Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/eRQ-o54uYsRDMamLkzc7YFAO6kg.roa
File: eRQ-o54uYsRDMamLkzc7YFAO6kg.roa (raw, json)
Hash identifier: +Kbl8h/Tg7DO8j986nCssh43cWyWljJmegfqizwE9Sg=
Subject key identifier: 79:14:3E:A3:9E:2E:62:C4:43:31:A9:8B:93:37:3B:60:50:0E:EA:48
Certificate issuer: /CN=686d1840493eee345f8c02ad8aa7f0f0f41ba450
Certificate serial: 0183D6AA1E552B5EF68F999C9146926F70F2
Authority key identifier: 68:6D:18:40:49:3E:EE:34:5F:8C:02:AD:8A:A7:F0:F0:F4:1B:A4:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aG0YQEk-7jRfjAKtiqfw8PQbpFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/eRQ-o54uYsRDMamLkzc7YFAO6kg.roa
Signing time: Fri 14 Oct 2022 13:23:36 +0000
ROA not before: Fri 14 Oct 2022 13:23:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208988
IP address blocks: 185.44.4.0/22 maxlen: 22
37.10.110.0/23 maxlen: 23
85.190.184.0/21 maxlen: 21
91.208.17.0/24 maxlen: 24
185.123.4.0/22 maxlen: 22
185.195.120.0/22 maxlen: 22
37.10.68.0/23 maxlen: 23
94.126.36.0/22 maxlen: 22
31.214.150.0/23 maxlen: 23
185.50.108.0/22 maxlen: 22
62.221.228.0/22 maxlen: 22
185.125.232.0/22 maxlen: 22
128.0.120.0/23 maxlen: 23
85.222.208.0/20 maxlen: 20
2a01:71a0::/32 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:d6:aa:1e:55:2b:5e:f6:8f:99:9c:91:46:92:6f:70:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686d1840493eee345f8c02ad8aa7f0f0f41ba450
Validity
Not Before: Oct 14 13:23:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=79143ea39e2e62c44331a98b93373b60500eea48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:af:73:66:23:ac:e7:86:57:8a:93:37:29:9a:
18:f8:62:8b:3e:18:d1:07:fd:36:d5:7a:d5:51:a4:
f2:e1:62:49:0e:aa:0f:2d:02:02:a4:19:f2:01:ce:
0a:b0:ae:ed:f5:bb:ed:f9:2d:72:5b:58:68:bd:70:
df:75:72:1f:ef:ce:1b:53:6d:a2:e8:9b:02:55:8b:
5f:85:47:62:5f:25:70:6f:4f:b1:4d:97:ea:3e:6b:
0a:03:1e:33:b0:0c:22:b4:9d:f2:93:77:37:0a:2b:
db:db:03:a0:8c:5d:e6:32:c7:de:28:7b:43:4c:af:
0a:63:04:6f:d3:a6:ae:2b:1f:22:e1:27:54:bb:72:
74:c5:dc:7c:aa:7c:b2:e7:19:62:81:1c:42:1b:54:
8f:d2:25:58:15:8b:37:39:7c:1a:a5:06:45:0c:ee:
1c:e4:43:85:8a:62:2d:3d:d8:be:90:16:c9:78:75:
88:31:a7:55:35:72:62:40:00:96:7d:29:1e:b4:7a:
c3:35:c8:2b:5e:9d:db:5b:a5:13:3a:53:ba:00:f6:
d4:cb:55:fd:cd:17:cc:01:65:df:13:f6:c1:1c:0d:
8c:eb:07:86:df:1d:5c:46:fa:be:99:f2:63:ab:41:
35:9b:97:98:2d:e1:02:39:48:f7:be:6e:d8:d7:1e:
45:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:14:3E:A3:9E:2E:62:C4:43:31:A9:8B:93:37:3B:60:50:0E:EA:48
X509v3 Authority Key Identifier:
keyid:68:6D:18:40:49:3E:EE:34:5F:8C:02:AD:8A:A7:F0:F0:F4:1B:A4:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aG0YQEk-7jRfjAKtiqfw8PQbpFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/eRQ-o54uYsRDMamLkzc7YFAO6kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e42ecf-78ff-4b58-8760-826d05ccfe25/1/aG0YQEk-7jRfjAKtiqfw8PQbpFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.214.150.0/23
37.10.68.0/23
37.10.110.0/23
62.221.228.0/22
85.190.184.0/21
85.222.208.0/20
91.208.17.0/24
94.126.36.0/22
128.0.120.0/23
185.44.4.0/22
185.50.108.0/22
185.123.4.0/22
185.125.232.0/22
185.195.120.0/22
IPv6:
2a01:71a0::/32
Signature Algorithm: sha256WithRSAEncryption
6e:82:93:96:53:bb:eb:25:23:77:b9:91:6d:0c:2f:bb:3b:e4:
48:a3:83:d7:9c:de:5f:ac:1c:9f:1a:d3:63:7e:4e:d1:7b:c1:
12:32:46:4d:06:13:2e:7a:e2:cc:3e:03:61:b3:3e:14:13:d5:
aa:b7:85:a4:c0:65:ef:54:67:1d:c3:90:63:5f:ce:86:bf:76:
41:50:e7:8b:60:f3:96:09:d6:95:72:63:86:59:36:4b:90:20:
fc:3c:c6:ff:92:29:6b:ed:79:7c:3a:8d:c0:36:ff:56:9b:ed:
a4:4c:52:4c:52:53:f5:a0:79:1e:21:66:71:23:78:8d:6e:61:
f0:8e:f1:8c:3e:60:22:02:e3:07:25:53:fd:e5:65:b8:8a:70:
f0:9a:9e:3c:6a:76:f2:68:b1:81:8c:ee:3a:f9:01:5b:d8:84:
91:44:0f:94:1e:71:fc:8e:e7:88:b0:a4:b3:19:80:ab:a6:58:
63:02:f7:26:78:55:d1:c3:f7:88:0c:3c:29:6f:70:9b:96:e4:
66:5d:b7:2b:26:62:f9:02:71:86:71:3f:bf:70:af:a7:76:07:
be:91:f9:ef:e3:1b:7a:a8:6b:42:8d:2b:df:d3:07:32:b2:79:
dc:90:9c:69:8d:57:42:57:7a:fd:2f:ff:ba:ea:a4:c8:12:da:
d1:c9:d4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:49 2024 by rpki-client on console-fra.rpki-client.org