/24
195.177.92.0/22
195.211.188.0/22
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
5a:2e:ab:08:a8:40:3a:e1:d5:26:27:a2:6e:41:ca:11:88:c0:
0e:c8:85:8d:21:be:ed:4b:f5:00:5f:1e:75:01:07:d1:25:3b:
ee:be:2b:af:1f:14:f4:52:fe:38:d3:63:36:06:88:88:80:b1:
0a:cf:1b:f6:6e:20:45:46:07:27:f5:47:42:8e:b0:99:09:0e:
ae:46:1a:87:68:47:7a:96:ab:3f:0a:06:be:2e:e0:b9:16:e1:
35:22:24:b9:b8:18:06:32:17:87:37:db:dc:a0:db:b4:69:3c:
bb:9d:cc:49:6e:00:22:b4:b9:63:d0:5c:df:5c:1c:ad:04:05:
6c:36:5b:3d:6e:9c:37:f9:f8:7e:6c:e9:a3:4e:28:8c:5f:e9:
33:6c:8e:d3:49:d6:de:c2:3a:bf:e1:82:b2:7f:d0:b9:6d:07:
16:f5:c2:0c:23:a6:d7:07:56:24:da:0a:69:e9:b9:d8:3e:b5:
b4:39:2a:74:9b:3e:da:75:20:c3:03:f1:94:4b:8a:d4:64:96:
30:34:8e:68:59:f1:c6:8f:e8:63:13:b0:dc:ec:f1:cb:b7:2d:
4e:db:4c:a5:d3:fe:95:b8:fa:a1:1a:19:4a:80:41:c8:61:44:
e9:e4:be:93:1a:13:a2:61:a0:12:54:e5:48:72:2a:fd:c5:5b:
24:91:64:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:53 2025 by rpki-client