Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/k912M4doWqFYOKptyw5y75vXfQU.roa
File: k912M4doWqFYOKptyw5y75vXfQU.roa (raw, json)
Hash identifier: s/MjIuTLlzGj+VdTN3nnIZZcU9iu2Z6RFQc43JEafpE=
Subject key identifier: 93:DD:76:33:87:68:5A:A1:58:38:AA:6D:CB:0E:72:EF:9B:D7:7D:05
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0183794CFB02B3D14BA42FE31F294319784E
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/k912M4doWqFYOKptyw5y75vXfQU.roa
Signing time: Mon 26 Sep 2022 10:17:11 +0000
ROA not before: Mon 26 Sep 2022 10:17:11 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 45.151.2.0/24 maxlen: 24
195.211.190.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
194.242.97.0/24 maxlen: 24
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.13.188.0/24 maxlen: 24
45.13.191.0/24 maxlen: 24
45.13.189.0/24 maxlen: 24
45.144.215.0/24 maxlen: 24
45.144.214.0/24 maxlen: 24
194.15.52.0/23 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/24 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
85.209.121.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
45.81.112.0/22 maxlen: 24
77.83.38.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:79:4c:fb:02:b3:d1:4b:a4:2f:e3:1f:29:43:19:78:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Sep 26 10:17:11 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=93dd763387685aa15838aa6dcb0e72ef9bd77d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3a:a8:b5:fa:34:95:7b:44:06:e0:83:3b:13:
f2:cd:7f:a3:6e:0b:f7:ba:30:0f:76:06:1a:67:3f:
4c:87:00:98:52:72:70:41:5a:22:43:f8:0a:9c:9f:
30:08:62:f0:93:41:6a:ea:0d:19:45:53:09:2a:eb:
1f:c6:a3:35:07:41:7d:bf:85:ed:9a:0c:f3:85:79:
1b:6c:15:48:75:5b:f5:07:df:c0:8d:c0:63:6d:0e:
ac:33:f7:c4:1d:af:83:18:0f:02:af:ee:10:67:4e:
e1:ad:a6:5d:69:f3:f4:01:32:76:59:bd:ce:83:10:
e8:bd:08:ef:d6:1b:48:48:11:18:2f:05:a1:84:86:
5a:21:19:27:30:8b:2a:ee:b2:9c:9a:fa:9e:f5:1b:
86:a5:f2:e4:37:21:55:c9:d3:91:43:87:b7:25:98:
72:35:89:ae:f4:7d:76:bb:f4:4b:72:a0:06:c9:0c:
2e:84:66:0b:00:df:b0:01:2e:9e:75:e9:13:a2:29:
80:9d:95:1b:13:13:eb:6f:ca:c3:f2:fb:fa:07:fb:
3a:be:7c:9d:b4:34:e7:bf:66:e8:14:2a:d4:83:52:
2c:97:c3:88:02:d2:0a:4a:72:55:c4:4c:3a:de:fc:
d4:c1:17:70:3a:f5:99:5d:b2:e7:12:f9:1e:5e:94:
d1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:DD:76:33:87:68:5A:A1:58:38:AA:6D:CB:0E:72:EF:9B:D7:7D:05
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/k912M4doWqFYOKptyw5y75vXfQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.29.0/24
45.13.188.0/23
45.13.191.0/24
45.81.112.0/22
45.88.136.0/22
45.132.181.0/24
45.144.212.0/22
45.151.2.0/24
77.83.37.0-77.83.39.255
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/22
193.57.41.0/24
193.57.43.0/24
194.15.52.0/23
194.242.96.0/22
195.62.24.0/24
195.177.92.0/22
195.211.190.0/24
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
5f:3c:ff:94:93:2b:b9:e0:53:97:09:0c:00:15:47:8c:90:28:
65:a4:1d:db:ee:9a:f3:13:4a:82:d3:73:04:a5:98:6d:df:ba:
d0:db:54:c9:d1:89:8d:7b:91:db:85:6c:67:d0:70:f3:19:9e:
c1:15:a2:11:41:81:bf:73:b8:d1:72:9f:cf:f7:11:2a:df:a6:
b7:a7:f6:9e:e2:f4:a4:53:b7:f1:0c:26:8e:77:ec:9e:fd:6f:
b4:48:d5:c8:d0:5e:e9:8a:59:4a:58:c8:ac:b0:90:df:30:35:
02:c8:20:fa:f3:16:8f:f4:92:4b:6c:ec:d8:d7:8b:cf:db:fb:
89:bb:10:2f:6c:1c:bd:5a:da:d0:3d:c8:da:0c:37:57:7c:cf:
ba:65:1f:9f:ec:f7:df:0c:66:19:a2:b7:dc:eb:ab:d4:64:53:
90:90:63:0a:be:64:93:17:56:8f:4e:6a:74:e1:10:64:94:ac:
3f:a6:86:e4:50:b8:69:0c:7f:ae:19:18:2f:1f:3c:cb:e5:fe:
c9:ca:fc:a1:5d:a7:c4:12:76:c5:8b:04:4e:04:b9:60:2d:f6:
b0:4c:89:11:ad:17:9c:09:5e:e0:03:96:d0:3a:fb:a3:73:a0:
78:92:c9:34:20:f9:a8:81:dd:bf:6d:3f:e4:f0:89:12:e0:fa:
65:d9:90:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:21 2023 by rpki-client on console-ams.rpki-client.org