Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ik6FjVDIjuC5vSynj_hw2LTYrbA.roa
File: ik6FjVDIjuC5vSynj_hw2LTYrbA.roa (raw, json)
Hash identifier: ILzOdSUtELEt+UPymYudmqXSG/06e51lUMCLoqC9lVM=
Subject key identifier: 8A:4E:85:8D:50:C8:8E:E0:B9:BD:2C:A7:8F:F8:70:D8:B4:D8:AD:B0
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01839F83EB36CC9E6C70EE62EAF1A4EEC8C2
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ik6FjVDIjuC5vSynj_hw2LTYrbA.roa
Signing time: Mon 03 Oct 2022 20:22:46 +0000
ROA not before: Mon 03 Oct 2022 20:22:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 45.13.191.0/24 maxlen: 24
45.151.0.0/23 maxlen: 24
45.151.2.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
45.144.215.0/24 maxlen: 24
45.144.214.0/24 maxlen: 24
2.56.108.0/22 maxlen: 24
194.15.52.0/23 maxlen: 24
45.88.136.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
85.209.120.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
85.209.121.0/24 maxlen: 24
85.209.123.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.132.182.0/23 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9f:83:eb:36:cc:9e:6c:70:ee:62:ea:f1:a4:ee:c8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 3 20:22:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a4e858d50c88ee0b9bd2ca78ff870d8b4d8adb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:29:23:de:a9:f4:66:58:d8:f2:66:21:0b:85:
c1:c1:db:a2:86:44:6a:48:1c:c5:4f:0c:e7:70:71:
f0:17:fe:cc:33:2e:3a:ef:97:65:34:19:4c:18:6e:
ae:32:11:72:2b:16:13:07:ec:0e:36:c5:84:a2:a2:
37:e3:dc:f6:6c:9e:90:83:20:a4:c0:8c:45:18:76:
f7:02:34:31:c7:e2:81:58:34:9a:14:11:90:42:24:
e0:03:2f:c1:e5:67:6c:98:0d:eb:60:98:a3:f0:e7:
9b:7e:86:e7:da:5a:13:a2:b5:60:1f:0f:1c:42:eb:
67:e7:57:84:6d:73:f3:94:48:a0:49:23:70:11:b2:
f6:2e:7a:b2:68:87:75:c7:d9:3c:76:2e:76:c6:73:
b8:f5:3e:c2:c6:bb:0e:5a:d4:f0:5b:db:71:dd:1a:
58:5d:a5:a8:d4:df:8f:0a:5a:80:06:72:ec:69:54:
20:a4:9b:9a:24:5e:a2:1e:85:7e:ab:a9:19:67:87:
3d:07:b9:af:62:d9:ea:3a:7a:89:0d:54:03:04:69:
22:14:19:2c:ba:dd:4b:0a:a5:3b:cb:4b:c2:be:e4:
b9:bd:5b:3d:eb:fb:b7:6d:ce:42:b1:b6:7f:85:5b:
0c:10:0c:f3:71:85:17:43:81:87:ed:ab:03:69:70:
e0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4E:85:8D:50:C8:8E:E0:B9:BD:2C:A7:8F:F8:70:D8:B4:D8:AD:B0
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ik6FjVDIjuC5vSynj_hw2LTYrbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
45.13.191.0/24
45.88.136.0/23
45.88.139.0/24
45.132.182.0/23
45.144.214.0/23
45.151.0.0-45.151.2.255
77.83.37.0-77.83.38.255
85.209.120.0/22
193.30.241.0/24
193.57.41.0/24
194.15.52.0/23
195.62.24.0/24
195.177.93.0-195.177.95.255
195.211.188.0/22
Signature Algorithm: sha256WithRSAEncryption
82:4e:36:27:62:f8:8e:55:fc:db:d5:50:2c:96:06:39:8f:1f:
b8:b6:e5:fb:4e:ca:d6:c6:ce:09:14:69:7e:91:f6:ae:3a:5b:
dc:48:bc:4e:1f:e4:cf:5c:ee:c0:34:0d:cd:c6:c2:08:4d:ce:
4e:8a:75:d6:21:c6:52:65:0d:de:7c:24:7d:38:bb:99:7a:60:
58:44:ec:7e:86:87:d9:65:26:5f:4b:2e:1e:eb:47:51:95:ab:
e2:f8:9a:1c:67:5c:c0:a9:20:e0:d5:48:a0:76:6d:3a:0e:bc:
93:b0:33:a4:50:e6:ff:b5:22:1b:12:f5:dd:7c:8f:bb:99:de:
23:f2:16:da:a0:88:f2:b4:ce:0c:0a:63:3b:38:a0:a8:fe:c2:
b7:ab:24:28:1a:b5:72:91:b5:de:b7:2f:83:1c:14:85:54:41:
bd:a2:52:79:9d:88:e7:c8:0a:b2:c0:49:b5:27:d3:e8:f1:80:
2b:fb:2a:b5:b4:4e:fe:8c:3c:cb:3e:42:84:e1:90:d2:fc:11:
f0:fa:43:fe:41:f2:ab:7b:16:7d:08:f3:0e:bd:4a:45:b7:7e:
57:14:f2:f4:88:00:99:85:d7:e7:73:67:57:b5:32:f4:a1:f9:
47:5e:69:27:a7:f7:25:ed:fe:e7:ce:d8:9c:86:3f:1a:06:ad:
6a:24:1f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:32 2023 by rpki-client on console-fra.rpki-client.org