Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/n7gVJ_GuvY83hphyfq46nwl0-Yo.roa
File: n7gVJ_GuvY83hphyfq46nwl0-Yo.roa (raw, json)
Hash identifier: iOf2f8ysCuibgGC/h6faFU+H4lSDCnHa4eaGHGHPshY=
Subject key identifier: 9F:B8:15:27:F1:AE:BD:8F:37:86:98:72:7E:AE:3A:9F:09:74:F9:8A
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 15184501
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/n7gVJ_GuvY83hphyfq46nwl0-Yo.roa
Signing time: Thu 19 May 2022 18:10:30 +0000
ROA not before: Thu 19 May 2022 18:10:30 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207177
IP address blocks: 91.242.81.0/24 maxlen: 24
185.212.11.0/24 maxlen: 24
171.22.52.0/22 maxlen: 22
45.86.16.0/24 maxlen: 24
45.86.16.0/22 maxlen: 22
45.86.18.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 353912065 (0x15184501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: May 19 18:10:30 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=9fb81527f1aebd8f378698727eae3a9f0974f98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:74:6a:b1:bc:cc:36:b0:da:0d:c0:ef:b1:02:
cb:64:c8:dd:4f:04:31:a6:e3:73:80:6e:6d:c7:7f:
4f:b5:f2:b0:93:1f:8d:ec:2a:3d:48:78:5c:bf:ab:
63:0b:2c:81:64:fe:81:80:cf:5c:2e:d5:28:86:bb:
5a:35:23:89:4c:22:c9:8c:e0:ca:2d:23:6b:73:40:
7a:41:d2:ba:88:2f:19:f2:2d:fd:ce:b2:d5:cf:fe:
d6:49:f0:3d:14:6e:92:39:86:2e:1f:da:02:88:56:
21:22:17:36:c6:61:2d:05:f9:fc:3c:35:4f:9e:dd:
f8:3b:80:9e:50:7a:ab:7d:8f:90:21:22:1f:20:4f:
5f:ce:a0:ab:3c:26:89:3c:53:0a:83:c4:ee:08:92:
c5:42:33:91:40:26:18:94:a0:3e:a7:85:ba:c8:b4:
dc:0b:ed:b5:74:c1:9a:4e:79:c0:a8:b8:64:b7:8c:
a6:cd:4b:c9:fa:28:54:0f:eb:1d:75:63:04:87:17:
d6:87:64:09:66:de:3e:66:8b:c7:5a:43:0e:e3:72:
07:95:b7:50:0b:96:c6:9f:b6:c0:e4:e8:69:81:a7:
6c:6c:62:69:5b:81:ce:a6:a7:fa:63:52:e5:51:70:
82:51:c2:41:e5:3f:96:51:68:bf:9a:ce:00:b2:04:
9e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:B8:15:27:F1:AE:BD:8F:37:86:98:72:7E:AE:3A:9F:09:74:F9:8A
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/n7gVJ_GuvY83hphyfq46nwl0-Yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.16.0/22
91.242.81.0/24
171.22.52.0/22
185.212.11.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:38:63:a2:d9:ad:0f:fa:50:d5:b0:0f:31:e6:e5:77:9e:44:
8d:ef:9a:02:a5:87:e5:18:07:48:e3:54:6a:36:dc:d4:77:4f:
9c:3b:97:6e:b9:f8:92:cf:21:a5:c9:61:84:95:c7:66:85:ea:
3e:73:0c:56:a3:c1:5d:8b:20:13:f5:08:bb:f1:11:4d:38:e9:
16:3e:97:c8:d6:e1:6a:74:a9:66:0f:b9:de:70:7b:be:6c:4f:
07:ad:b9:c5:94:9d:b4:cc:51:1c:cc:51:af:17:42:47:52:78:
33:e4:f4:e3:0c:c2:ed:6a:c9:62:51:d1:3e:fc:14:3a:29:23:
58:68:f7:ca:2c:95:08:e9:e0:fd:74:b5:5c:dc:60:43:90:b1:
e9:d5:b3:a8:f4:c7:18:8d:47:04:c1:44:8f:c8:ec:b1:3f:54:
a4:b9:46:31:ae:65:32:bb:a7:8a:ea:3b:56:b7:49:90:82:9e:
3e:09:9e:35:7e:89:fc:2e:26:51:9c:f8:e0:97:09:b7:1d:2b:
8b:dd:af:72:60:89:10:f4:47:a8:24:a2:c5:55:48:31:44:37:
8d:ae:80:dd:a1:72:ad:a0:17:ac:f9:29:1e:19:88:de:3d:6b:
65:52:17:82:21:d0:43:c0:f9:4c:82:9f:e4:8a:f7:82:cf:dc:
61:96:13:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:50 2023 by rpki-client on console-fra.rpki-client.org