Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/q6tswbMrPHIY4iGgm-dEjMhcKYI.roa
File: q6tswbMrPHIY4iGgm-dEjMhcKYI.roa (raw, json)
Hash identifier: c779tSZs0D/S4uWVnPvAwk4aR/mH1SDkZKTTFY42ch4=
Subject key identifier: AB:AB:6C:C1:B3:2B:3C:72:18:E2:21:A0:9B:E7:44:8C:C8:5C:29:82
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 07A79D50
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/q6tswbMrPHIY4iGgm-dEjMhcKYI.roa
Signing time: Wed 23 Feb 2022 23:10:47 +0000
ROA not before: Wed 23 Feb 2022 23:10:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 85.209.120.0/24 maxlen: 24
85.209.122.0/24 maxlen: 24
85.209.123.0/24 maxlen: 24
45.151.0.0/23 maxlen: 24
195.211.188.0/22 maxlen: 24
45.144.213.0/24 maxlen: 24
2.56.108.0/22 maxlen: 24
45.132.182.0/23 maxlen: 24
45.88.137.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
195.62.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 128425296 (0x7a79d50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Feb 23 23:10:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=abab6cc1b32b3c7218e221a09be7448cc85c2982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b9:c7:4c:62:62:95:b1:61:a0:29:ee:64:7a:
bd:b6:95:1f:35:3c:6f:ec:47:8f:6e:eb:7a:ff:37:
0c:ae:65:4b:63:58:bd:51:ab:50:b2:21:5b:6f:92:
84:03:a5:f7:53:ce:bc:f4:11:a0:f5:fc:47:3d:bf:
ce:e5:82:6a:29:1b:f2:37:59:38:db:a1:53:5a:ed:
51:6f:48:14:ab:33:9c:33:51:7c:a6:e6:dd:28:64:
d9:b9:35:c9:67:44:b8:72:67:7a:bd:13:02:52:4a:
6d:c8:63:41:0b:29:8a:13:78:5b:80:77:51:94:5d:
c1:be:b4:4b:9f:ab:e6:2b:9b:ae:44:fc:a3:d2:06:
81:86:4a:84:05:be:fd:ac:52:65:70:7c:05:5a:02:
27:90:0c:82:5e:86:db:49:0d:02:a4:ab:ea:8d:7d:
a1:fd:df:fb:36:1d:c2:48:a5:7b:da:9b:e9:69:d7:
39:7a:5d:f1:4d:b1:0d:c7:76:9e:b0:b9:59:e7:97:
0b:03:33:6f:95:10:28:a4:fd:4b:46:f6:2d:bc:c3:
b7:d9:64:ca:e0:ce:91:18:2b:78:87:e7:b1:88:9f:
b5:3e:b4:a0:2e:e6:dc:34:cf:5f:79:c3:7c:68:c7:
79:89:ca:2c:ca:3b:55:71:a3:53:e7:01:19:34:c8:
36:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AB:6C:C1:B3:2B:3C:72:18:E2:21:A0:9B:E7:44:8C:C8:5C:29:82
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/q6tswbMrPHIY4iGgm-dEjMhcKYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.108.0/22
45.88.137.0/24
45.132.182.0/23
45.144.213.0/24
45.151.0.0/23
85.209.120.0/24
85.209.122.0/23
195.62.24.0/24
195.177.95.0/24
195.211.188.0/22
Signature Algorithm: sha256WithRSAEncryption
86:72:ac:a6:82:de:fc:f5:5b:04:22:1d:03:17:51:3c:2f:ec:
38:4f:9f:62:75:a2:c7:dc:e4:ad:b2:dd:90:a1:4b:62:e7:1e:
15:61:1c:9d:4e:95:18:33:2b:4b:1a:39:dc:ee:26:aa:df:31:
8f:9e:27:4d:31:93:e6:c0:37:01:53:f8:b0:e0:15:1a:3f:16:
a0:5e:9b:42:de:d0:8a:69:a5:1c:d1:a6:7a:66:98:81:11:89:
74:04:a4:b1:13:d7:e2:23:a6:d9:e2:20:6c:4a:b4:d3:f5:5b:
f7:20:ed:37:7b:0c:4d:a6:04:23:64:58:f6:74:f5:5d:af:14:
ab:f4:04:44:4a:97:a2:aa:dc:9c:24:0d:ab:28:cb:d9:7b:57:
29:0d:67:dd:62:dc:7f:4e:d0:c2:2b:00:74:d0:06:59:53:fe:
c5:45:c8:43:e8:7a:b4:fa:d8:0a:06:88:66:e4:56:90:e5:08:
33:0f:f4:5b:d0:02:ed:37:e0:d2:cf:3a:9a:f7:23:b0:67:a7:
e2:80:d8:24:6c:dd:14:d6:e4:95:42:d6:82:46:7e:14:74:4e:
f7:87:9d:51:37:6e:6d:2a:7d:13:95:c3:db:e8:71:81:b1:27:
64:83:a9:e7:99:a0:c4:fe:cf:21:38:97:60:e4:91:0b:1f:5d:
e5:d1:7a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:32 2024 by rpki-client on console-fra.rpki-client.org