Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ub6OJJGUV8i79rwwnkGcZbDdvP4.roa
File: ub6OJJGUV8i79rwwnkGcZbDdvP4.roa (raw, json)
Hash identifier: zirqkQsJN3MzIaGpQCfCOP9FFFSC/tOcffZlqEb7YLM=
Subject key identifier: B9:BE:8E:24:91:94:57:C8:BB:F6:BC:30:9E:41:9C:65:B0:DD:BC:FE
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 07FE6B1E
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ub6OJJGUV8i79rwwnkGcZbDdvP4.roa
Signing time: Wed 23 Mar 2022 20:00:23 +0000
ROA not before: Wed 23 Mar 2022 20:00:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60721
IP address blocks: 45.13.190.0/24 maxlen: 24
45.13.191.0/24 maxlen: 24
45.151.3.0/24 maxlen: 24
5.181.84.0/24 maxlen: 24
5.181.85.0/24 maxlen: 24
45.144.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 134114078 (0x7fe6b1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 23 20:00:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b9be8e24919457c8bbf6bc309e419c65b0ddbcfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:52:27:54:e5:74:4d:de:aa:fa:df:57:70:08:
86:06:95:fe:1f:5a:49:29:fa:12:d0:ea:95:d8:e8:
e3:59:ab:34:6e:f7:32:4f:d1:70:df:27:4f:2e:17:
32:c0:f7:c0:7a:7d:b7:c6:5c:eb:7f:05:42:f6:cb:
e7:f1:9e:e9:de:b4:06:8e:03:ac:75:91:be:11:7a:
cb:1c:6c:d6:f7:c2:07:df:d7:e6:83:b4:16:b8:d6:
eb:6b:7c:7f:90:c7:66:41:6e:d2:62:03:49:c8:60:
de:4a:be:20:2d:61:64:ab:a0:56:27:95:cd:43:30:
5b:71:71:70:e5:b0:ba:3c:60:1a:12:23:d9:aa:a0:
8f:1a:80:75:cc:da:27:9e:54:0d:a1:5e:c0:ed:e9:
ec:8c:b2:3f:07:dd:32:be:7b:26:d2:6a:b4:e2:8b:
43:b9:cb:70:42:4b:e0:5a:81:d8:87:a5:45:19:d5:
20:be:f0:f5:f0:0a:41:e5:af:26:24:c5:68:b6:18:
45:df:72:bd:3a:d6:e6:b2:f4:64:3e:89:c7:69:a0:
fa:e0:fc:2c:ad:26:0b:db:f7:0d:a5:bb:1e:96:95:
67:f5:e5:94:0b:e2:b3:dd:b9:de:df:2a:6c:09:85:
84:b2:e9:a2:1d:42:3f:b2:ec:37:28:15:2c:9c:01:
4a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:BE:8E:24:91:94:57:C8:BB:F6:BC:30:9E:41:9C:65:B0:DD:BC:FE
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ub6OJJGUV8i79rwwnkGcZbDdvP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.84.0/23
45.13.190.0/23
45.144.212.0/24
45.151.3.0/24
Signature Algorithm: sha256WithRSAEncryption
17:9d:87:25:94:11:5c:66:52:07:50:b7:ac:cb:5d:a9:e9:74:
14:3b:76:0a:f0:23:cf:cc:5a:15:b7:8b:20:d4:87:6b:45:a2:
9e:73:38:cc:85:72:92:95:3e:da:d5:97:fc:b7:b6:2e:ce:f7:
00:49:93:cd:40:d5:fa:a7:ac:9e:5d:e8:ce:02:f6:2f:0f:52:
6e:31:f8:d3:d0:ea:d9:17:ec:d6:5b:f2:10:bc:27:ae:7a:fd:
75:e6:9e:38:35:82:88:f4:62:de:31:10:f8:01:c9:b6:f1:47:
77:75:8d:37:16:d5:70:aa:ea:63:fd:ee:b4:59:cd:a1:41:a4:
c0:54:84:bb:bf:74:53:38:83:bc:fc:df:c8:bc:a3:78:a7:88:
2b:b0:10:b4:2c:24:c7:4f:7a:f0:e0:f4:a0:49:c1:12:30:3f:
84:33:8f:1c:03:bc:03:2e:b7:be:0d:8d:83:87:30:f1:4e:54:
39:f7:46:50:1e:08:af:7f:5d:98:0a:e9:38:d6:01:7d:1a:04:
64:ad:02:61:fb:3f:a6:43:27:61:3f:f6:ad:5c:e0:87:7e:b9:
c2:44:38:1f:7f:71:6e:04:85:d0:7c:e5:04:99:94:30:4f:98:
2b:d7:18:b7:f0:2d:63:46:6a:c9:d9:ba:31:c6:17:6e:e2:af:
00:7b:f2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:21 2023 by rpki-client on console-ams.rpki-client.org