Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/vUUNIHinT75EhUeuBLCvdReqr6w.roa
File: vUUNIHinT75EhUeuBLCvdReqr6w.roa (raw, json)
Hash identifier: U2ATDzV6ht5azH15gs+IwvSA3dnemUFdUreMzUGRKPg=
Subject key identifier: BD:45:0D:20:78:A7:4F:BE:44:85:47:AE:04:B0:AF:75:17:AA:AF:AC
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 0184E8EA9C60324A9002FF6A9E314C58667E
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/vUUNIHinT75EhUeuBLCvdReqr6w.roa
Signing time: Tue 06 Dec 2022 19:30:00 +0000
ROA not before: Tue 06 Dec 2022 19:30:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 193.30.241.0/24 maxlen: 24
45.9.30.0/24 maxlen: 24
45.132.180.0/24 maxlen: 24
195.177.94.0/24 maxlen: 24
195.177.93.0/24 maxlen: 24
195.177.95.0/24 maxlen: 24
45.88.137.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:e8:ea:9c:60:32:4a:90:02:ff:6a:9e:31:4c:58:66:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Dec 6 19:30:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=bd450d2078a74fbe448547ae04b0af7517aaafac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b6:48:28:c7:89:4b:29:e1:96:3b:b2:34:b6:
6a:e9:a0:b3:4a:4d:17:75:4e:be:39:92:80:16:e6:
f6:6d:fb:05:74:bf:81:d9:fb:50:03:0d:6b:40:d4:
60:e9:b6:fe:92:08:e9:19:cc:00:5f:11:80:c0:55:
dc:f4:04:f1:60:b9:64:c0:ff:37:ab:3c:e8:b7:9c:
7d:17:74:72:3d:76:1c:d2:f2:6f:5e:f2:64:12:3c:
47:30:e7:74:78:03:50:d0:bb:7c:94:44:2b:55:d6:
35:0d:d1:b8:4b:f9:79:89:cc:92:ca:a6:ec:d9:b2:
48:6f:f8:9e:a8:9b:a3:16:36:cd:e4:d1:7e:b5:da:
86:6c:c0:58:34:a3:12:64:db:a0:3e:a3:2b:d1:76:
69:83:a6:86:2b:5b:84:cd:f8:bf:c4:b1:af:2a:78:
3f:ba:5d:70:42:5c:db:04:14:3a:92:d2:f1:c9:5e:
47:8b:59:31:b7:f5:70:15:42:99:b2:1a:fb:43:03:
f9:6b:41:b1:ea:74:2b:ca:d9:ec:04:47:2e:24:95:
b5:79:03:3e:a0:6a:9b:d2:a2:17:2f:1d:55:99:2f:
5b:a3:62:57:87:93:24:ec:fe:f8:c0:5b:e8:e2:ad:
82:60:0d:0a:a4:79:bd:2a:cd:23:7a:1d:13:76:3b:
a5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:45:0D:20:78:A7:4F:BE:44:85:47:AE:04:B0:AF:75:17:AA:AF:AC
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/vUUNIHinT75EhUeuBLCvdReqr6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.30.0/24
45.88.137.0/24
45.132.180.0/24
193.30.241.0/24
195.177.93.0-195.177.95.255
Signature Algorithm: sha256WithRSAEncryption
19:30:91:61:3d:39:10:60:93:4d:4e:18:33:cb:22:22:31:72:
bb:9c:66:96:52:d4:1b:82:bc:0d:9d:ee:cb:77:2f:92:19:0e:
41:21:eb:2d:01:de:6d:2a:a7:8c:0b:0e:dd:db:ee:8f:0f:72:
d6:cd:17:49:ef:fa:8a:39:3b:7d:2f:df:a5:c3:57:23:67:36:
2d:9d:3d:31:8c:2f:df:85:e8:f3:af:00:2e:92:28:a1:6c:1c:
3c:a3:06:d8:34:3d:e9:e5:da:04:c0:4f:7d:e3:10:17:b0:93:
e3:48:f4:61:88:64:95:74:26:51:51:e0:fa:f6:65:9b:0c:90:
f7:b0:fd:a1:df:73:71:00:3b:c6:ea:53:9b:24:15:c2:93:54:
0c:cd:08:c0:ce:f8:0d:59:70:2c:1d:67:03:0b:09:51:b2:3e:
bd:fa:73:0e:d2:d7:b2:a7:e3:44:c3:da:9e:9b:be:14:17:21:
d9:ac:99:3c:6f:64:dd:20:55:5a:37:e5:ac:52:55:2b:ad:e4:
ac:a6:95:44:d3:69:36:99:e1:a5:a9:c8:3a:73:1c:1e:37:52:
fe:e6:d4:96:49:4f:19:5e:e4:ec:c3:00:df:cb:45:40:eb:e0:
45:41:a2:31:94:a2:3f:6b:53:d3:fc:00:58:eb:6f:35:9b:07:
5d:e3:24:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:33 2023 by rpki-client on console-fra.rpki-client.org