Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/9g-AhLRBJF9aiVT-BRnZEnvpFH4.roa
File: 9g-AhLRBJF9aiVT-BRnZEnvpFH4.roa (raw, json)
Hash identifier: wAgiSAj7kzcPIllFj4QFnM65gLEG3j86yLpx6wJf0V0=
Subject key identifier: F6:0F:80:84:B4:41:24:5F:5A:89:54:FE:05:19:D9:12:7B:E9:14:7E
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 08F40895
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/9g-AhLRBJF9aiVT-BRnZEnvpFH4.roa
Signing time: Tue 07 Jun 2022 10:05:03 +0000
ROA not before: Tue 07 Jun 2022 10:05:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 176.105.229.0/24 maxlen: 24
176.105.228.0/22 maxlen: 24
91.239.148.0/23 maxlen: 24
45.132.80.0/22 maxlen: 24
91.244.199.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150210709 (0x8f40895)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jun 7 10:05:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f60f8084b441245f5a8954fe0519d9127be9147e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:27:d5:5d:af:7b:4e:fc:2b:66:fd:f6:d9:6f:
85:aa:0a:b0:8f:5b:c8:19:41:83:76:31:8c:dc:aa:
8c:5e:a9:b0:05:67:55:df:2a:cc:33:db:2a:b5:b8:
83:8e:bc:74:ae:ef:d3:f1:62:63:71:f6:e4:48:c6:
67:c4:7a:b2:78:9e:03:19:c1:6b:e5:a1:72:e9:a6:
40:41:96:89:f4:95:a9:b8:71:7f:45:b9:3e:a0:59:
9c:f1:6c:93:af:2c:e5:da:39:ea:e3:68:bd:3c:7b:
b9:0b:83:69:07:ea:18:7e:73:96:18:31:24:51:0e:
85:7e:71:33:79:4b:10:4b:56:d3:ef:6e:3e:cd:30:
bf:f8:8e:93:52:1e:23:b6:52:23:0c:50:a3:a2:2f:
b8:f7:ed:1b:c5:ed:1a:00:52:07:9e:71:fe:aa:17:
2d:19:31:4e:64:e2:59:43:e9:ef:09:2f:4d:c2:33:
dc:46:6c:34:08:44:c2:de:ae:2e:8f:9f:9c:d2:78:
90:7f:a0:ee:43:c9:02:5c:d0:d4:fc:77:7c:65:d0:
20:cc:5b:02:e9:2c:a7:4c:3c:20:51:42:36:45:99:
dc:20:f7:5c:46:2c:f8:cf:57:46:ee:af:93:92:fe:
54:5d:9e:0e:cf:14:b4:5a:ed:c5:c8:1d:7b:4a:98:
b8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0F:80:84:B4:41:24:5F:5A:89:54:FE:05:19:D9:12:7B:E9:14:7E
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/9g-AhLRBJF9aiVT-BRnZEnvpFH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.80.0/22
91.239.148.0/23
91.244.199.0/24
176.105.228.0/22
Signature Algorithm: sha256WithRSAEncryption
04:dc:be:94:33:67:bd:17:17:6a:cc:f2:a6:4d:26:57:ea:93:
ca:df:dc:c7:a6:60:06:f0:d0:69:24:09:97:d3:69:38:d4:ce:
95:c0:10:4a:f0:6e:73:ef:6d:4a:ad:45:2b:cd:7d:10:17:21:
20:dd:62:78:24:59:7b:6c:07:82:5b:4c:07:ac:ab:c0:51:47:
02:3e:22:78:bf:cd:45:b9:c1:19:d1:47:72:b4:00:b7:2d:ff:
8a:25:e7:97:f5:0f:72:56:89:55:c8:43:8a:9b:fe:6f:e7:00:
f8:8a:d7:6e:42:58:2c:61:9d:3e:18:3a:0b:b4:96:b1:6e:dd:
99:0d:f7:13:18:ce:03:52:07:ac:73:c3:f6:b7:c4:6a:59:97:
ab:48:c7:50:bd:af:da:ad:91:50:ba:ed:7d:e9:8f:45:89:dd:
4c:19:3f:66:58:d5:0f:05:1b:a5:96:5c:0a:a7:81:2c:9b:c1:
51:34:de:9b:81:77:74:09:de:6e:00:88:39:7c:53:be:78:48:
bb:db:ee:8d:14:83:2d:40:de:cf:f0:71:df:7d:c6:b7:1a:df:
66:2b:c9:6d:83:9e:19:e8:32:b2:0f:89:a4:d6:36:a4:bf:4d:
3f:1f:d1:ed:e4:b6:54:da:bd:f4:2b:47:46:10:2c:1f:99:77:
5c:4d:55:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:12 2023 by rpki-client on console-ams.rpki-client.org