Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Y-EvbysVgbKRl_EhdyS1iMRp_Ww.roa
File: Y-EvbysVgbKRl_EhdyS1iMRp_Ww.roa (raw, json)
Hash identifier: fUi1uG4WysuLy5flePtknv8lAoSych0C4S+o51K1MtA=
Subject key identifier: 63:E1:2F:6F:2B:15:81:B2:91:97:F1:21:77:24:B5:88:C4:69:FD:6C
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0770D995
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Y-EvbysVgbKRl_EhdyS1iMRp_Ww.roa
Signing time: Wed 05 Jan 2022 14:08:01 +0000
ROA not before: Wed 05 Jan 2022 14:08:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 176.105.228.0/22 maxlen: 24
45.137.16.0/22 maxlen: 24
45.150.52.0/23 maxlen: 24
81.28.252.0/22 maxlen: 24
95.214.176.0/22 maxlen: 24
91.239.148.0/23 maxlen: 24
91.238.92.0/23 maxlen: 24
212.115.124.0/22 maxlen: 24
45.132.80.0/22 maxlen: 24
91.244.196.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 124836245 (0x770d995)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 5 14:08:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=63e12f6f2b1581b29197f1217724b588c469fd6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:39:5b:22:91:3e:75:99:84:e6:45:d1:7f:0a:
c6:a1:05:fe:62:e0:09:39:22:98:ab:7a:e7:a3:fa:
94:66:ab:ac:3f:d4:c5:a6:84:cd:b9:e9:e6:87:b2:
fc:d2:fe:a8:2d:81:03:cd:45:89:24:2d:fa:99:78:
26:6f:9c:e0:2b:d9:15:17:d1:eb:d0:2c:4c:f2:7e:
a0:61:aa:a9:3c:0b:81:07:f4:53:60:24:94:a5:ed:
26:a3:68:3a:b9:57:85:a1:b8:73:76:a4:0e:67:aa:
70:f4:69:ea:da:96:3d:a1:ce:28:ad:12:aa:45:48:
7d:f2:4e:d4:ca:e6:9e:98:47:4a:78:a7:73:fa:fd:
9b:d8:a7:f6:a2:d8:78:95:c4:64:23:90:85:05:89:
94:aa:1e:d7:16:6e:6b:f8:e8:ab:1d:a0:98:a5:7f:
b7:76:84:f4:c3:07:f0:d2:2e:19:64:3b:e7:e6:f6:
13:78:57:27:da:60:cb:9b:75:1e:47:00:c9:5a:1d:
24:29:77:2f:1d:41:ae:7c:e0:3b:ec:cc:bf:5d:9b:
fc:6f:78:c4:bc:b5:76:9c:7b:a5:95:9d:9a:63:73:
e8:b3:13:64:ee:e2:cb:d5:00:62:13:97:bf:0b:f9:
05:0b:5b:2c:83:f1:0c:3f:e8:a1:e6:9e:6b:38:24:
c9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E1:2F:6F:2B:15:81:B2:91:97:F1:21:77:24:B5:88:C4:69:FD:6C
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/Y-EvbysVgbKRl_EhdyS1iMRp_Ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.80.0/22
45.137.16.0/22
45.150.52.0/23
81.28.252.0/22
91.238.92.0/23
91.239.148.0/23
91.244.196.0/22
95.214.176.0/22
176.105.228.0/22
212.115.124.0/22
Signature Algorithm: sha256WithRSAEncryption
03:ec:5c:69:99:26:65:93:2b:c3:da:f0:79:64:15:7f:e0:8c:
5d:65:56:68:3f:bf:46:6a:2c:b6:fb:5c:80:34:a9:6b:02:1a:
fe:f6:1c:e7:db:90:ef:8c:e7:36:fa:4f:d5:fd:ba:f7:36:e6:
8e:34:f8:9c:0c:0d:d9:2a:ec:4e:de:07:2b:7b:72:19:05:c7:
f3:65:4d:d8:81:ba:42:5e:da:84:b4:b7:d6:02:e5:c1:de:a2:
b1:0d:bd:08:60:80:b6:62:3f:37:8c:18:87:c5:d3:f8:e8:6c:
1c:d9:6b:a4:47:41:15:c7:15:39:00:b3:56:70:6c:10:23:f9:
17:7e:8c:b2:dd:c3:63:be:4d:01:ce:66:5a:a1:f3:2b:0e:f6:
cb:f4:14:ce:3b:02:e6:cd:6b:97:a3:2e:aa:5d:58:51:a1:af:
ea:44:8c:e4:d6:b2:f5:22:89:3b:68:03:a7:a1:7a:9a:08:7a:
e5:0e:2f:11:7c:c3:38:66:bc:5f:34:1b:b8:01:90:1b:92:7a:
79:d2:82:cd:f7:57:3b:eb:b8:6d:d5:e5:f2:13:13:68:af:f8:
cb:31:57:80:1c:00:c1:f5:c4:29:59:a0:92:ee:3b:2c:96:c9:
d7:e1:c2:fe:81:e7:68:88:d8:c5:5d:44:3b:72:aa:bf:cd:d1:
34:24:37:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:19 2023 by rpki-client on console-fra.rpki-client.org