Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/kKr4Ta-YofsjzxZYDp8WU3KJiig.roa
File: kKr4Ta-YofsjzxZYDp8WU3KJiig.roa (raw, json)
Hash identifier: shQedtUQqy7HyYDsZBWAalblGb8wyOBaxw2kvVTJlyQ=
Subject key identifier: 90:AA:F8:4D:AF:98:A1:FB:23:CF:16:58:0E:9F:16:53:72:89:8A:28
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0870D83D
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/kKr4Ta-YofsjzxZYDp8WU3KJiig.roa
Signing time: Fri 06 May 2022 12:23:07 +0000
ROA not before: Fri 06 May 2022 12:23:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 45.151.2.0/24 maxlen: 24
195.211.190.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
45.88.136.0/24 maxlen: 24
185.200.63.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
45.132.181.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.13.188.0/24 maxlen: 24
45.13.191.0/24 maxlen: 24
45.13.189.0/24 maxlen: 24
45.144.215.0/24 maxlen: 24
45.144.214.0/24 maxlen: 24
194.15.52.0/23 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
77.83.39.0/24 maxlen: 24
85.209.120.0/24 maxlen: 24
85.209.123.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
85.209.121.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.92.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141613117 (0x870d83d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: May 6 12:23:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=90aaf84daf98a1fb23cf16580e9f165372898a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:80:81:6a:87:09:80:83:fa:b5:1a:86:48:34:
ed:d2:90:03:82:1c:31:70:0b:53:4c:64:bf:2b:97:
a8:56:0a:4a:3c:98:30:da:a6:37:b3:fb:4f:d9:bd:
55:aa:6c:c6:de:c7:7f:62:91:46:6a:7a:15:fa:85:
17:96:5c:7c:34:7f:94:77:56:bf:8f:fb:b9:07:77:
78:97:e7:ac:c9:32:09:93:87:05:33:69:d0:1c:7f:
54:ff:65:08:63:76:df:e6:14:cd:cd:a4:5a:5b:bc:
e7:95:5e:97:41:88:b0:cb:da:2c:42:1d:3f:88:f9:
02:60:9d:d1:15:af:8f:43:85:ec:b8:fe:ad:66:71:
f6:1a:10:89:17:80:71:38:04:f2:e9:14:f5:e5:fe:
e8:c7:ec:e0:fd:64:fb:5d:dd:d4:60:1e:50:45:d0:
07:5a:e5:d4:6e:3a:81:37:50:7f:44:3e:c8:19:77:
a9:27:e1:48:ba:27:1b:69:3e:de:7d:ce:c7:55:6c:
69:b2:ea:d3:1e:41:ac:b2:06:b9:40:66:1f:3b:29:
3c:7a:e7:74:c8:9d:a2:97:2c:84:1a:ea:2a:a3:85:
b3:4a:f6:5e:cc:22:c6:57:66:cf:97:f7:98:b7:0e:
f0:17:6f:c0:40:90:96:ab:f4:fd:f4:2d:d1:bd:d1:
60:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AA:F8:4D:AF:98:A1:FB:23:CF:16:58:0E:9F:16:53:72:89:8A:28
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/kKr4Ta-YofsjzxZYDp8WU3KJiig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.29.0/24
45.13.188.0/23
45.13.191.0/24
45.88.136.0/22
45.132.181.0/24
45.144.212.0/22
45.151.2.0/24
77.83.37.0-77.83.39.255
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/23
193.30.240.0/22
193.57.41.0/24
193.57.43.0/24
194.15.52.0/23
194.242.96.0/22
195.62.24.0/24
195.177.92.0/22
195.211.190.0/24
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
1b:5b:30:26:38:fc:6b:d1:e1:2b:65:54:db:2f:79:56:7a:51:
34:92:fc:69:dc:1d:48:6d:b1:6b:ff:3e:11:81:cf:f4:c6:de:
ab:47:dd:c0:b1:97:8a:a7:03:a7:45:8e:50:a6:e2:2a:05:bd:
cc:b1:1c:fe:df:47:ca:53:24:a7:b7:f7:ca:63:53:6d:eb:7d:
2d:d0:e5:b9:82:87:1b:bc:6b:d3:a4:7e:a3:b8:5d:31:02:d2:
1a:c4:e4:0d:fb:57:85:84:f4:bb:76:1c:97:0f:0d:cb:22:f1:
b9:cc:dd:06:06:b4:25:de:92:e5:06:a7:39:cc:da:60:38:f2:
3e:0f:e9:42:38:bd:58:5d:ef:17:91:56:5b:7c:c4:e7:3c:51:
33:86:8d:27:8a:3c:f7:c2:dc:65:ef:23:24:f8:c3:63:03:ba:
4b:6d:0d:10:8a:7c:35:67:bb:dd:64:47:87:50:76:96:f4:2d:
00:6c:12:f6:ed:b1:8c:86:a6:9d:0f:0e:38:1e:1e:33:91:12:
cd:5c:7e:0c:59:a6:98:67:d4:4c:e5:12:6a:b4:1f:27:77:40:
3b:b2:d4:4d:44:8b:cc:ca:39:c0:62:0a:aa:53:9c:45:21:29:
77:2a:07:3f:ab:70:8a:0c:cd:0f:5d:db:bc:41:48:4b:2c:66:
ff:cd:94:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:32 2024 by rpki-client on console-fra.rpki-client.org