Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/lxF8uJfeT7JOpRbK5rf5aka_g60.roa
File: lxF8uJfeT7JOpRbK5rf5aka_g60.roa (raw, json)
Hash identifier: jExJIk8aOmjUltfR1Nc53vur8EoTHprlhhLdxQktBII=
Subject key identifier: 97:11:7C:B8:97:DE:4F:B2:4E:A5:16:CA:E6:B7:F9:6A:46:BF:83:AD
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 06F9D92B
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/lxF8uJfeT7JOpRbK5rf5aka_g60.roa
Signing time: Sat 01 Jan 2022 03:54:06 +0000
ROA not before: Sat 01 Jan 2022 03:54:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 85.209.120.0/24 maxlen: 24
85.209.123.0/24 maxlen: 24
45.151.0.0/23 maxlen: 24
195.211.188.0/22 maxlen: 24
2.56.108.0/22 maxlen: 24
45.132.182.0/23 maxlen: 24
195.177.95.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117037355 (0x6f9d92b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jan 1 03:54:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=97117cb897de4fb24ea516cae6b7f96a46bf83ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c9:d0:c2:1f:37:81:ea:a7:f9:d2:78:4c:95:
ce:41:e3:86:a1:32:b0:c1:45:58:b8:13:2a:a6:97:
c6:5b:a5:02:f2:94:04:41:f4:03:e8:78:54:38:9a:
b6:22:7c:c2:35:fc:2b:73:d8:60:c1:3a:30:c8:91:
49:cb:45:43:e3:fe:80:cd:26:c9:e0:8b:bf:0a:cd:
a5:ce:7e:83:18:b2:37:00:8d:c2:38:16:42:8b:55:
2b:26:34:c1:bb:09:5f:ef:59:91:f9:e4:30:50:e4:
52:65:b2:03:26:33:27:c2:d9:6e:57:f1:21:53:1d:
83:68:a9:be:89:9c:a1:34:38:19:87:fb:3d:49:63:
28:e5:47:ae:5a:f3:3d:0c:c8:f7:43:82:1e:0c:b4:
32:68:6b:a9:d6:8f:59:bc:c8:7e:bb:11:c7:e8:27:
f7:0c:4c:46:d9:ad:24:28:ea:e3:d0:70:6c:1b:b6:
43:88:38:76:91:d3:df:91:2f:d1:49:2c:3d:a7:5f:
e1:cb:d9:ce:86:98:e6:fc:25:04:a5:6e:40:a4:98:
59:0e:7c:c2:34:ad:ff:fa:56:fc:ca:a1:cc:29:2c:
8b:3d:71:43:70:32:3d:8b:83:49:7e:54:a5:4a:82:
c5:7b:e1:7f:11:5c:33:99:1e:69:81:37:4c:15:45:
ae:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:11:7C:B8:97:DE:4F:B2:4E:A5:16:CA:E6:B7:F9:6A:46:BF:83:AD
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/lxF8uJfeT7JOpRbK5rf5aka_g60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
45.132.182.0/23
45.151.0.0/23
85.209.120.0/24
85.209.123.0/24
195.62.24.0/24
195.177.95.0/24
195.211.188.0/22
Signature Algorithm: sha256WithRSAEncryption
73:b8:dc:1e:5a:c2:05:d0:87:24:0b:ee:c9:cd:c5:3e:b2:3f:
d8:e9:fd:7b:a7:36:e4:96:c4:1c:62:24:80:a1:b9:b9:59:4f:
b1:97:df:8a:3b:d2:52:c2:26:28:d2:4f:53:94:07:62:ca:0f:
df:23:b0:07:8d:26:36:f3:67:0c:6a:b5:c5:b9:b9:89:f9:32:
3f:08:fb:de:73:8a:07:6c:a0:9b:b2:29:c8:22:14:6e:6b:61:
d3:94:4e:59:c0:7c:96:c0:0a:8e:aa:fa:e8:3c:d0:8b:59:8b:
bb:6a:89:77:f7:da:1d:d7:49:0e:4e:05:c9:cb:4c:52:f2:cd:
f5:30:61:5b:7f:5d:50:f7:b0:e0:fe:72:2b:ff:31:df:f1:fb:
0f:13:15:f3:3c:9f:8f:93:3e:bd:3a:a3:a0:fb:35:95:01:5c:
30:4d:b8:17:bd:25:e9:52:2f:0b:a7:05:4a:2d:d3:d3:f9:cb:
e3:64:88:65:37:b1:61:97:89:e3:fc:01:20:67:66:99:86:04:
d9:f6:d6:cd:bd:81:94:be:99:4d:37:0b:e1:be:2c:27:fb:25:
17:f9:8b:2f:40:85:78:65:2a:96:43:af:43:2e:62:3c:4e:17:
86:6a:e9:f7:86:f2:ea:98:8c:bf:13:2c:73:cb:43:50:81:2d:
fe:82:da:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:32 2023 by rpki-client on console-fra.rpki-client.org