Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/kpzWyA9X8b-uAIex0TUMmDnqMF8.roa
File: kpzWyA9X8b-uAIex0TUMmDnqMF8.roa (raw, json)
Hash identifier: ouKW3S0XEuqpJgUI8qVLFrK23EMxJ7c+N+1XCWLp0GI=
Subject key identifier: 92:9C:D6:C8:0F:57:F1:BF:AE:00:87:B1:D1:35:0C:98:39:EA:30:5F
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 07E52567
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/kpzWyA9X8b-uAIex0TUMmDnqMF8.roa
Signing time: Mon 14 Mar 2022 21:36:22 +0000
ROA not before: Mon 14 Mar 2022 21:36:22 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 62206
IP address blocks: 45.151.2.0/24 maxlen: 24
195.211.190.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
45.88.138.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
185.200.62.0/24 maxlen: 24
194.242.96.0/22 maxlen: 22
193.57.43.0/24 maxlen: 24
193.57.41.0/24 maxlen: 24
45.144.213.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
45.13.191.0/24 maxlen: 24
45.144.215.0/24 maxlen: 24
194.15.52.0/23 maxlen: 24
185.43.248.0/24 maxlen: 24
185.43.251.0/24 maxlen: 24
185.43.249.0/24 maxlen: 24
85.209.123.0/24 maxlen: 24
193.30.243.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
193.30.242.0/24 maxlen: 24
85.209.121.0/24 maxlen: 24
85.209.120.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
45.9.29.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
77.83.38.0/24 maxlen: 24
77.83.37.0/24 maxlen: 24
193.30.240.0/24 maxlen: 24
2a10:dfc0::/29 maxlen: 29
2a07:9200::/29 maxlen: 29
2a11:580::/29 maxlen: 29
2a0c:a580::/29 maxlen: 29
2a01:7120::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132457831 (0x7e52567)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 14 21:36:22 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=929cd6c80f57f1bfae0087b1d1350c9839ea305f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:94:be:ef:33:50:9d:58:cf:d2:ac:96:88:f2:
a1:0d:03:9f:38:6f:a4:74:8c:d1:95:a0:bd:5c:3c:
ab:73:57:70:a3:f8:04:f1:db:30:8a:4f:01:5b:9e:
ec:15:b8:f1:7b:79:2a:fc:5a:a4:80:76:82:05:37:
3e:ac:2d:f6:d4:28:f8:15:54:58:9a:42:c5:c9:c6:
ce:b8:4e:e2:42:c4:2a:f4:3f:85:81:24:db:2f:cd:
33:b7:6a:b2:b8:6c:d8:c6:7f:fa:66:26:a6:00:a4:
91:42:76:5f:b2:d1:f8:ce:85:53:dd:10:f1:c5:57:
98:60:9c:31:79:48:9b:2f:3c:8b:d5:c8:b6:ea:ed:
71:3e:f0:b0:59:83:7b:8d:ad:b1:1f:6d:84:f4:42:
3b:3f:46:7f:ba:89:60:89:87:84:b1:41:b6:2c:36:
6a:8c:04:70:e0:e6:6a:1c:d2:d0:60:57:ed:38:d2:
8a:01:64:71:fc:ed:af:f8:26:b0:9c:dc:f1:d5:b2:
bc:c1:0a:26:c2:0a:0b:a3:5d:8f:e0:fa:50:20:06:
f3:3f:fc:fe:de:b0:4d:0e:27:6c:5c:ab:2b:e8:20:
f3:89:5b:39:00:c5:68:04:1b:6c:8a:0e:1d:bd:33:
0c:91:16:27:75:3e:cd:a6:ee:2f:68:d2:8a:a3:9a:
8f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9C:D6:C8:0F:57:F1:BF:AE:00:87:B1:D1:35:0C:98:39:EA:30:5F
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/kpzWyA9X8b-uAIex0TUMmDnqMF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.29.0/24
45.13.191.0/24
45.88.137.0-45.88.139.255
45.144.212.0/23
45.144.215.0/24
45.151.2.0/24
77.83.37.0-77.83.38.255
85.209.120.0/22
185.43.248.0/23
185.43.251.0/24
185.200.62.0/24
193.30.240.0/22
193.57.41.0/24
193.57.43.0/24
194.15.52.0/23
194.242.96.0/22
195.62.24.0/24
195.177.93.0/24
195.177.95.0/24
195.211.190.0/24
IPv6:
2a01:7120::/32
2a07:9200::/29
2a0c:a580::/29
2a10:dfc0::/29
2a11:580::/29
Signature Algorithm: sha256WithRSAEncryption
35:48:dc:8e:3e:dd:cf:d5:88:47:ca:e3:16:78:8a:da:c8:62:
16:a4:05:01:fc:3f:f3:42:83:cb:71:5c:46:24:61:06:c6:b1:
ac:10:fd:ea:98:83:b0:5c:30:ab:d3:e1:48:60:61:a9:20:4e:
ba:95:8d:2d:85:71:b8:92:b1:03:7f:8c:d7:3c:ea:4a:46:53:
98:14:3c:35:a2:00:65:32:8d:4e:8b:6c:4d:76:ac:a1:99:c2:
1b:16:68:ee:b4:7a:01:ac:79:88:5d:93:df:b2:2a:63:a3:89:
53:f9:f9:e3:a4:0a:84:b7:5c:9d:cb:7c:6b:ce:1c:e5:23:30:
31:b1:83:6a:65:bb:14:4c:7e:9b:65:0b:29:5d:43:9a:9e:92:
ea:28:86:bf:53:41:f3:aa:c9:48:20:12:88:f8:44:b9:9b:71:
b8:23:90:1b:a5:3d:42:76:fa:d8:d0:7b:03:cc:72:6b:12:02:
ff:e3:00:ae:83:0e:45:ff:14:ae:f8:f6:f7:9e:6f:1f:c1:c3:
17:d5:96:48:74:87:71:f6:83:cd:2b:7d:12:c7:98:a2:1b:24:
37:ed:eb:aa:f6:ee:41:a1:c1:73:7c:7e:e4:ed:58:ee:15:91:
40:49:61:f3:55:d1:5b:f3:42:4b:b3:d6:26:f0:37:30:95:d0:
1c:0c:07:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:21 2023 by rpki-client on console-ams.rpki-client.org