Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nwIVOhiS24bgPJhiiw8ER2RgPfE.roa
File: nwIVOhiS24bgPJhiiw8ER2RgPfE.roa (raw, json)
Hash identifier: OUnD/M0n2aq2VuMle2RxAWF5Xkwp1GNgJ2y1Rck4b5M=
Subject key identifier: 9F:02:15:3A:18:92:DB:86:E0:3C:98:62:8B:0F:04:47:64:60:3D:F1
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01840A2FD72488138225428467AC51CFD4FA
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nwIVOhiS24bgPJhiiw8ER2RgPfE.roa
Signing time: Mon 24 Oct 2022 13:30:18 +0000
ROA not before: Mon 24 Oct 2022 13:30:18 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 45.13.191.0/24 maxlen: 24
45.151.0.0/23 maxlen: 23
45.151.2.0/24 maxlen: 24
195.211.188.0/22 maxlen: 24
2.56.108.0/22 maxlen: 22
45.88.136.0/24 maxlen: 24
45.88.139.0/24 maxlen: 24
193.30.241.0/24 maxlen: 24
85.209.120.0/23 maxlen: 23
45.132.182.0/23 maxlen: 24
195.177.94.0/24 maxlen: 24
45.138.180.0/22 maxlen: 24
77.83.37.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0a:2f:d7:24:88:13:82:25:42:84:67:ac:51:cf:d4:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Oct 24 13:30:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9f02153a1892db86e03c98628b0f044764603df1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4c:fb:1b:1f:e5:f7:5f:02:ba:e7:b2:c6:08:
fd:ab:99:88:ae:52:ad:81:8c:bf:c0:e4:e5:c2:32:
19:38:2e:42:44:96:77:90:db:a8:e9:b9:df:ad:97:
a6:82:6d:13:9d:1c:94:10:ab:37:68:f9:43:86:e7:
0b:4e:7d:dc:0d:e3:b1:42:2b:6d:2e:34:63:b1:44:
7c:2a:21:f0:f2:9b:90:58:9f:06:a9:bb:4c:85:2f:
77:9e:cc:a7:2d:26:3a:a1:5b:0d:0c:ef:1c:00:31:
14:1c:d6:c4:c9:42:65:1b:da:09:a7:38:89:df:a2:
fa:b0:19:18:75:91:e8:88:5f:5d:9e:eb:bf:cc:6e:
1b:4b:a0:28:ba:db:23:0b:7b:75:09:a7:ed:09:3a:
2d:f5:59:f7:09:e3:ca:3a:0c:5a:0b:94:90:40:a4:
55:00:a9:2a:18:a2:86:2f:fe:98:6e:4c:bc:ea:dc:
d2:fd:b1:f7:3d:06:e7:78:71:97:45:e9:95:22:98:
c1:02:42:8d:7a:6a:c5:92:21:99:47:00:83:b5:60:
6f:90:bf:85:e3:4c:a9:89:dd:aa:da:24:3e:12:14:
d4:0b:a3:5a:91:d9:30:84:0e:15:ab:f0:f9:e4:f1:
7c:c9:f5:6d:fa:7c:f0:8c:4f:4c:bd:9f:be:dd:90:
22:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:02:15:3A:18:92:DB:86:E0:3C:98:62:8B:0F:04:47:64:60:3D:F1
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nwIVOhiS24bgPJhiiw8ER2RgPfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
45.13.191.0/24
45.88.136.0/24
45.88.139.0/24
45.132.182.0/23
45.138.180.0/22
45.151.0.0-45.151.2.255
77.83.37.0/24
85.209.120.0/23
193.30.241.0/24
195.177.94.0/24
195.211.188.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:46:d2:80:50:32:97:da:9d:7a:3c:d0:aa:98:ab:e0:02:34:
68:b0:1a:0b:45:01:f3:35:1b:6e:c9:d2:d4:2b:90:ad:36:24:
bf:74:56:b5:0a:19:c1:b9:82:b8:b9:a4:ea:37:83:eb:61:1d:
3b:1a:9f:2d:81:bb:13:86:b3:f4:0a:84:e1:29:00:10:3f:80:
79:cd:ef:60:0d:20:9a:70:2a:ea:7b:d2:1a:96:3b:62:4a:b0:
ea:76:c0:a3:25:a4:0f:7b:7d:b5:07:56:46:1a:bc:32:78:4b:
0b:c7:53:26:41:09:bd:37:7a:c9:8d:6b:a5:81:06:8e:73:e5:
65:b9:bc:ab:a3:fd:a5:d2:78:ab:64:e8:a5:50:3b:30:4f:dc:
d4:e1:6a:6b:3e:1e:59:47:35:c3:22:81:cb:d3:b9:15:98:78:
85:31:32:9c:37:34:ce:83:90:9d:51:b2:12:c9:f8:b4:c8:85:
b8:ee:ae:e7:bb:31:b9:8e:1d:01:c5:21:e3:19:a2:0c:1c:eb:
30:75:0a:1d:2a:ac:1f:67:ce:bf:d9:22:80:08:96:49:9e:c4:
da:08:39:9a:ef:d4:e4:fb:0f:35:60:d7:4a:b0:4e:00:dd:b0:
68:7d:e3:a8:d3:65:28:77:67:bb:4c:d9:ec:e2:5d:0d:09:90:
44:7b:39:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:19 2024 by rpki-client on console-ams.rpki-client.org