Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/mXxrfW2CwJpJFhd6JndAIFJtQYQ.roa
File: mXxrfW2CwJpJFhd6JndAIFJtQYQ.roa (raw, json)
Hash identifier: L1tJ3S9LWFnqpl37ILPdbGtbWiFHBANXQDFVXx+TIx4=
Subject key identifier: 99:7C:6B:7D:6D:82:C0:9A:49:16:17:7A:26:77:40:20:52:6D:41:84
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 04123454
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/mXxrfW2CwJpJFhd6JndAIFJtQYQ.roa
Signing time: Fri 11 Mar 2022 10:39:01 +0000
ROA not before: Fri 11 Mar 2022 10:39:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205090
IP address blocks: 185.112.102.0/24 maxlen: 24
185.112.101.0/24 maxlen: 24
185.112.103.0/24 maxlen: 24
45.9.73.0/24 maxlen: 24
45.9.75.0/24 maxlen: 24
193.162.143.0/24 maxlen: 24
185.105.90.0/24 maxlen: 24
185.105.88.0/24 maxlen: 24
185.105.91.0/24 maxlen: 24
185.105.89.0/24 maxlen: 24
185.221.162.0/24 maxlen: 24
45.95.202.0/24 maxlen: 24
45.95.203.0/24 maxlen: 24
45.90.216.0/24 maxlen: 24
45.90.218.0/24 maxlen: 24
45.90.217.0/24 maxlen: 24
45.90.219.0/24 maxlen: 24
84.252.73.0/24 maxlen: 24
84.252.75.0/24 maxlen: 24
84.252.74.0/24 maxlen: 24
185.128.105.0/24 maxlen: 24
45.89.65.0/24 maxlen: 24
85.209.2.0/24 maxlen: 24
185.103.109.0/24 maxlen: 24
185.128.107.0/24 maxlen: 24
185.128.106.0/24 maxlen: 24
193.168.227.0/24 maxlen: 24
185.217.198.0/24 maxlen: 24
185.217.199.0/24 maxlen: 24
2a09:5302::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68301908 (0x4123454)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Mar 11 10:39:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=997c6b7d6d82c09a4916177a26774020526d4184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:04:f9:c1:13:14:6e:61:e6:47:50:cc:5e:a5:
8c:07:28:6c:4d:bc:87:dc:d4:7f:bd:1b:37:a3:a6:
67:29:26:59:fa:97:43:cd:f6:2c:cb:ed:6b:57:83:
04:1b:dc:b9:a2:84:9b:53:05:b0:b3:65:e3:9d:92:
84:a5:be:aa:37:1f:07:5d:b3:9c:d4:41:1c:87:2f:
6f:a6:0b:ce:c2:9a:54:40:3f:db:6c:8a:98:74:68:
4e:a9:8b:ae:e7:ea:9f:37:39:bd:f4:3b:d3:8a:48:
c5:ab:91:4b:e9:20:39:f3:4e:d6:33:07:b9:84:49:
24:25:f2:2b:b1:64:59:36:bf:73:2a:8d:7c:68:7d:
56:d5:50:e3:c1:bb:f8:f6:ea:79:cd:8a:5a:18:0a:
fe:20:40:a7:54:a8:9d:2c:96:b3:3c:88:76:61:51:
84:66:66:2f:5e:fd:f8:bd:09:78:55:65:aa:dd:9f:
1b:9c:fe:d0:7e:e3:e0:67:91:b7:c6:5c:74:fd:67:
a7:a3:4e:fc:8a:95:d4:74:90:38:13:0f:04:bb:aa:
eb:86:b9:98:fb:bf:1e:5b:4a:2c:cd:8e:56:d7:67:
34:ce:1d:82:08:93:a6:4a:9c:4c:f6:59:3d:78:74:
88:e8:5e:7d:c6:29:73:d0:66:52:86:04:e5:04:d0:
e5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7C:6B:7D:6D:82:C0:9A:49:16:17:7A:26:77:40:20:52:6D:41:84
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/mXxrfW2CwJpJFhd6JndAIFJtQYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.9.73.0/24
45.9.75.0/24
45.89.65.0/24
45.90.216.0/22
45.95.202.0/23
84.252.73.0-84.252.75.255
85.209.2.0/24
185.103.109.0/24
185.105.88.0/22
185.112.101.0-185.112.103.255
185.128.105.0-185.128.107.255
185.217.198.0/23
185.221.162.0/24
193.162.143.0/24
193.168.227.0/24
IPv6:
2a09:5302::/32
Signature Algorithm: sha256WithRSAEncryption
54:99:58:95:05:dc:bc:82:bf:55:d5:27:53:84:04:45:43:30:
c4:e4:10:0a:94:6f:e4:07:3a:55:ab:d1:86:45:58:3f:58:82:
e4:5e:f7:f9:04:65:03:67:68:3b:30:7e:28:19:8d:61:0d:0a:
7b:4d:cc:b2:58:e8:df:5b:8a:3b:b3:7b:f3:29:b7:92:b9:4a:
f6:5b:40:65:97:b3:7f:e3:bc:79:4d:0b:32:aa:a4:7c:0a:72:
db:d5:13:fd:39:5a:49:38:ca:bf:d7:76:a2:03:07:07:a6:e6:
73:e1:96:61:c8:9d:d9:1f:93:2a:03:43:8b:b0:65:00:dd:04:
77:94:2f:4e:d4:fa:a3:6e:cb:9b:30:7b:2e:46:8b:21:5f:f1:
b9:55:23:37:58:15:07:73:e8:4d:61:8b:ed:4f:af:7c:11:9f:
e6:dc:2f:c6:e4:6d:c7:d8:ae:48:b6:14:94:30:e2:d4:d2:d7:
08:24:aa:23:b8:e4:7b:e7:ac:28:23:c5:e0:d2:e6:5f:3a:60:
1c:fb:4a:55:b0:6b:3e:df:e9:9d:86:92:03:38:15:59:eb:38:
47:99:41:52:b2:cc:f5:4b:45:22:7b:f4:9f:24:b6:7b:69:1f:
69:60:de:b7:da:c0:e3:f6:1f:8c:69:7b:4a:b3:2f:8c:7c:a5:
69:47:b3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:11 2024 by rpki-client on console-ams.rpki-client.org