Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/9QHXyq0f9BpoOqbxJF4nsrqw4zU.roa
File: 9QHXyq0f9BpoOqbxJF4nsrqw4zU.roa (raw, json)
Hash identifier: Rw0QsZ9Ka6NA011UaB8J+3kEepQ7Ff1FMBcqLhIMrTg=
Subject key identifier: F5:01:D7:CA:AD:1F:F4:1A:68:3A:A6:F1:24:5E:27:B2:BA:B0:E3:35
Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Certificate serial: 057FDED8
Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/9QHXyq0f9BpoOqbxJF4nsrqw4zU.roa
Signing time: Wed 04 May 2022 18:39:55 +0000
ROA not before: Wed 04 May 2022 18:39:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 45.136.196.0/24 maxlen: 24
45.136.197.0/24 maxlen: 24
45.136.198.0/24 maxlen: 24
45.136.199.0/24 maxlen: 24
176.97.64.0/23 maxlen: 23
176.97.70.0/23 maxlen: 23
176.97.68.0/23 maxlen: 23
176.97.66.0/23 maxlen: 23
185.87.148.0/23 maxlen: 23
5.61.62.0/23 maxlen: 23
5.61.60.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92266200 (0x57fded8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444
Validity
Not Before: May 4 18:39:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f501d7caad1ff41a683aa6f1245e27b2bab0e335
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:73:6f:d4:50:aa:11:37:e3:07:ed:83:47:b5:
5d:99:1d:27:0b:60:3e:45:88:5a:57:6b:50:1d:36:
71:43:ba:6a:21:e6:74:1d:4b:27:98:f5:79:a9:c9:
ab:a1:a5:30:92:6a:90:d1:14:43:ee:04:05:ae:8e:
1c:3f:89:2e:69:51:fd:5a:12:6f:23:e6:b9:9c:33:
c4:f8:bc:11:94:e2:20:59:7b:cb:47:b6:95:4f:f1:
16:fb:86:b3:30:01:46:54:c0:e6:98:26:92:b2:4c:
da:92:75:04:e1:f6:6d:21:8f:06:18:f8:38:63:af:
7b:e2:58:5d:d5:93:25:74:d5:ff:b5:b0:14:50:af:
53:a7:17:fd:9e:9f:af:8b:0e:4d:ec:ee:84:d1:b6:
ca:65:b2:93:3a:8d:af:c7:76:53:64:0f:fd:83:5b:
86:16:0a:71:1c:79:e4:7e:cf:eb:04:9a:64:3a:0a:
fa:06:0f:1d:ef:8a:97:5f:35:c5:03:1b:72:1e:fc:
ce:2c:aa:7b:e6:99:02:95:cc:e9:99:a3:41:33:7f:
20:f0:a2:28:8d:8d:61:6b:ff:7a:37:04:a5:a4:ae:
e1:9c:b7:a4:b4:ce:ca:19:44:9c:4c:f0:86:6d:ea:
e9:ba:75:af:7e:37:e7:80:53:a3:1b:ef:5e:04:95:
83:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:01:D7:CA:AD:1F:F4:1A:68:3A:A6:F1:24:5E:27:B2:BA:B0:E3:35
X509v3 Authority Key Identifier:
keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/9QHXyq0f9BpoOqbxJF4nsrqw4zU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.61.60.0/22
45.136.196.0/22
176.97.64.0/21
185.87.148.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:3f:f7:93:ac:bf:97:3e:3b:41:ea:00:a6:e7:77:0e:07:14:
4a:89:cd:32:2e:56:5a:f3:e7:56:a8:ad:c9:f2:08:69:b3:02:
98:7f:c5:00:a6:c3:0d:8d:9f:f4:77:5a:a9:75:63:ba:0b:16:
cf:d9:b1:fc:26:68:57:8f:c7:a7:84:61:ef:b5:07:ab:48:fa:
a9:a5:2b:98:46:0b:82:7e:dc:a6:88:d5:14:2f:8f:7a:81:3a:
d5:47:15:13:fd:66:28:db:fe:84:1b:6e:fc:8f:44:cb:ce:d6:
d7:e0:2f:89:bb:57:89:7b:c0:11:3b:cd:8c:22:de:7a:d5:a3:
96:a4:51:2e:20:19:eb:f0:da:56:64:b8:ef:4f:c2:bb:29:5b:
39:08:cf:e5:f2:f2:b5:89:88:fb:ea:fe:5a:7c:9b:43:94:9d:
dd:f5:78:91:9c:57:d4:e7:55:f6:16:ee:de:ca:d9:12:02:c9:
d1:20:59:80:88:e5:a2:f3:7a:60:7e:3a:40:af:d5:08:35:2b:
f2:72:48:6a:a2:9c:e5:9c:0a:5b:59:61:15:5a:1d:a9:af:c1:
e1:23:aa:ea:ef:5f:1e:a4:08:d0:e4:cb:9d:e1:41:f2:a9:c0:
7c:84:f8:7a:5f:37:e8:1b:92:38:ec:76:e2:00:32:0f:04:7b:
16:4d:11:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:57 2023 by rpki-client on console-fra.rpki-client.org