Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/N9cG2-O03r1zUyOFt41XnM6MWmE.roa
File: N9cG2-O03r1zUyOFt41XnM6MWmE.roa (raw, json)
Hash identifier: U7ZQYjHtYoThzIq6lJNIabHntmLDsuRGIt/lyOU2v5Q=
Subject key identifier: 37:D7:06:DB:E3:B4:DE:BD:73:53:23:85:B7:8D:57:9C:CE:8C:5A:61
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 19BCF642
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/N9cG2-O03r1zUyOFt41XnM6MWmE.roa
Signing time: Fri 15 Apr 2022 12:36:40 +0000
ROA not before: Fri 15 Apr 2022 12:36:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 54600
IP address blocks: 45.81.236.0/22 maxlen: 32
45.135.220.0/22 maxlen: 32
45.12.234.0/24 maxlen: 32
45.12.235.0/24 maxlen: 32
45.12.162.0/24 maxlen: 32
45.15.37.0/24 maxlen: 32
45.15.36.0/24 maxlen: 32
45.15.36.0/23 maxlen: 32
185.253.249.0/24 maxlen: 24
45.83.252.0/23 maxlen: 32
45.83.253.0/24 maxlen: 32
45.83.252.0/24 maxlen: 32
45.82.204.0/23 maxlen: 32
45.94.164.0/22 maxlen: 24
185.182.63.0/24 maxlen: 24
79.143.50.0/24 maxlen: 24
185.240.236.0/22 maxlen: 24
45.128.28.0/22 maxlen: 24
45.81.11.0/24 maxlen: 32
45.81.10.0/24 maxlen: 32
45.135.100.0/22 maxlen: 24
45.14.47.0/24 maxlen: 32
185.172.144.0/24 maxlen: 24
45.130.74.0/24 maxlen: 24
194.49.113.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 431814210 (0x19bcf642)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Apr 15 12:36:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=37d706dbe3b4debd73532385b78d579cce8c5a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cf:01:c0:5a:2d:92:c1:bd:72:41:49:2e:d4:
9b:e6:2a:0f:3e:f8:64:1c:7f:b9:a6:bd:cd:42:dd:
53:f9:58:e7:be:49:63:5e:25:70:77:d4:4e:10:65:
75:5c:c1:bc:23:5d:56:29:eb:b8:91:95:50:49:65:
2b:6a:c0:a3:e0:e5:68:b1:14:f2:21:3b:47:cc:bc:
4b:72:29:85:70:19:e8:93:99:15:33:3b:50:72:60:
d6:6d:a4:2f:0a:ed:97:83:8b:fd:53:0d:ce:92:b4:
ed:42:a7:fc:ec:55:a8:0a:b6:d4:23:e6:b6:f8:ef:
89:00:b8:66:0b:ab:fa:37:f8:d2:93:3a:09:bc:82:
37:c8:bc:9c:5b:42:02:dd:53:8f:f8:f0:6c:ac:af:
0f:17:bb:15:1a:57:6f:00:94:a0:67:ca:94:f9:41:
14:70:40:4e:b4:bd:55:0e:3d:a9:30:5f:56:17:53:
dd:96:34:23:21:b5:1d:70:8c:d1:75:e1:41:1f:14:
f9:6f:f4:37:82:73:be:c6:ec:53:65:7e:24:6a:50:
d9:ea:4f:39:02:4f:95:c5:dd:cf:4a:ae:6f:b6:84:
72:5c:24:f7:cb:f6:46:c7:e0:77:66:e6:c6:09:29:
1f:c2:39:88:8c:ce:9c:90:84:93:2e:ca:a5:73:ed:
e0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D7:06:DB:E3:B4:DE:BD:73:53:23:85:B7:8D:57:9C:CE:8C:5A:61
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/N9cG2-O03r1zUyOFt41XnM6MWmE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.162.0/24
45.12.234.0/23
45.14.47.0/24
45.15.36.0/23
45.81.10.0/23
45.81.236.0/22
45.82.204.0/23
45.83.252.0/23
45.94.164.0/22
45.128.28.0/22
45.130.74.0/24
45.135.100.0/22
45.135.220.0/22
79.143.50.0/24
185.172.144.0/24
185.182.63.0/24
185.240.236.0/22
185.253.249.0/24
194.49.113.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:bd:f0:48:d6:d1:8e:42:53:67:25:a0:fa:8b:0b:a2:99:2c:
fb:95:5a:4e:7a:43:45:9a:99:be:4d:89:04:11:1b:4f:e9:f0:
cc:91:ab:3a:3d:6e:c3:13:24:d2:d9:fe:ca:c8:00:3f:c6:8e:
74:85:33:01:81:02:9d:3f:e9:8e:ef:49:9a:3e:5d:29:c7:2b:
3a:85:2e:f2:0a:9a:fe:7c:cc:56:b2:2c:b8:73:78:e8:05:6e:
77:22:f5:18:38:53:a0:96:31:d3:2f:8f:70:ae:b3:7c:49:93:
8b:35:e4:7f:ac:0c:2e:f5:50:46:83:a9:a4:b1:5c:d0:8f:4a:
ac:ef:a4:58:b6:e4:f5:69:ac:89:98:00:56:6e:e6:22:94:3d:
86:f9:07:1a:41:a7:d6:1b:0b:54:63:bc:17:94:1c:c7:b9:b1:
ec:bf:67:72:01:44:72:3f:59:db:6f:2d:c3:98:3f:c0:ce:e4:
7a:d3:1d:14:74:f6:48:c4:2c:57:19:23:4d:4b:81:f5:93:82:
fc:dd:75:d0:ba:7c:6b:ce:d3:a7:bb:92:c6:95:a1:7e:41:df:
0c:16:e9:5d:ff:e4:1c:dc:d4:e4:fe:55:ba:ac:3c:fe:ee:f6:
a0:e4:84:ef:cc:98:70:b6:06:ce:e4:cc:f4:04:33:51:45:e0:
b0:c1:7f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:09 2023 by rpki-client on console-ams.rpki-client.org